last executing test programs: 25m7.900493399s ago: executing program 32 (id=95): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x72) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="98cabca5", 0x4) 21m38.090497872s ago: executing program 33 (id=1534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 20m36.769517818s ago: executing program 34 (id=1774): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 15m10.499982188s ago: executing program 4 (id=2986): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x40000000, 0xc4, 0x1, 0x8, 0x9, 0x95, 0xd39}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x18, r3, 0x9c2f0f67201acf05, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0xc0000001) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, 0x0) socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 15m10.31470069s ago: executing program 4 (id=2991): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000005}, 0x4000) 15m9.430151762s ago: executing program 4 (id=2994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 15m9.000066067s ago: executing program 4 (id=2996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000240), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000050000009500000000000000c3492895246348bf79855db116f785cc6b65"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create(0x100) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x600) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000380)={0x90000004}) 15m8.832166807s ago: executing program 4 (id=3000): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x1d8, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0xe1ad, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 15m7.269658729s ago: executing program 4 (id=3006): r0 = gettid() timer_create(0x2, &(0x7f0000000280)={0x0, 0x13, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) tkill(r1, 0x6) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 14m51.722259906s ago: executing program 35 (id=3006): r0 = gettid() timer_create(0x2, &(0x7f0000000280)={0x0, 0x13, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) tkill(r1, 0x6) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 8m48.492961552s ago: executing program 7 (id=4001): write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0014f9e4", 0xb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)=""/144, 0x90}], 0x1, 0x5, 0x2, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x9, 0xfffffffffffffffd, 0x0, 0xd, 0xe2, 0x8, 0xf40, 0x9, 0xc591, 0x2, 0x8, 0x1, 0x100, 0x80000004000000, 0x2001a], 0x80a0000, 0x2010d3}) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{0xb2d, 0x0, 0x9}, {0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8m48.375590609s ago: executing program 7 (id=4002): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) sendto$inet6(r4, &(0x7f0000000580)='\a', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) shutdown(r4, 0x1) 8m47.647175792s ago: executing program 7 (id=4004): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 8m46.255521824s ago: executing program 7 (id=4009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x5, 0x1, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4c1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 8m44.720932434s ago: executing program 7 (id=4017): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r3}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}], 0x1) sendmsg$nl_route(r4, 0x0, 0x8000) 8m42.625556888s ago: executing program 7 (id=4023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 8m26.471076081s ago: executing program 36 (id=4023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 5m16.202807189s ago: executing program 0 (id=4507): r0 = socket$inet(0x2b, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$getenv(0x4201, 0x0, 0x6, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x6, 0x800, 0xffffffffffffffff, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x8600) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x1, 0x349, 0x0, 0x4, 0x85}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x480, 0x0, 0x0) 5m16.160683742s ago: executing program 0 (id=4509): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x8d87a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000140)=0x200000) 5m15.0056713s ago: executing program 0 (id=4511): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x11a, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 5m12.244546062s ago: executing program 0 (id=4516): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r0, 0x89e1, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) 5m10.890958412s ago: executing program 0 (id=4519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) rt_sigqueueinfo(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x11, 0x2, 0x18d9}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) 5m9.867334272s ago: executing program 0 (id=4524): openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 4m53.549645134s ago: executing program 37 (id=4524): openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 3m26.747087723s ago: executing program 3 (id=4776): openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 3m19.50548162s ago: executing program 3 (id=4791): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 3m18.110694472s ago: executing program 3 (id=4793): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/150, 0x96}], 0x1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x9, 0xfffffff6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000300)='*', 0x1}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) socket$inet6(0xa, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) 3m17.927718293s ago: executing program 3 (id=4796): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x11a, 0x16) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 3m14.333004165s ago: executing program 3 (id=4803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$cgroup_devices(r6, 0x0, 0xc) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 3m12.347971522s ago: executing program 3 (id=4808): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000140)={[{@dax_never}, {@orlov}, {@dax_always}, {@block_validity}, {@nolazytime}]}, 0x1, 0x496, &(0x7f0000000a40)="$eJzs3VFrW2UfAPD/Sdu93da97d53F3sH7xxu0g1d0q5uK17MCaJXA3Xe19qmpTRtSpNuaxnS4QcQRFTwyitvBD+AIPsIIgz0wjsRUUQ3vfBCjSQ92WZN2oJtDza/Hzw7z3NOkv//WZonefIccgLoWCci4nJEdEXEmYjoT/fn0hKra6V+u3t3b07USxK12tUfkkjSfc3HStLtwfRuvRHx0vMRryZ/jVtZXpkdL5WKi2m7UJ1bKFSWV87OzI1PF6eL8yMjwxdGL46eHx3atr5eevabt9/44LlLnzxx/aux706/Vk+rL0384X5sp7Wu9zT+L5q6I2JxJ4JloCvtT0/WiQAAsCVHIuI/EfFo4/N/f3Q1Ps0BAAAAe0nt6b74NYmoAQAAAHtWrnEObJLLp+f79kUul8+vncN7JA7kSuVK9fGp8tL85Nq5sgPRk5uaKRWH0nOFB6InqbeHG/UH7XPr2iMRcTgi3urf32jnJ8qlyay//AAAAIAOcXDd/P/n/rX5PwAAALDHDGSdAAAAALDj0vn/l1nnAQAAAOwc6/8AAACwp71w5Uq91JrXv568trw0W752drJYmc3PLU3kJ8qLC/npcnm68Zt9c5s9XqlcXngy5pduFKrFSrVQWV4ZmysvzVfHGtf1Hiu6TjQAAADsvsOP3P4iiYjVp/Y3St2+9Ji5OuxtuawTADLTlXUCQGa6s04AyIw5PpBscry33YFPtz8XAABgZwz+z/o/dCrr/9C5rP9D57L+D53LHB+w/g8AAHtfX6MkuXy6FtgXuVw+H3GocVmAnmRqplQcioh/R8Tn/T3/qreHs04aAAAAAAAAAAAAAAAAAAAAAAAAAP5harUkagAAAMCeFpH7Nkmv/zXYf6pv/fcD+5Jf+hvbiLj+3tV3boxXq4vD9f0/3t9ffTfdfy6LbzAAAACA9Zrz9OY8HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC20727NyeaZTfjfv9MRAy0it8dvY1tb/RExIGfkuh+6H5JRHRtQ/zVWxFxtFX8pJ5WDKRZrI+fi4j9Gcc/uA3xoZPdro8/l1u9/nJxorFt/frrTsvf1X78y90f/7rajH+Hthjj2J2PCm3j34o41t16/GnGT9rEP7nF+K+8vLLS7ljt/YjBlu8/yZ9iFapzC4XK8srZmbnx6eJ0cX5kZPjC6MXR86NDhamZUjH9t2WMN///8e8b9f9Am/gDm/T/1Bb7/9udG3f/u0H80ydbP/9HN4hf/5t4LH0fqB8fbNZX1+oPO/7hZ8c36v9km/5v9vyf3mL/z7z4+tdbvCkAsAsqyyuz46VScVFFRUXlfiXrkQkAANhuDz70Z50JAAAAAAAAAAAAAAAAAAAAdK7d+DmxrPsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAVfwQAAP//9vrU8w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)='*', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000f0100000e000f00"}}}]}, 0x48}}, 0x0) 2m55.894266552s ago: executing program 38 (id=4808): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000140)={[{@dax_never}, {@orlov}, {@dax_always}, {@block_validity}, {@nolazytime}]}, 0x1, 0x496, &(0x7f0000000a40)="$eJzs3VFrW2UfAPD/Sdu93da97d53F3sH7xxu0g1d0q5uK17MCaJXA3Xe19qmpTRtSpNuaxnS4QcQRFTwyitvBD+AIPsIIgz0wjsRUUQ3vfBCjSQ92WZN2oJtDza/Hzw7z3NOkv//WZonefIccgLoWCci4nJEdEXEmYjoT/fn0hKra6V+u3t3b07USxK12tUfkkjSfc3HStLtwfRuvRHx0vMRryZ/jVtZXpkdL5WKi2m7UJ1bKFSWV87OzI1PF6eL8yMjwxdGL46eHx3atr5eevabt9/44LlLnzxx/aux706/Vk+rL0384X5sp7Wu9zT+L5q6I2JxJ4JloCvtT0/WiQAAsCVHIuI/EfFo4/N/f3Q1Ps0BAAAAe0nt6b74NYmoAQAAAHtWrnEObJLLp+f79kUul8+vncN7JA7kSuVK9fGp8tL85Nq5sgPRk5uaKRWH0nOFB6InqbeHG/UH7XPr2iMRcTgi3urf32jnJ8qlyay//AAAAIAOcXDd/P/n/rX5PwAAALDHDGSdAAAAALDj0vn/l1nnAQAAAOwc6/8AAACwp71w5Uq91JrXv568trw0W752drJYmc3PLU3kJ8qLC/npcnm68Zt9c5s9XqlcXngy5pduFKrFSrVQWV4ZmysvzVfHGtf1Hiu6TjQAAADsvsOP3P4iiYjVp/Y3St2+9Ji5OuxtuawTADLTlXUCQGa6s04AyIw5PpBscry33YFPtz8XAABgZwz+z/o/dCrr/9C5rP9D57L+D53LHB+w/g8AAHtfX6MkuXy6FtgXuVw+H3GocVmAnmRqplQcioh/R8Tn/T3/qreHs04aAAAAAAAAAAAAAAAAAAAAAAAAAP5harUkagAAAMCeFpH7Nkmv/zXYf6pv/fcD+5Jf+hvbiLj+3tV3boxXq4vD9f0/3t9ffTfdfy6LbzAAAACA9Zrz9OY8HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC20727NyeaZTfjfv9MRAy0it8dvY1tb/RExIGfkuh+6H5JRHRtQ/zVWxFxtFX8pJ5WDKRZrI+fi4j9Gcc/uA3xoZPdro8/l1u9/nJxorFt/frrTsvf1X78y90f/7rajH+Hthjj2J2PCm3j34o41t16/GnGT9rEP7nF+K+8vLLS7ljt/YjBlu8/yZ9iFapzC4XK8srZmbnx6eJ0cX5kZPjC6MXR86NDhamZUjH9t2WMN///8e8b9f9Am/gDm/T/1Bb7/9udG3f/u0H80ydbP/9HN4hf/5t4LH0fqB8fbNZX1+oPO/7hZ8c36v9km/5v9vyf3mL/z7z4+tdbvCkAsAsqyyuz46VScVFFRUXlfiXrkQkAANhuDz70Z50JAAAAAAAAAAAAAAAAAAAAdK7d+DmxrPsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAVfwQAAP//9vrU8w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)='*', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000f0100000e000f00"}}}]}, 0x48}}, 0x0) 1m34.128540093s ago: executing program 6 (id=5037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 1m33.119506142s ago: executing program 6 (id=5039): openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1m31.763082193s ago: executing program 6 (id=5043): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8850) 1m31.675496718s ago: executing program 6 (id=5045): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x8d87a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000140)=0x200000) 1m29.882216963s ago: executing program 6 (id=5046): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8850) 1m29.617693719s ago: executing program 6 (id=5049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 1m12.359249217s ago: executing program 39 (id=5049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 20.743401226s ago: executing program 2 (id=5170): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 18.563559673s ago: executing program 2 (id=5175): write(0xffffffffffffffff, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x6) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, 0x0) ioctl$SIOCAX25GETUID(r2, 0x89e0, 0x0) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}]}) 17.865774044s ago: executing program 2 (id=5177): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x8d87a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000140)=0x200000) 17.582252081s ago: executing program 9 (id=5178): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a00110001", 0x13) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) io_setup(0x6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x8, 0x4, 0x1, 0x0, 0x9}) nanosleep(&(0x7f0000000300)={0x44, 0xfffffffe}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) epoll_pwait2(r3, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000140), &(0x7f0000000240)={[0x7fffffff]}, 0x8) syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) 14.570488097s ago: executing program 8 (id=5182): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0}, 0xcac) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000340), &(0x7f0000000380)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x800000, {0x6, 0x0, 0x1, 0x400000000000, 0x0, 0x2, {0x0, 0x0, 0xa80, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setresuid(r5, 0x0, r5) 13.533687818s ago: executing program 8 (id=5184): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8850) 13.389744796s ago: executing program 9 (id=5185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x500, 0x4, 0x800d0040}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x4, 0x6, 0x0, 0x100, 0x6, 0x110022}) mknodat(0xffffffffffffffff, 0x0, 0x2, 0x1) 13.088147504s ago: executing program 8 (id=5187): write(0xffffffffffffffff, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x6) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r3, 0x89e1, 0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, 0x0) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}]}) 11.209290024s ago: executing program 9 (id=5188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0xd20b}, 0x1c) syz_open_procfs(0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) 8.931556707s ago: executing program 5 (id=5190): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r1 = socket(0x22, 0x2, 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x303}, "3d196e85f3a47d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x800, 0x100000000, 0xfffffffffffffffd, 0x0, 0x5, 0x1000001004, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x1, 0xa, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x800) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x41) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 8.930427057s ago: executing program 9 (id=5191): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x8d87a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000140)=0x200000) 7.584616296s ago: executing program 2 (id=5192): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) close(r3) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 7.373211148s ago: executing program 5 (id=5193): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x56d, &(0x7f0000000880)="$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") r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x3, 0x0, 0x6000) dup(0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e1f, 0x0, 0x2}, {0xfffffffffffffffd, 0x15000000000000, 0x4, 0x1ff, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x7fffffff, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2c19}}, 0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010) 6.953649113s ago: executing program 1 (id=5194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 5.592519882s ago: executing program 5 (id=5195): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x11a, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 5.591225333s ago: executing program 1 (id=5196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a00110001", 0x13) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) io_setup(0x6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x8, 0x4, 0x1, 0x0, 0x9}) nanosleep(&(0x7f0000000300)={0x44, 0xfffffffe}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) epoll_pwait2(r3, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000140), &(0x7f0000000240)={[0x7fffffff]}, 0x8) syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) 4.250626681s ago: executing program 1 (id=5197): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8850) 4.030223054s ago: executing program 5 (id=5198): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x5d) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.844395754s ago: executing program 1 (id=5199): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) socket$inet6(0xa, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xf, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) 3.820518917s ago: executing program 8 (id=5200): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x11a, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 3.652050286s ago: executing program 1 (id=5201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r4, 0x1, 0x3d, &(0x7f0000000540)=0x8, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYRESHEX, @ANYBLOB="79057a2c1e9ae72898229ce6287c"], 0x1, 0x2cb, &(0x7f0000000a40)="$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") r5 = creat(0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000001c0)=0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002021, 0x0) ftruncate(r5, 0x81fe) io_submit(r6, 0x0, 0x0) 3.516498014s ago: executing program 5 (id=5202): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x11a, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 3.475243216s ago: executing program 2 (id=5203): socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.391659871s ago: executing program 8 (id=5204): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8850) 1.727695069s ago: executing program 2 (id=5205): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x7, 0x180) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pptp(0x18, 0x1, 0x2) semop(r1, &(0x7f0000000200)=[{0x3, 0x2, 0x800}], 0x1) read$FUSE(r0, &(0x7f0000004840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$video4linux(0x0, 0x1, 0x8800) syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000380)={[{@nodiscard}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@two_active_logs}, {@noinline_dentry}, {@nocheckpoint_merge}, {@acl}, {@gc_merge}, {@usrjquota={'usrjquota', 0x3d, 'acl'}}, {@alloc_mode_def}, {@usrjquota}, {@background_gc_off}, {@prjjquota={'prjjquota', 0x3d, 'background_gc=off'}}], [{@fowner_lt={'fowner<', r5}}]}, 0x4, 0x5524, &(0x7f0000001300)="$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") ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x8, "6f57dc0f07aaef2586dbf84f49969085e3be8d886052868a03b4cd30d56b1382", 0x4, 0x1, 0xa, 0x100000001, 0x3b2, 0xe6c, 0x3, 0x3, [0x5, 0x8000, 0x40, 0x2]}) 1.297794194s ago: executing program 9 (id=5206): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) mmap(&(0x7f00005b3000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r4, 0xe1306000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x90, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r5, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x4000) 151.722781ms ago: executing program 1 (id=5207): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x20001c, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c6e6f626172726965722c00bda08f004784af79a0b5b9dd4b4ec26aeb028ef7358e1a7839401a88adb87aa128cc859cb1064815e5ea4ae61aff15d2b9480372a03e8fa9af1351eeddb2fe6f79188cdf7fa09ed66b1cf88addf9f6744f0bac079e20d3fa16cddd800922eae7521da68b5f456464800eb4c722fa3e7c3f7bb1f2610f73d6d710b7a36907f6f2bc1c336ba301ab1aef6914d8e3b5"], 0x1, 0x5fb, &(0x7f0000000000)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f0000000040)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0xe, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) epoll_create1(0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 151.323051ms ago: executing program 8 (id=5208): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x11a, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 15.180529ms ago: executing program 9 (id=5209): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040044) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4606, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 5 (id=5210): write(0xffffffffffffffff, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x6) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r3, 0x89e1, 0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, 0x0) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}]}) kernel console output (not intermixed with test programs): [ 739.211038][T14454] lo speed is unknown, defaulting to 1000 [ 740.915505][T15615] overlayfs: failed to clone upperpath [ 740.923309][T15613] tipc: Enabling of bearer rejected, failed to enable media [ 740.972837][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3215'. [ 740.989555][T15617] chnl_net:caif_netlink_parms(): no params data found [ 741.430982][T15639] sctp: [Deprecated]: syz.7.3217 (pid 15639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 741.430982][T15639] Use struct sctp_sack_info instead [ 741.777091][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3218'. [ 743.788626][T15655] overlayfs: failed to clone upperpath [ 744.958792][T15677] overlayfs: failed to clone upperpath [ 746.562657][T15708] netlink: 'syz.0.3235': attribute type 1 has an invalid length. [ 747.419135][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.425562][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.656677][T15708] device bond2 entered promiscuous mode [ 747.713529][T15708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 747.770130][T15712] bond2: (slave veth1): Enslaving as an active interface with a down link [ 747.887357][T15713] bond2: (slave veth9): Enslaving as an active interface with a down link [ 747.917886][T15730] binder: 15728:15730 ioctl c0306201 0 returned -14 [ 747.933915][T15729] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 749.129144][T15745] UBIFS error (pid: 15745): cannot open "./file0", error -22 [ 750.509647][T15758] netlink: 'syz.7.3254': attribute type 1 has an invalid length. [ 750.716637][T15758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.791740][T15764] device vlan2 entered promiscuous mode [ 750.797367][T15764] device bond4 entered promiscuous mode [ 751.483083][T15766] bond4: (slave bridge1): making interface the new active one [ 751.499387][T15766] device bridge1 entered promiscuous mode [ 751.533387][T15766] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 751.632679][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 751.661473][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 752.697719][T15788] netlink: 'syz.7.3257': attribute type 4 has an invalid length. [ 752.766461][T15788] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.3257'. [ 753.795767][T15817] netlink: 'syz.0.3267': attribute type 10 has an invalid length. [ 754.494379][T15819] netlink: 'syz.0.3267': attribute type 10 has an invalid length. [ 754.679721][T15832] netlink: 'syz.8.3270': attribute type 1 has an invalid length. [ 756.132215][T15832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.337335][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3272'. [ 756.397377][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3272'. [ 757.050563][T15836] device bridge0 entered promiscuous mode [ 757.057144][T15836] device bridge0 left promiscuous mode [ 757.117050][T15861] tipc: Enabled bearer , priority 10 [ 760.896057][T15906] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3292'. [ 760.905265][T15906] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3292'. [ 760.937718][T15906] device bridge0 entered promiscuous mode [ 760.949891][T15906] device ip6gretap0 entered promiscuous mode [ 762.110270][T15906] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 762.156257][T15906] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 765.145114][T15974] ax25_connect(): syz.8.3304 uses autobind, please contact jreuter@yaina.de [ 765.597581][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3305'. [ 765.686666][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3305'. [ 765.900939][T15983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3309'. [ 765.910137][T15983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3309'. [ 766.090586][T15983] device bridge0 entered promiscuous mode [ 766.128251][T15983] device ip6gretap0 entered promiscuous mode [ 766.322715][T15983] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 766.354392][T15983] Cannot create hsr debugfs directory [ 766.511465][T15983] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 766.923570][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 768.803956][T16028] netlink: 'syz.3.3319': attribute type 1 has an invalid length. [ 768.839631][T16030] netlink: 'syz.6.3317': attribute type 1 has an invalid length. [ 768.847569][T16030] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.3317'. [ 769.455551][T16033] bond9: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 769.886052][T16044] lo speed is unknown, defaulting to 1000 [ 769.897808][T16044] wlan0 speed is unknown, defaulting to 1000 [ 769.912805][T16044] lo speed is unknown, defaulting to 1000 [ 770.970469][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3325'. [ 771.209573][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3325'. [ 771.474240][T16065] device bridge0 entered promiscuous mode [ 771.631883][T16065] device ip6gretap0 entered promiscuous mode [ 771.650082][T16065] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 771.668002][T16065] Cannot create hsr debugfs directory [ 771.678247][T16065] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 771.783674][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 778.163312][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3349'. [ 781.806418][T16177] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 781.818272][T16177] FAT-fs (loop1): unable to read boot sector [ 787.402923][T16234] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 795.440719][T16296] device vlan2 entered promiscuous mode [ 795.541001][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3386'. [ 796.755307][T16311] device syzkaller0 entered promiscuous mode [ 803.936376][T16366] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 804.728142][T16372] tipc: Enabling of bearer rejected, failed to enable media [ 804.950360][T16376] device syzkaller0 entered promiscuous mode [ 807.581504][T16403] device vlan0 entered promiscuous mode [ 807.904207][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3415'. [ 808.835010][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.841469][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.529498][ T5178] Bluetooth: hci5: command 0x0406 tx timeout [ 818.621303][T16494] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 818.632399][T16494] FAT-fs (loop13): unable to read boot sector [ 821.708326][T16535] device syzkaller0 entered promiscuous mode [ 822.686093][T16542] tipc: Enabling of bearer rejected, failed to enable media [ 822.919422][T16558] netlink: 'syz.8.3450': attribute type 4 has an invalid length. [ 822.952263][T16560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 829.378890][T16628] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.3465'. [ 834.605109][T16655] device batadv0 entered promiscuous mode [ 834.611880][T16655] device dummy0 entered promiscuous mode [ 834.618529][T16655] device hsr2 entered promiscuous mode [ 834.646205][ T820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready [ 835.289566][T16673] netlink: 'syz.6.3480': attribute type 3 has an invalid length. [ 835.297456][T16673] netlink: 'syz.6.3480': attribute type 1 has an invalid length. [ 836.389196][ C1] hrtimer: interrupt took 51413 ns [ 836.395226][T16693] netlink: 'syz.3.3482': attribute type 21 has an invalid length. [ 836.403678][T16693] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 836.411648][T16693] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3482'. [ 838.418085][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3489'. [ 838.617426][T16726] overlayfs: failed to clone upperpath [ 842.447707][T16778] netlink: 'syz.3.3508': attribute type 1 has an invalid length. [ 843.389526][T16778] device bond10 entered promiscuous mode [ 843.429651][T16778] 8021q: adding VLAN 0 to HW filter on device bond10 [ 844.517593][T16792] bond10: (slave veth9): Enslaving as an active interface with a down link [ 844.868796][T16828] device syzkaller0 entered promiscuous mode [ 845.572838][T16829] rdma_rxe: ignoring netdev event = 10 for lo [ 845.588186][T16829] infiniband syz2: set down [ 849.243514][T16829] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.252108][T16829] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.260650][T16829] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.269030][T16829] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.349891][ T5178] lo speed is unknown, defaulting to 1000 [ 849.374656][ T5178] lo speed is unknown, defaulting to 1000 [ 849.438769][T16877] overlayfs: failed to clone upperpath [ 849.453855][T16878] device syzkaller0 entered promiscuous mode [ 849.476039][T16878] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 850.753317][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3535'. [ 851.137449][T16887] device vlan2 entered promiscuous mode [ 851.627013][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3536'. [ 857.363087][T16915] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.372306][T16915] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.381599][T16915] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.390812][T16915] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.515737][T16915] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.524779][T16915] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.533763][T16915] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.542793][T16915] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.619841][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3547'. [ 857.642368][T16947] tipc: Enabling of bearer rejected, failed to enable media [ 857.675269][T16959] tipc: Enabling of bearer rejected, failed to enable media [ 857.699260][ T5922] wlan0 speed is unknown, defaulting to 1000 [ 858.421872][T16982] UBIFS error (pid: 16982): cannot open "./file0", error -22 [ 858.579257][T16983] delete_channel: no stack [ 859.685129][T17020] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.694403][T17020] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.703377][T17020] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.712441][T17020] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.840759][T17022] loop8: detected capacity change from 0 to 1024 [ 865.186996][T17066] siw: device registration error -23 [ 865.271966][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3580'. [ 865.445330][T17080] tipc: Enabling of bearer rejected, failed to enable media [ 865.497552][T17087] tipc: Enabling of bearer rejected, failed to enable media [ 865.619900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 868.271632][T17151] netlink: 856 bytes leftover after parsing attributes in process `syz.8.3595'. [ 868.718101][T17155] sctp: [Deprecated]: syz.3.3598 (pid 17155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 868.718101][T17155] Use struct sctp_sack_info instead [ 868.751921][T17159] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3599'. [ 873.610266][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.616593][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.193624][T17198] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 875.732396][T17197] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 875.741713][T17197] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 875.751296][T17197] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 875.781776][T17206] netlink: 'syz.7.3611': attribute type 3 has an invalid length. [ 875.789584][T17206] netlink: 'syz.7.3611': attribute type 1 has an invalid length. [ 875.809266][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 875.809301][ T26] audit: type=1800 audit(2000000192.960:695): pid=17197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3606" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 877.351652][T17222] netlink: 'syz.3.3616': attribute type 12 has an invalid length. [ 878.691095][T17231] netlink: 'syz.3.3616': attribute type 12 has an invalid length. [ 879.141071][ T26] audit: type=1326 audit(2000000196.370:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 879.188501][ T26] audit: type=1326 audit(2000000196.370:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 879.269215][ T26] audit: type=1326 audit(2000000196.390:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 881.272035][ T26] audit: type=1326 audit(2000000196.390:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 881.311801][ T26] audit: type=1326 audit(2000000196.390:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 881.355834][ T26] audit: type=1326 audit(2000000196.390:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 881.378421][ T26] audit: type=1326 audit(2000000196.390:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 881.555758][ T26] audit: type=1326 audit(2000000196.390:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 882.549803][ T26] audit: type=1326 audit(2000000196.390:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 882.586082][ T26] audit: type=1326 audit(2000000196.390:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 882.661422][ T26] audit: type=1326 audit(2000000196.390:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 882.697614][ T26] audit: type=1326 audit(2000000196.390:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 882.745116][ T26] audit: type=1326 audit(2000000196.390:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.3.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773e5c9eb9 code=0x7ffc0000 [ 882.897351][T17275] loop8: detected capacity change from 0 to 512 [ 882.916500][T17275] EXT4-fs (loop8): Ignoring removed nobh option [ 882.948695][T17271] Cannot find add_set index 0 as target [ 882.991070][T17275] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.3629: iget: bad i_size value: 38620345925642 [ 883.504828][T17275] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3629: couldn't read orphan inode 15 (err -117) [ 883.956826][T17275] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 886.551307][T17315] loop8: detected capacity change from 0 to 4096 [ 886.581218][T17326] tipc: Enabling of bearer rejected, failed to enable media [ 887.019195][T17335] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 887.869694][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 887.869709][ T26] audit: type=1800 audit(2000000204.528:716): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3636" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 889.446856][T17357] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3646'. [ 889.484368][T17357] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 893.113694][T17387] tipc: Enabling of bearer rejected, failed to enable media [ 894.273208][T17398] 9pnet: Insufficient options for proto=fd [ 894.429294][T17403] tipc: Enabling of bearer rejected, failed to enable media [ 898.529137][T17436] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 900.321761][T17447] tipc: Enabling of bearer rejected, failed to enable media [ 902.248555][T17469] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3669'. [ 902.271057][T17469] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 903.022368][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3672'. [ 903.057385][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3672'. [ 903.545345][T17473] device team0 entered promiscuous mode [ 903.550965][T17473] device team_slave_0 entered promiscuous mode [ 903.573602][T17473] device team_slave_1 entered promiscuous mode [ 903.585916][T17473] device bond0 entered promiscuous mode [ 904.142355][T17473] device bond_slave_0 entered promiscuous mode [ 905.168710][T17473] device bond_slave_1 entered promiscuous mode [ 905.198325][T17473] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 905.218511][T17473] Cannot create hsr debugfs directory [ 905.510395][ T26] audit: type=1326 audit(2000000220.916:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 905.540595][T17508] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 905.606199][T17473] hsr2: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 905.780572][T17473] hsr2: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 905.920430][ T26] audit: type=1326 audit(2000000220.916:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 906.045283][T17473] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 906.226037][ T26] audit: type=1326 audit(2000000220.916:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 906.254815][T17513] tipc: Enabling of bearer rejected, failed to enable media [ 906.317657][ T26] audit: type=1326 audit(2000000220.926:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 906.361317][ T26] audit: type=1326 audit(2000000220.926:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 906.396489][ T26] audit: type=1326 audit(2000000220.926:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 908.367191][ T26] audit: type=1326 audit(2000000220.926:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 908.463956][ T26] audit: type=1326 audit(2000000220.926:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 908.497562][ T26] audit: type=1326 audit(2000000220.926:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 908.877816][ T26] audit: type=1326 audit(2000000220.926:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17488 comm="syz.6.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9237aeb9 code=0x7ffc0000 [ 910.195711][T17562] loop8: detected capacity change from 0 to 32768 [ 911.048865][T17562] XFS (loop8): Mounting V5 Filesystem [ 912.412166][T17562] XFS (loop8): Ending clean mount [ 912.427839][T17562] XFS (loop8): Quotacheck needed: Please wait. [ 912.596777][T17562] XFS (loop8): Quotacheck: Done. [ 914.280095][T17609] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 914.772576][T15027] XFS (loop8): Unmounting Filesystem [ 923.298974][T17695] Cannot find add_set index 0 as target [ 923.307320][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3718'. [ 925.135620][T17703] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 926.608483][T17720] loop8: detected capacity change from 0 to 1024 [ 928.084078][T17720] EXT4-fs (loop8): Ignoring removed bh option [ 928.090536][T17720] EXT4-fs (loop8): inline encryption not supported [ 928.374465][T17720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e018, mo2=0000] [ 928.382878][T17720] System zones: 0-1, 3-12 [ 928.484998][T17720] EXT4-fs error (device loop8): ext4_map_blocks:739: inode #3: block 6: comm syz.8.3724: lblock 6 mapped to illegal pblock 6 (length 1) [ 928.505129][T17720] __quota_error: 10 callbacks suppressed [ 928.505149][T17720] Quota error (device loop8): write_blk: dquota write failed [ 928.518619][T17720] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 928.528619][T17720] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.3724: Failed to acquire dquot type 0 [ 928.543011][T17720] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 6: comm syz.8.3724: lblock 6 mapped to illegal pblock 6 (length 1) [ 928.560410][T17720] Quota error (device loop8): write_blk: dquota write failed [ 928.567890][T17720] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 928.580940][T17720] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.3724: Failed to acquire dquot type 0 [ 928.602163][T17720] EXT4-fs error (device loop8): ext4_free_blocks:6234: comm syz.8.3724: Freeing blocks not in datazone - block = 0, count = 4096 [ 928.625964][T17720] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #3: block 6: comm syz.8.3724: lblock 6 mapped to illegal pblock 6 (length 1) [ 928.644892][T17720] Quota error (device loop8): write_blk: dquota write failed [ 928.652466][T17720] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 928.662573][T17720] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.3724: Failed to acquire dquot type 0 [ 928.684377][T17720] EXT4-fs (loop8): 1 orphan inode deleted [ 928.690251][T17720] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,inode_readahead_blks=0x0000000000400000,bh,min_batch_time=0x0000000000000006,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 932.963679][T17765] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 934.054978][T17775] xt_recent: Unsupported userspace flags (000000de) [ 935.006409][T17772] binder: 17768:17772 ioctl c0306201 0 returned -14 [ 935.320238][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.326638][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.542909][T17816] loop8: detected capacity change from 0 to 4096 [ 939.811443][T17823] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 940.785772][T17831] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 941.474383][T17840] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 942.539070][T17861] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3761'. [ 942.573327][T17861] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 942.581400][T17861] CPU: 0 PID: 17861 Comm: syz.6.3761 Not tainted syzkaller #0 [ 942.588891][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 942.598978][T17861] Call Trace: [ 942.602298][T17861] [ 942.605250][T17861] dump_stack_lvl+0x188/0x250 [ 942.609996][T17861] ? show_regs_print_info+0x20/0x20 [ 942.615217][T17861] ? load_image+0x400/0x400 [ 942.619752][T17861] sysfs_warn_dup+0x8a/0xa0 [ 942.624345][T17861] sysfs_do_create_link_sd+0xc0/0x110 [ 942.629752][T17861] device_add+0x7ed/0xfb0 [ 942.634175][T17861] wiphy_register+0x1e81/0x2c30 [ 942.639066][T17861] ? cfg80211_event_work+0x40/0x40 [ 942.644200][T17861] ? minstrel_ht_alloc+0x808/0x980 [ 942.649349][T17861] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 942.655456][T17861] ieee80211_register_hw+0x2aa1/0x3af0 [ 942.660959][T17861] ? ieee80211_tasklet_handler+0x20/0x20 [ 942.666638][T17861] ? rcu_is_watching+0x11/0xa0 [ 942.671470][T17861] ? memset+0x1e/0x40 [ 942.675527][T17861] ? hrtimer_init+0x10c/0x220 [ 942.680271][T17861] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 942.686077][T17861] hwsim_new_radio_nl+0xa6f/0xc40 [ 942.691142][T17861] genl_rcv_msg+0xcea/0xf90 [ 942.695712][T17861] ? genl_bind+0x380/0x380 [ 942.700167][T17861] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 942.706211][T17861] ? verify_lock_unused+0x140/0x140 [ 942.711439][T17861] ? verify_lock_unused+0x140/0x140 [ 942.716664][T17861] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 942.722341][T17861] ? lockdep_hardirqs_on+0x94/0x140 [ 942.727563][T17861] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 942.733215][T17861] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 942.739754][T17861] netlink_rcv_skb+0x1f5/0x440 [ 942.744544][T17861] ? genl_bind+0x380/0x380 [ 942.748996][T17861] ? netlink_ack+0xb50/0xb50 [ 942.753630][T17861] ? __lock_acquire+0x7d10/0x7d10 [ 942.758725][T17861] ? down_read+0x1aa/0x2e0 [ 942.763182][T17861] genl_rcv+0x24/0x40 [ 942.767205][T17861] netlink_unicast+0x774/0x920 [ 942.772061][T17861] netlink_sendmsg+0x8ba/0xbe0 [ 942.776855][T17861] ? netlink_getsockopt+0x570/0x570 [ 942.782091][T17861] ? aa_sock_msg_perm+0x94/0x150 [ 942.787119][T17861] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 942.792566][T17861] ? security_socket_sendmsg+0x7c/0xa0 [ 942.798119][T17861] ? netlink_getsockopt+0x570/0x570 [ 942.803359][T17861] ____sys_sendmsg+0x5b7/0x8f0 [ 942.808240][T17861] ? __sys_sendmsg_sock+0x30/0x30 [ 942.813313][T17861] ? import_iovec+0x6f/0xa0 [ 942.817942][T17861] ___sys_sendmsg+0x236/0x2e0 [ 942.822672][T17861] ? __sys_sendmsg+0x2a0/0x2a0 [ 942.827499][T17861] __se_sys_sendmsg+0x1af/0x290 [ 942.832404][T17861] ? __x64_sys_sendmsg+0x80/0x80 [ 942.837387][T17861] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 942.843427][T17861] ? lockdep_hardirqs_on+0x94/0x140 [ 942.848661][T17861] do_syscall_64+0x4c/0xa0 [ 942.853104][T17861] ? clear_bhb_loop+0x30/0x80 [ 942.857814][T17861] ? clear_bhb_loop+0x30/0x80 [ 942.862517][T17861] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 942.868438][T17861] RIP: 0033:0x7f9e9237aeb9 [ 942.872881][T17861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.892524][T17861] RSP: 002b:00007f9e90594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.900971][T17861] RAX: ffffffffffffffda RBX: 00007f9e925f6180 RCX: 00007f9e9237aeb9 [ 942.908979][T17861] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 942.916986][T17861] RBP: 00007f9e923e8c1f R08: 0000000000000000 R09: 0000000000000000 [ 942.924996][T17861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.933004][T17861] R13: 00007f9e925f6218 R14: 00007f9e925f6180 R15: 00007ffd4a696758 [ 942.941114][T17861] [ 948.156121][ T26] audit: type=1326 audit(2000000260.923:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45e5a11eb9 code=0x0 [ 948.349399][ T26] audit: type=1326 audit(2000000261.110:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5a11eb9 code=0x7ffc0000 [ 948.404624][ T26] audit: type=1326 audit(2000000261.129:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5a11eb9 code=0x7ffc0000 [ 948.453761][ T26] audit: type=1326 audit(2000000261.129:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5a11eb9 code=0x7ffc0000 [ 948.481394][ T26] audit: type=1326 audit(2000000261.129:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5a11eb9 code=0x7ffc0000 [ 948.623019][ T26] audit: type=1326 audit(2000000261.129:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f45e5a11eb9 code=0x7ffc0000 [ 948.685239][ T26] audit: type=1326 audit(2000000261.129:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5a11eb9 code=0x7ffc0000 [ 948.708041][ T26] audit: type=1326 audit(2000000261.129:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5a11eb9 code=0x7ffc0000 [ 948.766908][ T26] audit: type=1326 audit(2000000261.129:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5a11eb9 code=0x7ffc0000 [ 948.789575][ T26] audit: type=1326 audit(2000000261.129:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17888 comm="syz.7.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e5a11eb9 code=0x7ffc0000 [ 950.471575][T17917] tipc: Enabling of bearer rejected, failed to enable media [ 950.635338][T17922] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3780'. [ 950.646641][T17922] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 953.156312][T17949] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3786'. [ 953.726403][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 953.726595][ T26] audit: type=1107 audit(2000000266.068:782): pid=17956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 959.906127][T18011] 0x7fffffffffffffff-0x8000000000000006 : "" [ 959.912853][T18011] mtd: partition "" is out of reach -- disabled [ 959.976509][T18011] ftl_cs: FTL header not found. [ 963.978790][T18031] device syzkaller0 entered promiscuous mode [ 964.402578][T18050] tipc: Failed to remove unknown binding: 66,0,0/0:877256197/877256198 [ 964.428137][T18052] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3809'. [ 964.794081][T18050] tipc: Failed to remove unknown binding: 66,0,0/0:877256197/877256198 [ 964.818754][T18052] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 971.186319][T18103] tipc: Failed to remove unknown binding: 66,0,0/0:3483666714/3483666715 [ 971.839987][T18103] tipc: Failed to remove unknown binding: 66,0,0/0:3483666714/3483666715 [ 973.075150][T18122] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.3825'. [ 973.096348][T18122] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 973.104433][T18122] CPU: 0 PID: 18122 Comm: syz.8.3825 Not tainted syzkaller #0 [ 973.111935][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 973.122031][T18122] Call Trace: [ 973.125338][T18122] [ 973.128297][T18122] dump_stack_lvl+0x188/0x250 [ 973.133019][T18122] ? show_regs_print_info+0x20/0x20 [ 973.138368][T18122] ? load_image+0x400/0x400 [ 973.142943][T18122] sysfs_warn_dup+0x8a/0xa0 [ 973.147480][T18122] sysfs_do_create_link_sd+0xc0/0x110 [ 973.152886][T18122] device_add+0x7ed/0xfb0 [ 973.157270][T18122] wiphy_register+0x1e81/0x2c30 [ 973.162177][T18122] ? cfg80211_event_work+0x40/0x40 [ 973.167416][T18122] ? minstrel_ht_alloc+0x808/0x980 [ 973.172581][T18122] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 973.178782][T18122] ieee80211_register_hw+0x2aa1/0x3af0 [ 973.184293][T18122] ? ieee80211_tasklet_handler+0x20/0x20 [ 973.189966][T18122] ? rcu_is_watching+0x11/0xa0 [ 973.194760][T18122] ? memset+0x1e/0x40 [ 973.198778][T18122] ? hrtimer_init+0x10c/0x220 [ 973.203542][T18122] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 973.210276][T18122] hwsim_new_radio_nl+0xa6f/0xc40 [ 973.215360][T18122] genl_rcv_msg+0xcea/0xf90 [ 973.219906][T18122] ? genl_bind+0x380/0x380 [ 973.224365][T18122] ? lock_chain_count+0x20/0x20 [ 973.229271][T18122] ? verify_lock_unused+0x140/0x140 [ 973.234526][T18122] ? verify_lock_unused+0x140/0x140 [ 973.239755][T18122] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 973.245415][T18122] ? lockdep_hardirqs_on+0x94/0x140 [ 973.250645][T18122] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 973.256315][T18122] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 973.262878][T18122] netlink_rcv_skb+0x1f5/0x440 [ 973.267686][T18122] ? genl_bind+0x380/0x380 [ 973.272146][T18122] ? netlink_ack+0xb50/0xb50 [ 973.276767][T18122] ? __lock_acquire+0x7d10/0x7d10 [ 973.281836][T18122] ? down_read+0x1aa/0x2e0 [ 973.286290][T18122] genl_rcv+0x24/0x40 [ 973.290302][T18122] netlink_unicast+0x774/0x920 [ 973.295112][T18122] netlink_sendmsg+0x8ba/0xbe0 [ 973.299921][T18122] ? netlink_getsockopt+0x570/0x570 [ 973.305255][T18122] ? aa_sock_msg_perm+0x94/0x150 [ 973.310233][T18122] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 973.315547][T18122] ? security_socket_sendmsg+0x7c/0xa0 [ 973.321033][T18122] ? netlink_getsockopt+0x570/0x570 [ 973.326254][T18122] ____sys_sendmsg+0x5b7/0x8f0 [ 973.331064][T18122] ? __sys_sendmsg_sock+0x30/0x30 [ 973.336256][T18122] ? import_iovec+0x6f/0xa0 [ 973.340810][T18122] ___sys_sendmsg+0x236/0x2e0 [ 973.345760][T18122] ? __sys_sendmsg+0x2a0/0x2a0 [ 973.350610][T18122] __se_sys_sendmsg+0x1af/0x290 [ 973.355510][T18122] ? __x64_sys_sendmsg+0x80/0x80 [ 973.360480][T18122] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 973.366698][T18122] ? lockdep_hardirqs_on+0x94/0x140 [ 973.371976][T18122] do_syscall_64+0x4c/0xa0 [ 973.376450][T18122] ? clear_bhb_loop+0x30/0x80 [ 973.381162][T18122] ? clear_bhb_loop+0x30/0x80 [ 973.385872][T18122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 973.391807][T18122] RIP: 0033:0x7f7792176eb9 [ 973.397483][T18122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.417208][T18122] RSP: 002b:00007f7790390028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.426175][T18122] RAX: ffffffffffffffda RBX: 00007f77923f2180 RCX: 00007f7792176eb9 [ 973.434176][T18122] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 973.442174][T18122] RBP: 00007f77921e4c1f R08: 0000000000000000 R09: 0000000000000000 [ 973.450173][T18122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.458204][T18122] R13: 00007f77923f2218 R14: 00007f77923f2180 R15: 00007ffd0758cdb8 [ 973.466226][T18122] [ 979.038698][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3834'. [ 981.400592][T18180] bond1: option mode: unable to set because the bond device has slaves [ 981.420318][T18180] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 981.432260][T18180] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 981.472872][T18180] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3842'. [ 986.272618][T18239] loop8: detected capacity change from 0 to 2048 [ 988.904710][T18261] netlink: 'syz.0.3876': attribute type 2 has an invalid length. [ 989.605899][T18261] netlink: 'syz.0.3876': attribute type 1 has an invalid length. [ 989.625465][ T26] audit: type=1107 audit(2000000299.462:783): pid=18265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 991.801557][T18284] netlink: 'syz.0.3881': attribute type 4 has an invalid length. [ 992.076895][T18286] loop8: detected capacity change from 0 to 4096 [ 992.526560][T18286] ntfs3: Unknown parameter 'hide_dot_files' [ 999.129392][T18343] netlink: 'syz.7.3886': attribute type 4 has an invalid length. [ 1001.065822][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1001.077283][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.248104][T18386] o2cb: This node has not been configured. [ 1002.254732][T18386] o2cb: Cluster check failed. Fix errors before retrying. [ 1002.262460][T18386] (syz.3.3897,18386,1):user_dlm_register:675 ERROR: status = -22 [ 1002.270382][T18386] (syz.3.3897,18386,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 1009.284081][T18421] loop8: detected capacity change from 0 to 1024 [ 1010.339800][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1019.400337][T18512] lo speed is unknown, defaulting to 1000 [ 1019.411979][T18512] wlan0 speed is unknown, defaulting to 1000 [ 1019.423628][T18512] lo speed is unknown, defaulting to 1000 [ 1033.013842][T18625] tipc: Enabling of bearer rejected, failed to enable media [ 1034.366020][T18637] cgroup: fork rejected by pids controller in /syz0 [ 1038.503778][T19346] bridge_slave_1: default FDB implementation only supports local addresses [ 1038.535715][T19360] ubi31: attaching mtd0 [ 1039.995280][T19386] loop8: detected capacity change from 0 to 4096 [ 1040.012396][ T26] audit: type=1326 audit(2000000346.849:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1040.098430][ T26] audit: type=1326 audit(2000000346.877:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1040.174201][ T26] audit: type=1326 audit(2000000346.961:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1040.207195][ T26] audit: type=1326 audit(2000000346.961:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1040.260797][ T26] audit: type=1326 audit(2000000346.961:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1040.296546][T19394] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1040.358947][ T26] audit: type=1326 audit(2000000346.971:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1041.958500][ T26] audit: type=1326 audit(2000000346.971:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1042.221809][ T26] audit: type=1326 audit(2000000346.971:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1042.598690][T19406] overlayfs: failed to clone upperpath [ 1043.018104][ T26] audit: type=1326 audit(2000000346.971:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1043.234349][ T26] audit: type=1326 audit(2000000346.971:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19387 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe201449eb9 code=0x7ffc0000 [ 1047.436405][T19461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1047.443788][T19461] IPv6: NLM_F_CREATE should be set when creating new route [ 1047.451284][T19461] IPv6: NLM_F_CREATE should be set when creating new route [ 1052.151947][T19504] netlink: 'syz.0.3998': attribute type 10 has an invalid length. [ 1053.713949][T19521] lo speed is unknown, defaulting to 1000 [ 1053.725736][T19521] wlan0 speed is unknown, defaulting to 1000 [ 1053.737438][T19521] lo speed is unknown, defaulting to 1000 [ 1054.333963][T19526] netlink: 'syz.8.4006': attribute type 2 has an invalid length. [ 1054.371300][T19526] netlink: 'syz.8.4006': attribute type 1 has an invalid length. [ 1054.654895][T19539] delete_channel: no stack [ 1054.796511][T19549] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4008'. [ 1055.502631][T19553] loop8: detected capacity change from 0 to 1024 [ 1055.616703][T19560] tipc: Enabling of bearer rejected, failed to enable media [ 1059.239653][T19607] overlayfs: failed to clone upperpath [ 1063.135362][T19625] loop8: detected capacity change from 0 to 512 [ 1063.193517][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4027'. [ 1063.233167][T19625] EXT4-fs (loop8): Ignoring removed nobh option [ 1063.279081][T19625] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.4029: iget: bad i_size value: 38620345925642 [ 1063.300571][T19625] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.4029: couldn't read orphan inode 15 (err -117) [ 1063.315095][T19625] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 1067.170370][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1067.181914][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1071.731689][T19682] loop8: detected capacity change from 0 to 128 [ 1071.816142][T19682] VFS: Found a Xenix FS (block size = 1024) on device loop8 [ 1072.875115][T15027] sysv_free_block: flc_count > flc_size [ 1072.894291][T15027] sysv_free_block: flc_count > flc_size [ 1072.901948][T15027] sysv_free_block: flc_count > flc_size [ 1073.030484][T15027] sysv_free_block: flc_count > flc_size [ 1073.036992][T15027] sysv_free_block: flc_count > flc_size [ 1073.042683][T15027] sysv_free_block: flc_count > flc_size [ 1073.053462][T15027] sysv_free_block: flc_count > flc_size [ 1073.059406][T15027] sysv_free_block: flc_count > flc_size [ 1073.068262][T15027] sysv_free_block: flc_count > flc_size [ 1073.073929][T15027] sysv_free_block: flc_count > flc_size [ 1073.134509][T15027] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1074.196183][T19708] loop8: detected capacity change from 0 to 1024 [ 1074.236046][T19708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1074.749056][T19714] ipt_REJECT: ECHOREPLY no longer supported. [ 1077.726306][T19725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4050'. [ 1078.273107][T17392] device syz_tun left promiscuous mode [ 1078.278765][T17392] bridge0: port 3(syz_tun) entered disabled state [ 1078.308562][T19727] device syzkaller0 entered promiscuous mode [ 1078.684464][T19741] lo speed is unknown, defaulting to 1000 [ 1078.832459][T19741] wlan0 speed is unknown, defaulting to 1000 [ 1079.058915][T19741] lo speed is unknown, defaulting to 1000 [ 1080.290224][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4058'. [ 1080.678018][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 1081.192869][T19741] chnl_net:caif_netlink_parms(): no params data found [ 1081.989614][T19788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4064'. [ 1082.629950][T19741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.848405][ T5178] Bluetooth: hci2: command 0x041b tx timeout [ 1082.861404][T19741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.099275][T19741] device bridge_slave_0 entered promiscuous mode [ 1084.189376][T19809] kAFS: unable to lookup cell '' [ 1084.657834][T19741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.724228][T19741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.775592][T19741] device bridge_slave_1 entered promiscuous mode [ 1084.910658][T19816] tipc: Started in network mode [ 1084.915664][T19816] tipc: Node identity 4, cluster identity 4711 [ 1084.944982][T19816] tipc: Node number set to 4 [ 1084.952255][T19741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.996536][T19741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.070830][ T5178] Bluetooth: hci2: command 0x040f tx timeout [ 1085.110936][T19741] team0: Port device team_slave_0 added [ 1085.149472][T19741] team0: Port device team_slave_1 added [ 1085.234698][T19741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.241717][T19741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.341459][T19741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.384204][T19741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.407514][T19741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.474499][T19741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.695755][T19741] device hsr_slave_0 entered promiscuous mode [ 1086.328015][T19741] device hsr_slave_1 entered promiscuous mode [ 1086.358973][T19741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1086.400397][T19741] Cannot create hsr debugfs directory [ 1086.797646][T19864] loop8: detected capacity change from 0 to 128 [ 1086.860052][T19864] EXT4-fs warning (device loop8): ext4_fill_super:4022: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1086.873127][T19864] EXT4-fs (loop8): Encoding requested by superblock is unknown [ 1087.825868][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 1089.045622][T19741] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1089.059814][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4099'. [ 1089.830086][T19741] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1089.856800][T19741] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1089.917713][T19741] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1090.236856][T19741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.436176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1090.462097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1090.666196][T19741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.335287][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1091.358133][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1091.366775][T12432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.373902][T12432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.404271][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1091.432628][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1091.936459][T19922] overlayfs: failed to clone upperpath [ 1092.715180][T12432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.722301][T12432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.839268][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1092.848442][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1092.857831][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1092.868191][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1092.877270][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1092.886351][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1092.895062][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1092.904087][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1092.929582][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1093.438594][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1093.451100][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1093.467123][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1093.677540][T19935] device syzkaller0 entered promiscuous mode [ 1094.004313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1094.018241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1094.046818][T19741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.222160][T12129] device netdevsim0 left promiscuous mode [ 1096.257596][T12129] bridge0: port 4(netdevsim0) entered disabled state [ 1096.447917][T19974] loop8: detected capacity change from 0 to 512 [ 1096.531273][T19974] EXT4-fs (loop8): Ignoring removed nobh option [ 1096.661976][T19974] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.4110: iget: bad i_size value: 38620345925642 [ 1096.675435][T19974] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.4110: couldn't read orphan inode 15 (err -117) [ 1096.692112][T19974] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 1096.744654][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1096.776699][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1096.906109][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1096.924156][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1096.934069][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1096.946995][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1096.970110][T19741] device veth0_vlan entered promiscuous mode [ 1097.209756][T19741] device veth1_vlan entered promiscuous mode [ 1097.455872][T19741] device veth0_macvtap entered promiscuous mode [ 1097.618357][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1097.627096][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1097.654925][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1097.663737][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1097.687307][T19741] device veth1_macvtap entered promiscuous mode [ 1097.699085][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1097.732658][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1097.782685][T19741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.803489][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1097.812940][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1097.855092][T19741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.879036][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1097.910883][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1097.943270][T19741] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.952037][T19741] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.974372][T19741] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.983142][T19741] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.121987][T12129] bond1: (slave gretap1): Releasing active interface [ 1098.161092][T12129] bond3: (slave gretap2): Releasing active interface [ 1098.214905][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.242167][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.307810][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1098.332029][T12432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.365673][T12432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.396887][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1100.842412][T20029] ERROR: device name not specified. [ 1101.213373][T12129] device hsr_slave_0 left promiscuous mode [ 1102.230464][T12129] batman_adv: batadv0: Removing interface: dummy0 [ 1102.237961][T12129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.443527][T12129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.111806][T12129] device bridge_slave_1 left promiscuous mode [ 1103.118239][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.127869][T12129] device bridge_slave_0 left promiscuous mode [ 1103.134141][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.929188][T12129] bond4 (unregistering): (slave bridge1): Releasing active interface [ 1103.947916][T12129] device bridge1 left promiscuous mode [ 1104.029257][T12129] bond4 (unregistering): Released all slaves [ 1104.059616][T12129] bond3 (unregistering): Released all slaves [ 1104.132956][T12129] bond2 (unregistering): Released all slaves [ 1104.165075][T12129] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1104.256286][T20082] loop8: detected capacity change from 0 to 512 [ 1104.322833][T20082] EXT4-fs (loop8): Invalid log cluster size: 234881024 [ 1104.767477][T12129] bond1 (unregistering): Released all slaves [ 1106.871775][T12129] team0 (unregistering): Port device team_slave_1 removed [ 1107.334631][T12129] team0 (unregistering): Port device team_slave_0 removed [ 1107.449589][T12129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.467622][T12129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.578079][T12129] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1107.587122][T12129] bond0 (unregistering): Released all slaves [ 1109.491023][T20142] overlayfs: failed to clone lowerpath [ 1119.157462][T20250] ERROR: device name not specified. [ 1124.592061][T20307] vivid-008: disconnect [ 1125.388226][T20302] vivid-008: reconnect [ 1126.279413][T20315] hfsplus: unable to find HFS+ superblock [ 1128.110773][T20321] overlayfs: failed to clone upperpath [ 1129.260867][T20330] loop9: detected capacity change from 0 to 40427 [ 1129.536617][T20330] F2FS-fs (loop9): invalid crc value [ 1131.609342][T20330] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1131.655414][T20330] F2FS-fs (loop9): Start checkpoint disabled! [ 1131.735387][T20330] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1131.968522][T20360] loop8: detected capacity change from 0 to 1024 [ 1132.263898][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 1132.263938][ T26] audit: type=1800 audit(2000000433.145:827): pid=20363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4191" name="bus" dev="loop9" ino=10 res=0 errno=0 [ 1132.371572][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1132.378842][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1133.215965][T20362] kAFS: unable to lookup cell '' [ 1133.621979][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4201'. [ 1133.635957][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4201'. [ 1134.052938][T20388] hfsplus: unable to find HFS+ superblock [ 1136.797831][T20403] loop8: detected capacity change from 0 to 1764 [ 1137.827060][ T1247] attempt to access beyond end of device [ 1137.827060][ T1247] loop9: rw=2049, want=40976, limit=40427 [ 1139.260863][T20426] hfsplus: unable to find HFS+ superblock [ 1148.958947][T20529] tipc: Enabling of bearer rejected, failed to enable media [ 1149.239573][T20537] device syzkaller0 entered promiscuous mode [ 1150.358744][T20568] netlink: 116 bytes leftover after parsing attributes in process `syz.8.4240'. [ 1156.812288][T20621] loop8: detected capacity change from 0 to 1024 [ 1159.493581][T16479] hfsplus: b-tree write err: -5, ino 4 [ 1159.601737][T20641] tmpfs: Unknown parameter 'grpquota' [ 1160.486999][T20667] loop9: detected capacity change from 0 to 1024 [ 1165.757044][T20719] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4288'. [ 1167.149396][T20739] loop9: detected capacity change from 0 to 1024 [ 1168.172191][T20743] loop8: detected capacity change from 0 to 1024 [ 1170.300755][T20786] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4295'. [ 1172.235656][T20797] hfsplus: unable to find HFS+ superblock [ 1172.618925][T20805] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1174.581582][T20822] loop8: detected capacity change from 0 to 512 [ 1175.182848][T20822] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1175.189699][T20822] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1175.224985][T20822] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1175.234225][T20822] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1175.246713][T20822] EXT4-fs error (device loop8): xattr_find_entry:297: inode #15: comm syz.8.4303: corrupted xattr entries [ 1175.263544][T20822] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1175.277329][T20822] EXT4-fs (loop8): 1 orphan inode deleted [ 1175.283149][T20822] EXT4-fs (loop8): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1175.361204][T20828] device syzkaller0 entered promiscuous mode [ 1175.429002][T20807] tmpfs: Unknown parameter 'grpquota' [ 1181.579667][T20889] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1183.463727][T20925] vivid-008: disconnect [ 1184.079937][T20900] vivid-008: reconnect [ 1184.863500][T20952] hfsplus: unable to find HFS+ superblock [ 1189.075235][T20976] loop9: detected capacity change from 0 to 1024 [ 1189.574971][T20982] ipt_CLUSTERIP: Please specify destination IP [ 1190.274666][T21007] overlayfs: failed to clone upperpath [ 1193.299884][T21037] overlayfs: failed to clone upperpath [ 1194.338184][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1198.077616][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1198.086063][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1201.569150][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4376'. [ 1206.000751][T21163] loop9: detected capacity change from 0 to 256 [ 1206.625310][T21163] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1206.636084][T21163] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1206.660732][T21163] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1209.922183][T21175] syz.9.4384 (21175): drop_caches: 2 [ 1211.707911][T20316] Bluetooth: hci2: command 0x0406 tx timeout [ 1213.240583][T21229] hugetlbfs: syz.3.4394 (21229): Using mlock ulimits for SHM_HUGETLB is deprecated [ 1215.231327][T21251] hfsplus: unable to find HFS+ superblock [ 1217.053490][T21266] overlayfs: failed to clone upperpath [ 1223.205038][T21325] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1224.944281][T21340] lo speed is unknown, defaulting to 1000 [ 1225.005432][T21340] wlan0 speed is unknown, defaulting to 1000 [ 1225.016970][T21340] lo speed is unknown, defaulting to 1000 [ 1225.551580][T21347] loop9: detected capacity change from 0 to 256 [ 1225.684986][T21347] exfat: Bad value for 'uid' [ 1228.378408][T21378] overlayfs: failed to clone upperpath [ 1234.759088][T21447] fuse: Bad value for 'fd' [ 1236.182916][T21464] sd 0:0:1:0: device reset [ 1238.054207][T21482] vivid-008: disconnect [ 1238.788847][T21479] vivid-008: reconnect [ 1239.567524][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 1243.933948][T21538] hfsplus: unable to find HFS+ superblock [ 1245.837508][T21542] device bridge4 entered promiscuous mode [ 1248.270712][T21575] vivid-008: disconnect [ 1249.014118][T21569] vivid-008: reconnect [ 1252.321301][T21617] loop8: detected capacity change from 0 to 32768 [ 1255.427463][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4490'. [ 1258.251438][T21673] loop9: detected capacity change from 0 to 8 [ 1258.345175][T21673] cramfs: Unknown parameter 'K' [ 1261.074615][T21700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4496'. [ 1262.072340][ T4521] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1263.657568][ T4521] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1264.364508][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1264.370968][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1264.609224][ T4521] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1264.616880][ T4521] usb 9-1: can't read configurations, error -71 [ 1264.877447][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4509'. [ 1265.693580][T21733] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1266.373098][T21747] hfsplus: unable to find HFS+ superblock [ 1266.480068][T21749] xt_cgroup: path and classid specified [ 1270.873143][T21786] loop8: detected capacity change from 0 to 1024 [ 1280.039259][T21851] hfsplus: unable to find HFS+ superblock [ 1281.685781][T21858] hfsplus: unable to find HFS+ superblock [ 1284.239655][T21897] xt_cgroup: path and classid specified [ 1284.445330][T21899] xt_socket: unknown flags 0x48 [ 1286.296224][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4566'. [ 1290.026760][T21954] lo speed is unknown, defaulting to 1000 [ 1290.034367][T21954] wlan0 speed is unknown, defaulting to 1000 [ 1290.041508][T21954] lo speed is unknown, defaulting to 1000 [ 1291.522468][ T1247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.582857][ T1247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1292.120443][ T1247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.133711][ T1247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1292.342798][T19999] Bluetooth: hci4: command 0x0409 tx timeout [ 1292.537288][ T1247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.575606][ T1247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1293.329239][ T1247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.418203][ T1247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1294.523554][T15231] Bluetooth: hci4: command 0x041b tx timeout [ 1295.505424][ T1247] tipc: Disabling bearer [ 1295.511325][ T1247] tipc: Left network mode [ 1295.595777][T21954] chnl_net:caif_netlink_parms(): no params data found [ 1295.975866][ T1247] bond1: (slave ip6gretap1): Releasing active interface [ 1295.982995][ T1247] bond1: (slave macvlan3): making interface the new active one [ 1297.163456][T19999] Bluetooth: hci4: command 0x040f tx timeout [ 1298.365437][T21954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.466296][T21954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.499723][T21954] device bridge_slave_0 entered promiscuous mode [ 1298.866178][T21954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.896250][T21954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.176061][T21954] device bridge_slave_1 entered promiscuous mode [ 1299.604249][T21954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.981309][ T4522] Bluetooth: hci4: command 0x0419 tx timeout [ 1300.001804][T21954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.185643][T22095] loop9: detected capacity change from 0 to 4096 [ 1300.198829][T21954] team0: Port device team_slave_0 added [ 1300.263057][T22097] hfsplus: unable to find HFS+ superblock [ 1300.284467][T21954] team0: Port device team_slave_1 added [ 1300.353167][T22104] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1300.373658][T21954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.513688][T21954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.539640][ C0] vkms_vblank_simulate: vblank timer overrun [ 1300.545788][ T26] audit: type=1800 audit(2000000590.516:828): pid=22095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4593" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1300.550449][T21954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.311551][T21954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.324224][T21954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.383990][T21954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.621433][T21954] device hsr_slave_0 entered promiscuous mode [ 1305.686303][T21954] device hsr_slave_1 entered promiscuous mode [ 1306.777309][ T1247] device gretap1 left promiscuous mode [ 1306.782971][ T1247] bridge2: port 1(gretap1) entered disabled state [ 1306.945926][T12653] Bluetooth: hci3: command 0x0406 tx timeout [ 1308.219144][T22167] hfsplus: unable to find HFS+ superblock [ 1313.210515][T22225] loop8: detected capacity change from 0 to 8 [ 1314.288903][T22225] cramfs: Unknown parameter 'K' [ 1314.561172][T22235] hfsplus: unable to find HFS+ superblock [ 1315.733989][T22237] hfsplus: unable to find HFS+ superblock [ 1315.793648][ T1247] device vlan1 left promiscuous mode [ 1315.802900][ T1247] device bond0 left promiscuous mode [ 1315.817204][ T1247] device geneve2 left promiscuous mode [ 1315.828279][ T1247] bridge0: port 1(vlan1) entered disabled state [ 1317.844966][ T1247] device hsr_slave_0 left promiscuous mode [ 1317.894570][ T1247] device team0 left promiscuous mode [ 1317.900023][ T1247] device team_slave_0 left promiscuous mode [ 1317.913865][ T1247] device team_slave_1 left promiscuous mode [ 1317.974002][ T1247] bond1 (unregistering): (slave macvlan3): Releasing active interface [ 1317.990652][ T1247] bond2 (unregistering): (slave veth9): Releasing active interface [ 1318.027530][ T1247] bond2 (unregistering): (slave veth1): Releasing active interface [ 1318.077171][ T1247] bond2 (unregistering): Released all slaves [ 1318.116923][ T1247] bond0 (unregistering): (slave macvlan2): Releasing active interface [ 1318.137266][ T1247] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1318.151495][ T1247] bond0 (unregistering): Released all slaves [ 1318.535733][T22263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4630'. [ 1319.302295][ T1247] bond1 (unregistering): Released all slaves [ 1319.397404][T22281] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 1321.579672][ T1247] team0 (unregistering): Port device team_slave_1 removed [ 1321.601399][ T1247] team0 (unregistering): Port device team_slave_0 removed [ 1321.693906][T22307] x_tables: duplicate underflow at hook 1 [ 1322.613908][T21954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1322.862065][T22319] hfsplus: unable to find HFS+ superblock [ 1325.484276][T21954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1325.753125][T21954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1327.046926][T21954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1328.521656][ T26] audit: type=1326 audit(2000000616.717:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22360 comm="syz.6.4657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e9237aeb9 code=0x0 [ 1328.582205][T22370] vivid-008: disconnect [ 1329.344547][T22356] vivid-008: reconnect [ 1329.437084][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1329.443447][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.397641][T21954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.411936][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1330.425333][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1330.449233][T21954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.488890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1330.721916][T22381] loop8: detected capacity change from 0 to 4096 [ 1331.700298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1331.719778][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.727890][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.771538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1331.981225][T22391] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1332.184178][ T26] audit: type=1800 audit(2000000620.112:830): pid=22381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4659" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1332.801713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1332.827533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1333.052582][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.059708][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.206894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1333.403966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1333.668243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1333.813518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1333.868499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1333.884934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1333.979127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1334.049875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1334.081562][T21954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1334.099031][T21954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1334.187005][T22420] device syzkaller0 entered promiscuous mode [ 1334.239230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1334.258897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1334.434780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1334.731604][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1334.743197][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1334.769584][T21954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.842048][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1334.855429][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1334.899888][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1334.917060][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1334.987747][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1335.014852][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1335.071706][T21954] device veth0_vlan entered promiscuous mode [ 1335.103882][T21954] device veth1_vlan entered promiscuous mode [ 1335.645834][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1335.687343][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1335.742245][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1335.804539][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1335.868222][T21954] device veth0_macvtap entered promiscuous mode [ 1335.941919][T21954] device veth1_macvtap entered promiscuous mode [ 1336.012460][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.094432][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.163040][T22467] vivid-008: disconnect [ 1336.175429][T21954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.494864][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.724030][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.908527][T22459] vivid-008: reconnect [ 1336.943414][T21954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1337.008779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1337.041556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1337.081281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1337.122429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1337.161477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1337.319242][T21954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.369869][T21954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.399524][T21954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.427207][T21954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.899641][T12432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.936327][T12432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.002147][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1338.245405][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.276980][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.387918][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1341.624546][T22541] loop9: detected capacity change from 0 to 256 [ 1342.080640][T22541] FAT-fs (loop9): Directory bread(block 64) failed [ 1342.087356][T22541] FAT-fs (loop9): Directory bread(block 65) failed [ 1342.093953][T22541] FAT-fs (loop9): Directory bread(block 66) failed [ 1342.100563][T22541] FAT-fs (loop9): Directory bread(block 67) failed [ 1342.107310][T22541] FAT-fs (loop9): Directory bread(block 68) failed [ 1342.113861][T22541] FAT-fs (loop9): Directory bread(block 69) failed [ 1342.120508][T22541] FAT-fs (loop9): Directory bread(block 70) failed [ 1342.127214][T22541] FAT-fs (loop9): Directory bread(block 71) failed [ 1342.133809][T22541] FAT-fs (loop9): Directory bread(block 72) failed [ 1342.140384][T22541] FAT-fs (loop9): Directory bread(block 73) failed [ 1342.413891][T22541] attempt to access beyond end of device [ 1342.413891][T22541] loop9: rw=2049, want=1832, limit=256 [ 1342.429313][T22541] attempt to access beyond end of device [ 1342.429313][T22541] loop9: rw=2049, want=2800, limit=256 [ 1343.816365][T22566] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4692'. [ 1345.257264][T22586] hfsplus: unable to find HFS+ superblock [ 1347.632801][ T4188] Bluetooth: hci4: Received unexpected HCI Event 00000000 [ 1347.811455][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4701'. [ 1355.129731][T22709] hfsplus: unable to find HFS+ superblock [ 1356.257540][T22717] loop8: detected capacity change from 0 to 32768 [ 1356.683486][T22717] XFS (loop8): Mounting V5 Filesystem [ 1356.801909][T22717] XFS (loop8): Ending clean mount [ 1356.809761][T22717] XFS (loop8): Quotacheck needed: Please wait. [ 1356.880144][T22717] XFS (loop8): Quotacheck: Done. [ 1356.891681][T22746] loop9: detected capacity change from 0 to 256 [ 1357.440145][T15027] XFS (loop8): Unmounting Filesystem [ 1357.678342][T22750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4729'. [ 1358.841206][T22773] loop9: detected capacity change from 0 to 4096 [ 1359.044525][T22773] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 1362.011624][T12653] libceph: connect (1)[c::]:6789 error -101 [ 1362.180771][T22813] ceph: No mds server is up or the cluster is laggy [ 1362.193701][T12653] libceph: mon0 (1)[c::]:6789 connect error [ 1363.980394][T22854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1365.378680][T22872] loop8: detected capacity change from 0 to 4096 [ 1368.541627][T22907] overlayfs: failed to clone upperpath [ 1370.693657][T22937] vivid-008: disconnect [ 1371.415490][T22928] vivid-008: reconnect [ 1371.971312][T22932] hfsplus: unable to find HFS+ superblock [ 1372.194972][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4770'. [ 1375.799461][T22988] hfsplus: unable to find HFS+ superblock [ 1377.606353][T23010] hfsplus: unable to find HFS+ superblock [ 1379.590384][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4785'. [ 1380.946230][T23032] loop9: detected capacity change from 0 to 1024 [ 1384.730299][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4798'. [ 1385.674656][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4800'. [ 1388.475891][T23125] sd 0:0:1:0: device reset [ 1389.309213][T23131] loop2: detected capacity change from 0 to 4096 [ 1389.338628][T23126] hfsplus: unable to find HFS+ superblock [ 1389.365322][T23131] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1389.454765][T23131] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 1390.502323][T23142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4809'. [ 1390.619130][T23142] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4809'. [ 1393.524254][T23154] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4814'. [ 1393.672545][T23151] hfsplus: unable to find HFS+ superblock [ 1395.291347][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1395.952878][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1401.657088][T23212] loop8: detected capacity change from 0 to 8 [ 1402.576337][T23216] delete_channel: no stack [ 1402.581747][T23216] delete_channel: no stack [ 1402.609602][T23212] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1403.139966][T23222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4827'. [ 1407.226982][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4838'. [ 1409.462736][T23276] lo speed is unknown, defaulting to 1000 [ 1409.473302][T23276] wlan0 speed is unknown, defaulting to 1000 [ 1409.480496][T23276] lo speed is unknown, defaulting to 1000 [ 1409.772740][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4842'. [ 1411.102514][T23302] loop8: detected capacity change from 0 to 1024 [ 1411.615442][T22481] Bluetooth: hci0: command 0x0409 tx timeout [ 1412.066403][T23332] vivid-008: disconnect [ 1412.095144][T23276] chnl_net:caif_netlink_parms(): no params data found [ 1412.880699][T23329] vivid-008: reconnect [ 1413.425900][T23276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.450225][T23276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.844968][T23358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1413.862569][T20024] Bluetooth: hci0: command 0x041b tx timeout [ 1413.939582][T23276] device bridge_slave_0 entered promiscuous mode [ 1413.965005][T23276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.981350][T23276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.998512][T23276] device bridge_slave_1 entered promiscuous mode [ 1414.049509][T23276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.551531][T23276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.960547][T23371] loop8: detected capacity change from 0 to 256 [ 1415.252511][T23276] team0: Port device team_slave_0 added [ 1415.965211][T23276] team0: Port device team_slave_1 added [ 1415.996509][T23276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.003657][T23276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.052225][T19999] Bluetooth: hci0: command 0x040f tx timeout [ 1416.111530][T23276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.278800][T23276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.285926][T23276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.311858][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.417301][T23276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.701163][T23276] device hsr_slave_0 entered promiscuous mode [ 1417.133767][T23399] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4861'. [ 1417.618125][T23276] device hsr_slave_1 entered promiscuous mode [ 1417.852782][T23276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1417.872807][T23276] Cannot create hsr debugfs directory [ 1418.603892][ T5922] Bluetooth: hci0: command 0x0419 tx timeout [ 1418.817347][T23416] hfsplus: unable to find HFS+ superblock [ 1418.874782][ T9] device ip6gretap0 left promiscuous mode [ 1418.952496][ T9] bond9: (slave ip6gretap2): Releasing backup interface [ 1424.690037][T20024] Bluetooth: hci4: command 0x0406 tx timeout [ 1425.168840][T23483] hfsplus: unable to find HFS+ superblock [ 1426.274862][T23486] loop2: detected capacity change from 0 to 1024 [ 1427.288767][T23496] hfsplus: unable to find HFS+ superblock [ 1427.309018][ T9] device bridge0 left promiscuous mode [ 1428.001304][ T9] device hsr_slave_1 left promiscuous mode [ 1428.261346][ T9] bond10 (unregistering): (slave veth9): Releasing active interface [ 1428.285663][ T9] bond10 (unregistering): Released all slaves [ 1428.298187][ T9] bond9 (unregistering): Released all slaves [ 1428.345070][ T9] bond5 (unregistering): (slave veth7): Releasing active interface [ 1429.017690][ T9] bond8 (unregistering): Released all slaves [ 1429.122213][ T9] bond7 (unregistering): Released all slaves [ 1429.135723][ T9] bond6 (unregistering): Released all slaves [ 1429.271976][ T9] bond5 (unregistering): Released all slaves [ 1429.290561][ T9] bond4 (unregistering): Released all slaves [ 1429.306312][ T9] bond3 (unregistering): Released all slaves [ 1429.317938][ T9] bond2 (unregistering): Released all slaves [ 1429.328690][ T9] bond1 (unregistering): Released all slaves [ 1429.340179][T23519] vivid-008: disconnect [ 1429.490561][ T9] bond0 (unregistering): Released all slaves [ 1429.547076][T23485] netlink: 'syz.2.4880': attribute type 6 has an invalid length. [ 1429.556291][ T4358] smc: removing ib device syz2 [ 1430.173320][T23517] vivid-008: reconnect [ 1431.103332][T23276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1431.383915][T23276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1431.432531][T23276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1431.470796][T23276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1432.650294][T23564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1433.358166][T23276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.387959][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1433.408124][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1433.429816][T23276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.444592][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1433.456833][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1433.473491][T12432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.480649][T12432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.509046][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1433.519581][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1433.529512][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1433.538378][T12432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.545508][T12432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.562106][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1433.596628][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1433.909577][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1434.407202][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1434.462457][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1434.490793][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1434.513846][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1434.552064][T23276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1434.562801][T23276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1434.575792][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1434.585415][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1434.595082][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1434.701550][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1434.724024][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1434.907126][T23598] vivid-008: disconnect [ 1434.999310][T23599] hfsplus: unable to find HFS+ superblock [ 1435.723089][T23593] vivid-008: reconnect [ 1437.043973][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1437.055559][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1437.105138][T23276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.273918][T23607] sd 0:0:1:0: device reset [ 1437.312405][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1437.331540][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1437.486327][T23612] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1437.515699][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1437.533143][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1437.548572][T23276] device veth0_vlan entered promiscuous mode [ 1437.571102][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1437.590007][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1437.623695][T23276] device veth1_vlan entered promiscuous mode [ 1437.654792][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4905'. [ 1437.677201][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1437.685573][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1437.694190][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1437.703132][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1437.717989][T23276] device veth0_macvtap entered promiscuous mode [ 1437.731115][T23276] device veth1_macvtap entered promiscuous mode [ 1437.747850][T23276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1437.758648][T23276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.768965][T23276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1437.780025][T23276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.791499][T23276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.799318][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1437.808064][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1437.816108][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1437.824943][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1437.838994][T23276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.853640][T23276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.864539][T23276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.879830][T23276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.891237][T23276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.899030][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1437.908115][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1437.924323][T23276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.953683][T23276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.963461][T23276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.985651][T23276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.176843][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1439.187352][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1439.197601][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1439.207981][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1439.218463][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1439.229056][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1439.239293][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1439.249408][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1439.259845][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1439.916592][T23627] ipt_CLUSTERIP: Please specify destination IP [ 1439.956399][T23631] loop8: detected capacity change from 0 to 512 [ 1440.149865][T23625] hfsplus: unable to find HFS+ superblock [ 1440.162486][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.172556][T23631] EXT4-fs (loop8): inline encryption not supported [ 1440.206847][T23631] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 1440.217680][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.339328][T23631] EXT4-fs (loop8): inline encryption not supported [ 1440.365093][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.408378][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1440.421183][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.464872][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1442.005415][T23654] sd 0:0:1:0: device reset [ 1442.939205][T23653] loop9: detected capacity change from 0 to 1024 [ 1444.260949][T23691] loop1: detected capacity change from 0 to 512 [ 1444.897323][T23691] EXT4-fs (loop1): inline encryption not supported [ 1444.947970][T23691] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1444.966379][T23691] EXT4-fs (loop1): inline encryption not supported [ 1445.972458][T23717] sd 0:0:1:0: device reset [ 1447.226701][T23725] hfsplus: unable to find HFS+ superblock [ 1447.704450][T23744] __nla_validate_parse: 69 callbacks suppressed [ 1447.704466][T23744] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4937'. [ 1447.844353][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4939'. [ 1448.670125][T23767] loop9: detected capacity change from 0 to 1024 [ 1450.304086][T23790] sd 0:0:1:0: device reset [ 1450.389560][T23791] hfsplus: unable to find HFS+ superblock [ 1452.375593][T23807] loop8: detected capacity change from 0 to 2048 [ 1452.487342][T23807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1452.860326][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4953'. [ 1453.896537][T23807] UDF-fs: error (device loop8): udf_read_inode: (ino 1345) failed !bh [ 1453.968637][T23832] vivid-008: disconnect [ 1454.753164][T23825] vivid-008: reconnect [ 1457.651912][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'. [ 1457.686104][T23877] loop8: detected capacity change from 0 to 4096 [ 1457.765812][T23877] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 1457.858384][T23891] loop9: detected capacity change from 0 to 1024 [ 1458.585806][T23892] autofs4:pid:23892:autofs_fill_super: called with bogus options [ 1460.791817][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1460.799332][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1462.182634][T23941] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1462.804221][T23955] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1463.300330][T23972] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1463.464992][T20024] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1464.395589][T20024] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1464.467824][T20024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.667325][T20024] usb 2-1: Product: syz [ 1464.687554][T20024] usb 2-1: Manufacturer: syz [ 1464.706458][T20024] usb 2-1: SerialNumber: syz [ 1465.950535][T23983] loop8: detected capacity change from 0 to 8192 [ 1466.345482][T23983] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 1466.355975][T23983] REISERFS (device loop8): using ordered data mode [ 1466.362896][T23983] reiserfs: using flush barriers [ 1466.379968][T23983] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1466.401970][T23983] REISERFS (device loop8): checking transaction log (loop8) [ 1467.248062][T23983] REISERFS (device loop8): Using tea hash to sort names [ 1467.268408][T23983] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 1467.899186][T24002] syz.2.4993 (24002) used greatest stack depth: 17464 bytes left [ 1468.008558][T20024] usb 2-1: can't set config #1, error -71 [ 1468.015470][T20024] usb 2-1: USB disconnect, device number 15 [ 1472.745721][T24066] loop8: detected capacity change from 0 to 256 [ 1472.948778][T24066] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 1473.019179][T24066] attempt to access beyond end of device [ 1473.019179][T24066] loop8: rw=0, want=2232, limit=256 [ 1473.037586][T24066] attempt to access beyond end of device [ 1473.037586][T24066] loop8: rw=0, want=4280, limit=256 [ 1473.049313][T24066] attempt to access beyond end of device [ 1473.049313][T24066] loop8: rw=0, want=4285, limit=256 [ 1477.047803][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.058827][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.069310][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.079536][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.089781][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.099980][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.110537][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.121461][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.131646][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.141988][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1477.156044][T24101] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1477.172748][T24101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1477.183271][T24101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1479.272404][T24121] sd 0:0:1:0: device reset [ 1481.939320][T24153] hfsplus: unable to find HFS+ superblock [ 1484.535425][T24164] orangefs_mount: mount request failed with -4 [ 1484.663625][T24174] sd 0:0:1:0: device reset [ 1485.234728][T24181] __nla_validate_parse: 62 callbacks suppressed [ 1485.234744][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5033'. [ 1485.467498][T24179] input: syz1 as /devices/virtual/input/input10 [ 1488.606707][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1488.616440][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1488.625753][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1488.635058][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1488.644621][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1488.653871][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1488.663239][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1488.672451][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1488.682155][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1488.692683][T24211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1488.702204][T24211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1488.710050][T24211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1488.807250][T24198] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1489.270481][T24225] sd 0:0:1:0: device reset [ 1490.850417][T24227] delete_channel: no stack [ 1496.666339][ T26] audit: type=1326 audit(2000000772.236:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1496.728844][T24291] __nla_validate_parse: 65 callbacks suppressed [ 1496.728879][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.745988][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.756785][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.767048][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.777259][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.788025][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.798346][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.808579][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.818958][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.829360][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5055'. [ 1496.843083][T24291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1496.859768][T24291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1496.868140][T24291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1497.280598][ T26] audit: type=1326 audit(2000000772.236:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1497.311564][ T26] audit: type=1326 audit(2000000772.274:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1497.882002][T24306] hfsplus: unable to find HFS+ superblock [ 1498.031977][ T26] audit: type=1326 audit(2000000772.274:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1498.886071][ T26] audit: type=1326 audit(2000000772.283:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1498.911208][ T26] audit: type=1326 audit(2000000772.293:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1498.933933][ T26] audit: type=1326 audit(2000000772.302:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1498.956776][ T26] audit: type=1326 audit(2000000772.302:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1498.993493][T24312] loop2: detected capacity change from 0 to 2048 [ 1499.041913][T24312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1499.156951][ T26] audit: type=1326 audit(2000000772.311:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1499.243959][ T26] audit: type=1326 audit(2000000772.321:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267b860eb9 code=0x7ffc0000 [ 1500.775070][T24333] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1502.335763][T24346] loop9: detected capacity change from 0 to 512 [ 1503.755403][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1503.755422][ T26] audit: type=1326 audit(2000000780.056:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1504.198036][T24350] __nla_validate_parse: 64 callbacks suppressed [ 1504.198052][T24350] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5070'. [ 1504.518476][ T26] audit: type=1326 audit(2000000780.066:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1504.549229][ T26] audit: type=1326 audit(2000000780.421:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1504.599557][T24352] sd 0:0:1:0: device reset [ 1504.679151][ T26] audit: type=1326 audit(2000000780.421:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1504.716172][T24346] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 1504.729847][T24346] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.840989][T24363] loop1: detected capacity change from 0 to 64 [ 1507.869610][T24364] hfsplus: unable to find HFS+ superblock [ 1507.962912][ T26] audit: type=1326 audit(2000000780.421:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1508.421590][ T26] audit: type=1326 audit(2000000780.646:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1508.980928][ T26] audit: type=1326 audit(2000000780.646:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1509.117167][ T26] audit: type=1326 audit(2000000780.646:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1509.140126][ T26] audit: type=1326 audit(2000000780.749:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1509.162765][ T26] audit: type=1326 audit(2000000780.749:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1509.186708][ T26] audit: type=1326 audit(2000000780.749:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1509.420428][ T26] audit: type=1326 audit(2000000780.749:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1509.593228][ T26] audit: type=1326 audit(2000000780.749:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1511.189809][ T26] audit: type=1326 audit(2000000780.749:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1511.214928][ T26] audit: type=1326 audit(2000000780.749:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1511.237719][ T26] audit: type=1326 audit(2000000780.749:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1511.260544][ T26] audit: type=1326 audit(2000000780.749:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.1.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5201beeb9 code=0x7ffc0000 [ 1511.392575][T24378] lo speed is unknown, defaulting to 1000 [ 1511.605702][T24378] wlan0 speed is unknown, defaulting to 1000 [ 1512.377386][T24398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5081'. [ 1512.947130][T24408] sd 0:0:1:0: device reset [ 1513.043947][T24378] chnl_net:caif_netlink_parms(): no params data found [ 1513.331933][T24414] loop1: detected capacity change from 0 to 512 [ 1513.405470][T24414] EXT4-fs (loop1): bad s_min_extra_isize: 43552 [ 1514.166253][ T4521] Bluetooth: hci1: command 0x0409 tx timeout [ 1514.257882][T24420] hfsplus: unable to find HFS+ superblock [ 1515.430733][T24378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.439909][T24378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.448470][T24378] device bridge_slave_0 entered promiscuous mode [ 1515.457339][T24378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.464856][T24378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.472785][T24378] device bridge_slave_1 entered promiscuous mode [ 1515.494686][T24378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.506300][T24378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.523498][T24446] loop2: detected capacity change from 0 to 64 [ 1516.560734][T24446] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1517.221605][ T4521] Bluetooth: hci1: command 0x041b tx timeout [ 1517.615615][T24378] team0: Port device team_slave_0 added [ 1517.718655][T24378] team0: Port device team_slave_1 added [ 1517.776168][T24378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.783200][T24378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.809923][T24378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.824445][T24378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.837149][T24378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.863438][T24378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.945432][T24455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5091'. [ 1518.231007][T24378] device hsr_slave_0 entered promiscuous mode [ 1518.242582][T24378] device hsr_slave_1 entered promiscuous mode [ 1518.419971][T24463] sd 0:0:1:0: device reset [ 1518.851882][T24378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1518.863611][T24378] Cannot create hsr debugfs directory [ 1519.366369][T23523] Bluetooth: hci1: command 0x040f tx timeout [ 1519.459384][T24481] sd 0:0:1:0: device reset [ 1521.594073][ T4521] Bluetooth: hci1: command 0x0419 tx timeout [ 1521.918374][T24378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1521.935518][T24378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1521.951556][T24378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1521.963185][T24378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1522.095573][T24378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.126568][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1522.135347][T12432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1522.161720][T24378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.351668][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1522.376747][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1522.393144][T16142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.400267][T16142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.964647][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1524.007528][T24552] loop1: detected capacity change from 0 to 1024 [ 1524.013271][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1524.088524][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1524.113200][T16142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.120332][T16142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.242663][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1524.251236][T24554] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1524.266556][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1524.278765][T24554] hfsplus: xattr search failed [ 1524.301469][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1524.445189][T24563] hfsplus: unable to find HFS+ superblock [ 1525.799420][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1525.845538][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1525.854358][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1525.867978][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1525.875931][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1525.885341][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1525.912133][T24378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1525.967120][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1525.991761][T24378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1526.007613][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1526.027182][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1526.062681][T24571] sd 0:0:1:0: device reset [ 1526.477849][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1526.484383][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1526.851834][T24589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5112'. [ 1527.690876][T24601] sd 0:0:1:0: device reset [ 1528.178488][T24606] loop8: detected capacity change from 0 to 764 [ 1528.654561][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1528.892695][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1529.070272][T24378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.154071][T24615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5116'. [ 1531.627485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1531.648822][T24639] hfsplus: unable to find HFS+ superblock [ 1531.702376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1532.085909][T24650] hfsplus: unable to find HFS+ superblock [ 1532.167393][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1532.185017][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1532.278955][T24656] sd 0:0:1:0: device reset [ 1532.372041][T24658] loop2: detected capacity change from 0 to 256 [ 1532.456290][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1532.569977][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1532.642323][T24658] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1532.897856][T24658] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1533.131994][T24378] device veth0_vlan entered promiscuous mode [ 1533.141618][T24658] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1533.472050][T24378] device veth1_vlan entered promiscuous mode [ 1533.800248][T24378] device veth0_macvtap entered promiscuous mode [ 1533.810895][T24378] device veth1_macvtap entered promiscuous mode [ 1533.826707][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.837301][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.847558][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.858123][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.867974][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.878594][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.889786][T24378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1533.902182][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.919960][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.929947][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.953026][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.967400][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1534.090557][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.263522][T24378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1534.273968][T24378] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.282705][T24378] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.305703][T24378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.316485][T24378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.031580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1535.076110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1535.138167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1535.146744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1535.155489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1535.170585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1535.179825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1535.238797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1536.005492][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5130'. [ 1536.493360][T12129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.543829][T12129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.616415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1536.688014][T12129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.720368][T12129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.779981][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1536.940071][T24702] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1538.049639][T24718] hfsplus: unable to find HFS+ superblock [ 1542.565508][T24752] loop2: detected capacity change from 0 to 32768 [ 1542.679678][T24755] input: syz1 as /devices/virtual/input/input11 [ 1543.696565][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1543.696580][ T26] audit: type=1800 audit(2000000817.987:877): pid=24759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5139" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 1543.795963][T24759] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 1543.795963][T24759] [ 1543.811555][T24759] ERROR: (device loop2): remounting filesystem as read-only [ 1543.829689][T24759] attempt to access beyond end of device [ 1543.829689][T24759] loop2: rw=2049, want=44040, limit=32768 [ 1544.266719][T24757] hfsplus: unable to find HFS+ superblock [ 1544.511731][ T277] blkno = 1580, nblocks = 1 [ 1546.259621][ T277] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 1546.259621][ T277] [ 1548.537775][T23398] Bluetooth: hci0: command 0x0c1a tx timeout [ 1550.860109][T12808] Bluetooth: hci0: command 0x0406 tx timeout [ 1551.823942][T24823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5151'. [ 1553.357536][T24828] delete_channel: no stack [ 1554.904750][T24844] hfsplus: unable to find HFS+ superblock [ 1556.617618][T24857] loop8: detected capacity change from 0 to 1024 [ 1556.706277][T24857] EXT4-fs (loop8): Ignoring removed orlov option [ 1556.738709][T24857] EXT4-fs (loop8): Ignoring removed bh option [ 1556.944619][T24857] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 1556.969004][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.605061][T24888] sd 0:0:1:0: device reset [ 1561.233475][T24898] hfsplus: unable to find HFS+ superblock [ 1561.253180][T24915] hfsplus: unable to find HFS+ superblock [ 1561.641527][T24932] 9pnet: Insufficient options for proto=fd [ 1561.657339][T24932] netlink: 'syz.9.5173': attribute type 10 has an invalid length. [ 1561.677940][T24932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1561.691920][T24932] bond0: (slave team0): Enslaving as an active interface with an up link [ 1563.089609][T24945] hfsplus: unable to find HFS+ superblock [ 1563.206092][T24952] loop9: detected capacity change from 0 to 64 [ 1566.441596][T24966] fuse: Bad value for 'fd' [ 1566.497408][T24967] sd 0:0:1:0: device reset [ 1567.139282][T24968] hfsplus: unable to find HFS+ superblock [ 1567.190239][T24972] hfsplus: unable to find HFS+ superblock [ 1569.752580][T25001] block device autoloading is deprecated and will be removed. [ 1571.737370][T25007] loop5: detected capacity change from 0 to 512 [ 1571.930263][T25007] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1572.029168][T25007] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 1572.064983][T25019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5191'. [ 1572.101224][T25007] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1572.261366][T25021] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 1572.273290][T25021] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1572.283132][T25021] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.5190: Failed to acquire dquot type 1 [ 1573.395978][T25030] sd 0:0:1:0: device reset [ 1573.470887][T25033] loop5: detected capacity change from 0 to 1024 [ 1573.521282][T25033] EXT4-fs (loop5): Ignoring removed orlov option [ 1573.550790][T25033] EXT4-fs (loop5): Ignoring removed bh option [ 1573.635559][T25033] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 1575.227271][T25048] loop1: detected capacity change from 0 to 64 [ 1576.566587][T25059] hfsplus: unable to find HFS+ superblock [ 1576.706200][T25065] loop5: detected capacity change from 0 to 1024 [ 1577.306160][T25084] loop1: detected capacity change from 0 to 256 [ 1579.144563][T25083] hfsplus: unable to find HFS+ superblock [ 1579.587571][T25094] loop2: detected capacity change from 0 to 40427 [ 1579.764039][T25094] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 1579.773214][T25094] F2FS-fs (loop2): Unrecognized mount option "fowner<00000000001768" or missing value [ 1580.813653][T25108] loop1: detected capacity change from 0 to 1024 [ 1581.511278][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 1581.787096][T25108] hfsplus: invalid btree flag [ 1581.803911][T25108] hfsplus: failed to load catalog file