last executing test programs: 15m2.307337212s ago: executing program 32 (id=709): syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12m52.562951744s ago: executing program 33 (id=1395): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m21.52907015s ago: executing program 34 (id=1564): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) 11m54.773322844s ago: executing program 35 (id=1668): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 10m25.261217467s ago: executing program 7 (id=2048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x3, &(0x7f00000007c0)=""/210, 0xd2) 10m23.763435186s ago: executing program 7 (id=2051): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 10m23.375858789s ago: executing program 7 (id=2056): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) unshare(0x2c020400) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x11) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 10m18.675307749s ago: executing program 7 (id=2069): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5eef8c28, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x3f31, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc5501, 0x104) write$char_usb(r2, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000000c0)=""/107) 10m12.86822285s ago: executing program 7 (id=2096): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 10m9.258674111s ago: executing program 7 (id=2089): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x30c}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 9m54.133212752s ago: executing program 36 (id=2089): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x30c}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 8m14.793826658s ago: executing program 3 (id=2491): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000200)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@lazytime}, {@nodiscard}, {@nobarrier}]}, 0x5, 0x46f, &(0x7f0000001200)="$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") r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r0}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'poly1305\x00'}}, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f000001f940)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000a3e182e04b1499a5b4", @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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") socket(0x10, 0x3, 0x4) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000002400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000002680)={0x0, 0x0, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f0f00010a100300000000004000f087ca040bb7a829df978b6c6a5c6dfe763562f387404135636d60de78db01e08dfafaf95e43a5aed0d100f5a7923d18b0f1b83f28c50ce26946ae674f54ed5b45a84b9100af9f4cbe7c05d5931297bfc303d253ff18b2895ee18aad2b1d6665161a8e699e7c8dd6434bc2b2a835acb57d60bde124031a0f9cdf1d3a87f614d908d340531f8884af4c5035ed2207f1de967860a109149780ad1b44da324ee43e73d60eb55465c36cf11a89d86b91"], 0x1, [{0x0, 0x0}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000019000040000280ffffff05000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0xff80) 8m11.357268961s ago: executing program 3 (id=2508): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvfrom(r1, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 8m6.646905839s ago: executing program 3 (id=2527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) eventfd2(0x49d, 0x800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) open(&(0x7f0000000340)='./file0\x00', 0x143fc2, 0x1c0) acct(&(0x7f0000000200)='./file0\x00') syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) 8m5.761238682s ago: executing program 3 (id=2529): syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x4c8, &(0x7f0000000340)=ANY=[@ANYBLOB='sbsector=0x000000007fffffff,check=strict,session=0x0000000000000049,sbsector=0x0000000000000003,sbsector=0xffffffffffffffff,hide,mode=0x0000000000000000,overriderockperm,nocompress,iocharset=macgaelic,dmode=0x0000000000000001,iocharset=cp863,iocharset=none,nojoliet,session=0x0000000000000027,smackfshat=,permit_directzo,\x00'], 0x0, 0x943, &(0x7f0000004fc0)="$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") mount$tmpfs(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1005848, 0x0) 8m3.941496643s ago: executing program 3 (id=2535): open(0x0, 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 8m2.709562258s ago: executing program 3 (id=2537): capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080)={0x200000, 0x200000, 0x5, 0xfffffffc, 0x40000003, 0x3fd}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xd) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1010420, &(0x7f0000000640)={[{@data_err_abort}, {@nomblk_io_submit}, {@quota}, {@noblock_validity}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@context={'context', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '%'}}, {@context={'context', 0x3d, 'user_u'}}, {@measure}, {@euid_lt}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@seclabel}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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") r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) 8m1.2586502s ago: executing program 37 (id=2537): capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080)={0x200000, 0x200000, 0x5, 0xfffffffc, 0x40000003, 0x3fd}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xd) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1010420, &(0x7f0000000640)={[{@data_err_abort}, {@nomblk_io_submit}, {@quota}, {@noblock_validity}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@context={'context', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '%'}}, {@context={'context', 0x3d, 'user_u'}}, {@measure}, {@euid_lt}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@seclabel}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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") r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) 4m0.327795457s ago: executing program 1 (id=3171): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 3m57.151652926s ago: executing program 1 (id=3176): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24044014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x80000000, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(r4, 0x93c, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000001c0)={r5, r6+60000000}) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 3m55.349652518s ago: executing program 1 (id=3186): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x40, 0x4) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000200000000020000000900020073797a3100000000080004"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3m54.637678498s ago: executing program 1 (id=3189): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd09000085"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) sendto$inet6(r2, &(0x7f0000000040)='l', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000880)={0x2, 0x4, @status={[0x4, 0x6, 0x1, 0x10000, 0x80, 0xc]}, [0x1, 0x80, 0x7, 0x7, 0x8, 0x7f, 0xf, 0x0, 0x6, 0x9, 0x7, 0xc000, 0x5, 0x8000, 0x9, 0x1e, 0x1000, 0x6, 0x3, 0x8, 0x5, 0x8, 0xfffffffffffffffa, 0xb19, 0x1, 0x1, 0x51, 0x8, 0x400, 0x9, 0x8, 0x7, 0x5, 0x100000000, 0x4, 0x5, 0x40, 0x7, 0x9, 0x0, 0x2, 0x1ff, 0x7fff, 0x6, 0x2496, 0xc08d, 0x0, 0x1cc2, 0x10001, 0xfffffffffffffff8, 0x80000000, 0x7fffffff, 0x7, 0x6, 0xfffffffffffff001, 0x6, 0x9, 0x8, 0x2, 0x5, 0x5, 0x1, 0x6, 0x7]}) 3m51.064040968s ago: executing program 1 (id=3212): socket$inet6(0xa, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 3m37.033060649s ago: executing program 1 (id=3221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000006580)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) 3m20.780448476s ago: executing program 38 (id=3221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000006580)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) 1m55.043287562s ago: executing program 4 (id=3449): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 1m52.812538568s ago: executing program 4 (id=3454): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x7ff, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsgid(0xee00) syz_emit_ethernet(0x50, &(0x7f0000000140)={@random="e10931d8640a", @random="68228555464e", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, 'tC\x00', 0x1a, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[@fragment={0x29, 0x0, 0x1, 0x0, 0x0, 0x0, 0x66}], {0x0, 0x8afe, 0x12, 0x0, @opaque="5fe67c7a42e698b8f71e"}}}}}}, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x1, 0xffc0, 0x3000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x400, 0x0) write$FUSE_INIT(r0, &(0x7f0000000580)={0x50, 0x0, r1, {0x7, 0x28, 0xfffd, 0x40200880, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r2, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m52.279411793s ago: executing program 4 (id=3459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) 1m49.494692607s ago: executing program 4 (id=3465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000008000000000aec8000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014f6ff00b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b702000001000b008500000084000000b70000000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 1m43.889650587s ago: executing program 4 (id=3472): r0 = fanotify_init(0x40, 0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x18}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000940)=""/229, 0xe5) 1m41.907967929s ago: executing program 4 (id=3476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000080)=""/92) shmctl$SHM_INFO(r3, 0xe, 0x0) 1m25.843759054s ago: executing program 39 (id=3476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000080)=""/92) shmctl$SHM_INFO(r3, 0xe, 0x0) 27.118045695s ago: executing program 8 (id=3606): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r3 = socket(0x10, 0x2, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 22.797487734s ago: executing program 5 (id=3611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 22.48341173s ago: executing program 8 (id=3613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x230821) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}}) 21.617098394s ago: executing program 2 (id=3616): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x44040}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r5, 0x6}, 0x8) 18.910081315s ago: executing program 8 (id=3617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="06000000914faeb2126be3608491367e", 0x10) 17.314536117s ago: executing program 2 (id=3620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 15.821893496s ago: executing program 0 (id=3623): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 15.821701671s ago: executing program 9 (id=3624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x2e) ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0) 15.819842213s ago: executing program 8 (id=3625): timer_create(0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147142, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@errors_remount}, {@noquota}, {@mblk_io_submit}]}, 0x0, 0x523, &(0x7f0000000600)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000a00fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x82) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) 15.816519609s ago: executing program 5 (id=3626): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14.416199187s ago: executing program 2 (id=3628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c00)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x8}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0x8, 0xb709, 0x0, [{0x8, 0x1, 0x10, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.490112855s ago: executing program 5 (id=3629): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r4, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) 13.489171819s ago: executing program 9 (id=3641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 13.488430703s ago: executing program 0 (id=3630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 13.311427899s ago: executing program 6 (id=3631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000003f, 0x0, 0x0, 0x3b5b74e9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000700000000800000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 11.413888383s ago: executing program 2 (id=3632): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.412234408s ago: executing program 9 (id=3633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x800) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 10.704824394s ago: executing program 0 (id=3634): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 10.486028094s ago: executing program 8 (id=3635): syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) syz_genetlink_get_family_id$team(0x0, r0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) 9.541664119s ago: executing program 6 (id=3636): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 9.541505651s ago: executing program 5 (id=3637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="06000000914faeb2126be3608491367e", 0x10) 9.415852826s ago: executing program 9 (id=3638): r0 = signalfd(0xffffffffffffffff, &(0x7f0000001140)={[0x9]}, 0x8) openat(r0, 0x0, 0x3c8c2, 0x1b9) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) epoll_create(0x7e) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x5, 0x1000001000, 0x2}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 8.219645704s ago: executing program 6 (id=3639): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) openat(0xffffffffffffffff, 0x0, 0x501180, 0x5c) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = msgget(0x3, 0x710) msgget(0x2, 0x624) r2 = msgget(0x1, 0x240) msgctl$IPC_RMID(r1, 0x0) timer_create(0x0, 0x0, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) msgctl$IPC_RMID(r2, 0x0) 8.219448259s ago: executing program 5 (id=3640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, 0x0, 0x0) 8.153582508s ago: executing program 0 (id=3642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'basic\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, 0x0, 0x0) 7.945694197s ago: executing program 6 (id=3643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) 6.821118438s ago: executing program 5 (id=3644): socket$key(0xf, 0x3, 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x6, 0x800077, 0x8, 0x4, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0xffff, @empty}, {0x4, 0x40, @remote}, {0x2, 0x0, @multicast1}, 0x22e, 0x0, 0x0, 0xfdffffffffffffff, 0xfffc, 0x0, 0x71cf0b8c, 0x0, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800dd8d00000000ffdbdf3502200004ff000006"], 0x1c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) 6.504466164s ago: executing program 6 (id=3645): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f00000002c0), 0x400, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.295702426s ago: executing program 9 (id=3646): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000004e200000100000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f0000000080), 0x0}, 0x20) 6.275918801s ago: executing program 2 (id=3647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 6.220029322s ago: executing program 0 (id=3648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, 0x0) 6.031880923s ago: executing program 8 (id=3649): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x30, 0xffffffffffffffff, 0xb146000) openat$nullb(0xffffffffffffff9c, 0x0, 0x123a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 4.553124775s ago: executing program 9 (id=3650): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXsje93GVgWbT4CEECBxggsXJD4AEorEhSNCigRnkIpACFKQ4FA6aHZnbbOedTZm7Y3Xv580mfedf8/zbjyzMzuvZgI4t56PiDci4sM0TV+KiNl8eikfotUZsuXef/jucjYkkaZv/S2JJJ+WLZamadrd5uV8temI+NpXIr6ZHAg4nY93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTz++24xgmj5rZaXr5wnTPCpvHDPYkytpT/iCvXBxsnXsnmRAAAH1l5/gfiYhPRcRLMRsTR5/OAgAAAGdQ+oWZ+CDp3L8rMNVnOgAAAHCGlNp9YJNSJe8LMBOlUqXS6cP7sbhUqje2mp+51djeWOn0lZ2LcunWWr12I+8rPBflJKvPt8v79Zd76gsR8XREfG/2YrteWW7UV0b94wcAAACcE5d7rv//Odu5/j9acjrJAQAAAMMzN+oEAAAAgBPn+h8AAADGWnnUCQAAAAAn7qtvvpkNaff91ytv72zfbrx9faW2dbuyvr1cWW5s3qmsNhqr7Wf2rT9qe/VG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjk6U/e/30SEa3PX2wPmalRJwWcism9UveZngV7/x+e6ozfO6WkgFMxMcAy710onu48Ac62yd4JffZ1YPzo/w886o0efTvv/KYzKg05HwAAYPiufuK49/9bTvnhjPMmTzi/eu7/p7OjSgQ4de3v/0E78jjjh7FSHqgHIDDO/t/7/4+Wpo+VEAAAMHQz7SEpVfKf92aiVKpUIq60XwtYTm6t1Ws3IuKpiPjdbPlCVp9vr5m4dwgAAAAAAAAAAAAAAAAAAAAAAAAAA0rTJFIAAABgrEWU/pz8qvMs/6uzL870/j4wlfy7/UrgqYh450dv/eDuUrO5OZ9N//ve9OYP8+kvj+IXDAAAAKBX9zq9Pf7XqLMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNy8//Dd5e4wwOIXhxX3r1+MiLmi+JMx3R5PRzkiLv0jickD6yURMTGE+K17EfHxovhJltZeyKL4w/gQWveSVtpWGD/m8k+hKP7lIcSH8+x+dvx5o2j/L8Xz7XHx/jcZ8T/14+p//Iu9499En/3/yoAxnnnw82rf+PcinpksPv514yd94r8wUPRyfOPru7v95qY/jrja/f5pH/EORtgvVZvrd6pbO7vX19aXVmurtY2FhflXF19bfGXxRvXWWr2W/1sY47vP/uLDo9p/qfD7L8mz6d/+Fwu2N1GQ/38e3H340W6ldTj+tRcK4v/6J/kSh+OX8jifzsvZ/KvdcqtTPui5n/32uaPav7Lf/vLj/P9f67fRXod2lGcH+9MBAE7E1s7u7aV6vbY5toXsKv0JSOM4hal4ItIY38K3s8KDYW0wTdM026cKZt2PiEG2k8SQW1oqzme/0PcIMOojEwAAMGz7J/2jzgQAAAAAAAAAAAAAAAAAAADOr9N4ylpvzP1HICfDeIQ2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBQ/DcAAP///wrcAQ==") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 1.201052249s ago: executing program 2 (id=3651): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 1.147738627s ago: executing program 6 (id=3652): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x7, 0x1002, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r3, 0x80000001, 0x4) 0s ago: executing program 0 (id=3653): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=ANY=[], 0xc}}], 0x1, 0x45) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) kernel console output (not intermixed with test programs): : Cannot turn on journaled quota: type 1: error -117 [ 578.814240][T13839] loop3: p2 start 4292936063 is beyond EOD, truncated [ 578.876968][T13839] loop3: p3 start 83886144 is beyond EOD, truncated [ 578.888697][T13855] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.954207][T13839] loop3: p4 size 50331648 extends beyond EOD, truncated [ 579.305330][ T5781] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 579.498866][ T5781] usb 10-1: config 0 has an invalid interface number: 210 but max is 0 [ 579.550965][ T5781] usb 10-1: config 0 has no interface number 0 [ 579.586977][ T5781] usb 10-1: config 0 interface 210 altsetting 227 endpoint 0xF is Bulk; changing to Interrupt [ 579.656157][ T5781] usb 10-1: config 0 interface 210 has no altsetting 0 [ 579.726085][ T5781] usb 10-1: string descriptor 0 read error: -22 [ 579.769275][ T5781] usb 10-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=99.e1 [ 579.816630][ T5781] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.899339][ T5781] usb 10-1: config 0 descriptor?? [ 579.935612][T13855] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 579.992764][ T5781] appledisplay 10-1:0.210: Could not find int-in endpoint [ 580.050677][ T5781] usbhid 10-1:0.210: couldn't find an input interrupt endpoint [ 580.185203][T13863] EXT4-fs error (device loop9): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 580.351583][T13855] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.2269: Directory hole found for htree index block 0 [ 580.446351][ T5781] usb 10-1: USB disconnect, device number 3 [ 581.171714][T12815] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.645188][T13914] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 581.840947][T13921] binder: 13920:13921 ioctl c0306201 200000000080 returned -14 [ 581.886400][T13921] binder: 13920:13921 ioctl c0306201 2000000003c0 returned -14 [ 582.047219][T13919] veth7: entered promiscuous mode [ 582.117466][T13919] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 582.836369][T13941] loop4: detected capacity change from 0 to 512 [ 582.882129][T13944] netlink: 'syz.5.2295': attribute type 1 has an invalid length. [ 583.280069][T13944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.407119][T10919] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 583.590605][T10919] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 583.644288][T10919] usb 10-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 583.683210][T10919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.712923][T10919] usb 10-1: Product: syz [ 583.728157][T10919] usb 10-1: Manufacturer: syz [ 583.744323][T10919] usb 10-1: SerialNumber: syz [ 584.957386][T10919] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 584.971431][T10919] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 584.998359][T10919] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 585.007764][T10919] usb 10-1: media controller created [ 585.019334][T10919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.170194][T10919] DVB: Unable to find symbol dib7000p_attach() [ 585.200709][T10919] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 585.339768][ T30] audit: type=1804 audit(1778625974.801:231): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2303" name="/newroot/11/file0" dev="tmpfs" ino=76 res=1 errno=0 [ 585.431739][ T30] audit: type=1804 audit(1778625974.881:232): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2302" name="/newroot/192/file0" dev="fuse" ino=1 res=1 errno=0 [ 585.457784][T10919] rc_core: IR keymap rc-dib0700-rc5 not found [ 585.476783][T10919] Registered IR keymap rc-empty [ 585.493193][T10919] dvb-usb: could not initialize remote control. [ 585.517081][T10919] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 585.565564][T10919] usb 10-1: USB disconnect, device number 4 [ 585.681938][T10919] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 587.032269][T14003] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 587.857881][ T8460] bond0: (slave bond_slave_0): interface is now down [ 587.984903][ T8460] bond0: (slave bond_slave_1): interface is now down [ 588.084292][ T8460] bond0: now running without any active interface! [ 588.357133][ T8460] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 588.441764][ T8460] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 588.563698][ T8460] bond0: active interface up! [ 588.920912][T14039] binder_alloc: 14037: binder_alloc_buf size 8 failed, no address space [ 588.988291][T14039] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 592.043143][T14078] bond4: option mode: unable to set because the bond device has slaves [ 592.293399][T14081] fuse: fd is not a fuse device [ 592.324924][T14078] ip6gretap1: entered promiscuous mode [ 592.367607][T14078] ip6gretap1: entered allmulticast mode [ 592.421643][T14078] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 592.977862][T14079] bond4: left allmulticast mode [ 593.001684][T14079] veth9: left allmulticast mode [ 593.024492][T14079] ip6gretap1: left allmulticast mode [ 593.521892][T14103] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 593.610289][T14103] netlink: 'syz.5.2339': attribute type 7 has an invalid length. [ 596.772285][T14149] xt_hashlimit: size too large, truncated to 1048576 [ 598.063905][T14170] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 600.467039][T14200] netlink: 'syz.3.2364': attribute type 39 has an invalid length. [ 602.736989][T14210] 9pnet_fd: p9_fd_create_tcp (14210): problem connecting socket to 127.0.0.1 [ 602.748036][T14213] netlink: 'syz.4.2378': attribute type 1 has an invalid length. [ 602.818058][T14210] 9pnet_fd: p9_fd_create_tcp (14210): problem connecting socket to 127.0.0.1 [ 602.903581][T14210] 9pnet_fd: p9_fd_create_tcp (14210): problem connecting socket to 127.0.0.1 [ 603.004263][T14213] veth3: entered promiscuous mode [ 603.038669][T14210] 9pnet_fd: p9_fd_create_tcp (14210): problem connecting socket to 127.0.0.1 [ 603.183503][T14210] 9pnet_fd: p9_fd_create_tcp (14210): problem connecting socket to 127.0.0.1 [ 603.302314][T14210] 9pnet_fd: p9_fd_create_tcp (14210): problem connecting socket to 127.0.0.1 [ 603.330037][T14210] 9pnet_fd: p9_fd_create_tcp (14210): problem connecting socket to 127.0.0.1 [ 603.398001][T14210] 9pnet_fd: p9_fd_create_tcp (14210): problem connecting socket to 127.0.0.1 [ 603.413730][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2370'. [ 603.429614][T14210] 9pnet_fd: p9_fd_create_tcp (14210): problem connecting socket to 127.0.0.1 [ 603.478681][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2370'. [ 603.516608][T14225] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 603.586641][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2370'. [ 603.914509][T14232] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2372'. [ 604.387353][T14236] binder: 14235:14236 ioctl c0306201 200000000280 returned -14 [ 605.005959][T14253] loop9: detected capacity change from 0 to 2048 [ 605.351647][T14253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.863097][T14260] bond6: (slave ip6gretap1): making interface the new active one [ 605.990269][T14265] xt_hashlimit: size too large, truncated to 1048576 [ 606.006943][T14260] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 606.303843][T14273] loop9: detected capacity change from 0 to 512 [ 606.382305][T14273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 606.524195][T14273] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2383: iget: bad i_size value: 38620345925642 [ 606.653944][T14273] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 606.654851][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 606.670550][ C0] EXT4-fs (loop9): initial error at time 1778625996: ext4_orphan_get:1397: inode 15 [ 606.680002][ C0] EXT4-fs (loop9): last error at time 1778625996: ext4_orphan_get:1397: inode 15 [ 606.723568][T14273] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.2383: couldn't read orphan inode 15 (err -117) [ 606.805379][T14273] loop9: lost filesystem error report for type 5 error -117 [ 606.844604][T14273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.100736][T14273] EXT4-fs error (device loop9): ext4_validate_block_bitmap:431: comm syz.9.2383: bg 0: block 5: invalid block bitmap [ 607.261424][T14273] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 56 with error 28 [ 607.404788][T14273] EXT4-fs (loop9): This should not happen!! Data will be lost [ 607.404788][T14273] [ 607.506719][T14273] EXT4-fs (loop9): Total free blocks count 0 [ 607.605245][T14273] EXT4-fs (loop9): Free/Dirty block details [ 607.657120][T14273] EXT4-fs (loop9): free_blocks=0 [ 607.713290][T14273] EXT4-fs (loop9): dirty_blocks=56 [ 607.786032][T14273] EXT4-fs (loop9): Block reservation details [ 607.871103][T14273] EXT4-fs (loop9): i_reserved_data_blocks=56 [ 607.914162][T14288] loop5: detected capacity change from 0 to 32768 [ 608.008524][T14288] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 608.182595][T12815] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.183248][T14288] XFS (loop5): Ending clean mount [ 608.213070][T14288] XFS (loop5): Quotacheck needed: Please wait. [ 608.419847][T14288] XFS (loop5): Quotacheck: Done. [ 608.611085][T14301] overlayfs: failed to clone upperpath [ 608.871315][ T9089] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 613.583714][T14347] loop3: detected capacity change from 0 to 32768 [ 613.654574][T14347] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 613.727315][T14347] XFS (loop3): Ending clean mount [ 613.746711][T14347] XFS (loop3): Quotacheck needed: Please wait. [ 614.000169][T14347] XFS (loop3): Quotacheck: Done. [ 614.340431][ T9150] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 614.421601][T14368] erspan0: left promiscuous mode [ 616.730863][T14390] loop4: detected capacity change from 0 to 128 [ 617.098975][T14394] syz.4.2416: attempt to access beyond end of device [ 617.098975][T14394] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 617.523639][T14401] fuse: fd is not a fuse device [ 618.830703][T14419] loop9: detected capacity change from 0 to 32768 [ 618.894437][T14419] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 619.014569][T14419] XFS (loop9): Ending clean mount [ 619.023386][T14419] XFS (loop9): Quotacheck needed: Please wait. [ 619.386300][T14419] XFS (loop9): Quotacheck: Done. [ 619.805798][T12815] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 619.960568][T14443] random: crng reseeded on system resumption [ 620.414421][T14456] fuse: fd is not a fuse device [ 620.931145][T14463] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2436'. [ 620.958546][T14461] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 622.262507][T14481] loop4: detected capacity change from 0 to 32768 [ 622.309595][T14481] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 622.404577][T14481] XFS (loop4): Ending clean mount [ 622.428429][T14481] XFS (loop4): Quotacheck needed: Please wait. [ 622.797219][T14481] XFS (loop4): Quotacheck: Done. [ 622.858260][T14477] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.925463][T14477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.231722][T13352] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 623.242269][T14477] veth1_vlan: left promiscuous mode [ 623.278759][T14477] veth0_vlan: left promiscuous mode [ 623.331372][T14477] veth0_vlan: entered promiscuous mode [ 623.505882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 623.534843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 623.622281][T14477] veth1_vlan: entered promiscuous mode [ 623.654855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 623.713702][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.724334][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.755789][T14477] veth1_macvtap: left promiscuous mode [ 623.826679][T14477] veth0_macvtap: left promiscuous mode [ 623.867961][T14477] veth0_macvtap: entered promiscuous mode [ 623.923816][T14477] veth1_macvtap: entered promiscuous mode [ 624.151678][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.229810][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 624.342794][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 624.407322][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.454779][T14477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.534797][T14477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.611869][T14477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.685603][T14477] 8021q: adding VLAN 0 to HW filter on device bond4 [ 625.129180][ T8460] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.182377][ T8460] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.249432][ T8460] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.300945][ T8460] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.423647][ T8460] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.492795][ T8460] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.580387][ T8437] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.649935][ T8437] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.966768][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 629.230277][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 629.263961][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.302995][ T10] usb 5-1: Product: syz [ 629.329788][ T10] usb 5-1: Manufacturer: syz [ 629.349536][ T10] usb 5-1: SerialNumber: syz [ 629.400908][ T10] usb 5-1: config 0 descriptor?? [ 629.575195][ T5781] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 629.815887][ T5781] usb 10-1: Using ep0 maxpacket: 8 [ 629.867960][ T5781] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 630.884456][ T10] usb 5-1: Firmware: major: 226, minor: 19, hardware type: UNKNOWN (46) [ 630.915031][ T4937] Bluetooth: hci2: command 0x0406 tx timeout [ 631.953170][ T10] usb 5-1: failed to fetch extended address, random address set [ 631.961633][ T5781] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 632.099251][ T10] usb 5-1: atusb_probe: initialization failed, error = -524 [ 632.108072][ T5781] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 632.162718][ T10] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 632.178868][ T5781] usb 10-1: Product: syz [ 632.220266][ T5781] usb 10-1: Manufacturer: syz [ 632.263059][ T5781] usb 10-1: SerialNumber: syz [ 632.382321][ T10] usb 5-1: USB disconnect, device number 3 [ 632.534426][ T5781] usb 10-1: can't set config #1, error -71 [ 632.591588][ T5781] usb 10-1: USB disconnect, device number 5 [ 634.037469][T14583] fuse: fd is not a fuse device [ 634.324449][T14587] loop4: detected capacity change from 0 to 512 [ 634.488641][T14587] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 634.613396][T14587] EXT4-fs (loop4): orphan cleanup on readonly fs [ 634.656120][T14587] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2473: bad orphan inode 15 [ 634.677851][T14587] loop4: lost filesystem error report for type 5 error -117 [ 634.684866][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 634.698819][ C0] EXT4-fs (loop4): initial error at time 1778626024: ext4_orphan_get:1423 [ 634.707439][ C0] EXT4-fs (loop4): last error at time 1778626024: ext4_orphan_get:1423 [ 634.794302][T14587] ext4_test_bit(bit=14, block=18) = 1 [ 634.821095][T14587] is_bad_inode(inode)=0 [ 634.863481][T14587] NEXT_ORPHAN(inode)=1023 [ 634.912226][T14587] max_ino=32 [ 634.952722][T14587] i_nlink=0 [ 635.017101][T14587] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.2473: corrupted xattr block 19: e_value size too large [ 635.120995][T14587] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 635.149020][T14587] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 635.274709][T14587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 635.461207][T14587] EXT4-fs error (device loop4): ext4_lookup:1787: inode #2: comm syz.4.2473: deleted inode referenced: 15 [ 635.833573][T14610] netlink: 'syz.2.2481': attribute type 1 has an invalid length. [ 636.060790][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 637.650021][T14610] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 643.120786][T13352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 643.336254][T14629] kernel read not supported for file /file0 (pid: 14629 comm: syz.9.2485) [ 643.436659][ T30] audit: type=1800 audit(1778626032.901:233): pid=14629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2485" name="file0" dev="mqueue" ino=46087 res=0 errno=0 [ 644.065472][T14651] loop3: detected capacity change from 0 to 512 [ 644.148506][T14651] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 644.283620][T14651] EXT4-fs (loop3): orphan cleanup on readonly fs [ 644.320332][T14651] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:516: comm syz.3.2491: Block bitmap for bg 0 marked uninitialized [ 644.335617][T14651] loop3: lost filesystem error report for type 5 error -117 [ 644.344980][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 644.358774][ C0] EXT4-fs (loop3): initial error at time 1778626033: ext4_read_block_bitmap_nowait:516 [ 644.368495][ C0] EXT4-fs (loop3): last error at time 1778626033: ext4_read_block_bitmap_nowait:516 [ 644.378701][T14651] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 644.390598][T14651] loop3: lost filesystem error report for type 5 error -117 [ 644.404570][T14651] EXT4-fs (loop3): 1 orphan inode deleted [ 644.441881][T14651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 644.478201][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2493'. [ 644.658356][T14651] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 644.723237][T14651] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 644.851994][T14667] loop4: detected capacity change from 0 to 256 [ 645.124982][T10919] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 645.351709][T10919] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 645.437066][T10919] usb 4-1: string descriptor 0 read error: -22 [ 645.482583][T10919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.545644][T10919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.636543][T10919] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 645.867805][T14683] loop5: detected capacity change from 0 to 512 [ 645.968250][T14683] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 646.022190][T14683] EXT4-fs (loop5): orphan cleanup on readonly fs [ 646.067985][T14683] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2503: bad orphan inode 15 [ 646.090343][T14683] loop5: lost filesystem error report for type 5 error -117 [ 646.091617][T14683] ext4_test_bit(bit=14, block=18) = 1 [ 646.100170][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 646.100226][ C1] EXT4-fs (loop5): initial error at time 1778626035: ext4_orphan_get:1423 [ 646.100334][ C1] EXT4-fs (loop5): last error at time 1778626035: ext4_orphan_get:1423 [ 646.178355][T13474] usb 4-1: USB disconnect, device number 12 [ 646.188482][T14683] is_bad_inode(inode)=0 [ 646.227209][T14683] NEXT_ORPHAN(inode)=1023 [ 646.234482][T14683] max_ino=32 [ 646.252940][T14683] i_nlink=0 [ 646.299271][T14683] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.2503: corrupted xattr block 19: e_value size too large [ 646.318737][T14683] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 646.323789][T14683] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 646.463744][T14683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 646.706759][T14683] EXT4-fs error (device loop5): ext4_lookup:1787: inode #2: comm syz.5.2503: deleted inode referenced: 15 [ 647.269302][ T9150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.271921][T14698] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 649.564495][ T9089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 650.080235][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2514'. [ 650.227034][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2520'. [ 651.992047][T14751] Invalid option length (57448) for dns_resolver key [ 652.127730][T14755] kernel read not supported for file /file0 (pid: 14755 comm: syz.3.2527) [ 652.168158][ T30] audit: type=1800 audit(1778626041.631:234): pid=14755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2527" name="file0" dev="mqueue" ino=46325 res=0 errno=0 [ 652.773836][T14763] loop3: detected capacity change from 0 to 2364 [ 652.808210][T14763] iso9660: Bad value for 'sbsector' [ 653.049729][T14770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.531386][T14765] xt_hashlimit: size too large, truncated to 1048576 [ 654.627802][T14779] loop9: detected capacity change from 0 to 128 [ 654.781103][T14779] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 654.805973][T14779] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 654.818895][T14784] loop5: detected capacity change from 0 to 1024 [ 654.862839][T14786] loop4: detected capacity change from 0 to 164 [ 655.291991][T14786] rock: directory entry would overflow storage [ 655.328023][T14786] rock: sig=0x4543, size=28, remaining=18 [ 655.450299][T14779] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 655.829726][T12815] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 657.271181][T14812] loop9: detected capacity change from 0 to 512 [ 657.502515][T14812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.620162][T14812] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.591220][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 658.613151][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 658.640489][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 658.655922][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 658.665235][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 659.239206][T12815] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.370293][ T5635] Bluetooth: hci4: command tx timeout [ 663.405218][ T5635] Bluetooth: hci4: command tx timeout [ 664.715842][T14874] netlink: 'syz.9.2556': attribute type 11 has an invalid length. [ 665.465149][ T5635] Bluetooth: hci4: command tx timeout [ 665.545026][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 666.969836][ T10] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 667.028700][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 667.137917][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 667.159266][ T10] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 667.187029][ T10] usb 10-1: Product: syz [ 667.202469][ T10] usb 10-1: Manufacturer: syz [ 667.216953][ T10] usb 10-1: SerialNumber: syz [ 667.246071][ T10] usb 10-1: config 0 descriptor?? [ 667.278610][ T10] usb 10-1: selecting invalid altsetting 0 [ 667.546398][ T5635] Bluetooth: hci4: command tx timeout [ 668.483511][ T10] usb 10-1: USB disconnect, device number 6 [ 670.376038][ T8460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.294403][ T8460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.352641][ T8460] bond0 (unregistering): Released all slaves [ 671.453463][ T8460] bond1 (unregistering): Released all slaves [ 671.581812][ T8460] bond2 (unregistering): (slave veth5): Releasing active interface [ 671.638789][ T8460] bond2 (unregistering): Released all slaves [ 671.741241][ T8460] bond3 (unregistering): (slave dummy0): Releasing active interface [ 671.767687][ T8460] dummy0: left promiscuous mode [ 671.801104][ T8460] bond3 (unregistering): Released all slaves [ 671.874451][ T4937] Bluetooth: hci6: command 0x0406 tx timeout [ 671.917923][ T8460] bond4 (unregistering): (slave veth7): Releasing backup interface [ 671.943648][ T8460] bond4 (unregistering): Released all slaves [ 671.984729][T14882] batman_adv: batadv0: Adding interface: dummy0 [ 672.001437][T14882] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 672.073433][T14882] batman_adv: batadv0: Interface activated: dummy0 [ 672.239176][T14886] batadv0: mtu less than device minimum [ 672.283487][T14886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.299258][T14886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.313070][T14886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.326904][T14886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.340679][T14886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.354457][T14886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.373133][T14886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.386735][T14886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.400541][T14886] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.548989][T14909] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 672.603579][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 673.548999][T14932] Device name cannot be null; rc = [-22] [ 674.315026][T14938] netlink: 'syz.9.2574': attribute type 1 has an invalid length. [ 674.631429][T14944] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2574'. [ 679.518074][T14938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.700995][T14941] bond1: (slave dummy0): making interface the new active one [ 679.812090][T14941] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 679.958963][T14944] bond1: (slave dummy0): Releasing active interface [ 680.979383][ T8460] hsr_slave_0: left promiscuous mode [ 681.043983][ T8460] hsr_slave_1: left promiscuous mode [ 681.064590][ T8460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.123679][ T8460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.092898][T15003] futex_wake_op: syz.5.2591 tries to shift op by -1; fix this program [ 684.504364][ T8460] team0 (unregistering): Port device team_slave_1 removed [ 685.166682][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.180483][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.729303][T15019] 9p: Bad value for 'rfdno' [ 685.864219][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 686.329751][T15023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.373936][ T30] audit: type=1800 audit(1778626080.831:235): pid=15064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2609" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 691.402724][T14820] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.450993][T14820] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.474223][T14820] bridge_slave_0: entered allmulticast mode [ 691.513679][T14820] bridge_slave_0: entered promiscuous mode [ 691.534688][T14820] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.543497][T14820] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.654613][T14820] bridge_slave_1: entered allmulticast mode [ 691.929390][T14820] bridge_slave_1: entered promiscuous mode [ 692.616899][T14820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.693678][T14820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.741662][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2614'. [ 693.014662][T15099] loop9: detected capacity change from 0 to 128 [ 693.111747][T15099] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 693.259216][T14820] team0: Port device team_slave_0 added [ 693.454267][T14820] team0: Port device team_slave_1 added [ 694.929549][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 695.485671][T14820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.559774][T14820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.797375][T14820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.815759][T14820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.824444][T14820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.854404][T14820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.958971][T14820] hsr_slave_0: entered promiscuous mode [ 696.992064][T14820] hsr_slave_1: entered promiscuous mode [ 697.027685][T14820] debugfs: 'hsr0' already exists in 'hsr' [ 697.062833][T14820] Cannot create hsr debugfs directory [ 697.938789][T15152] tipc: Started in network mode [ 697.962374][T15152] tipc: Node identity ac1414aa, cluster identity 4711 [ 698.039009][T15152] tipc: Enabled bearer , priority 10 [ 698.121124][T15158] tipc: Enabled bearer , priority 0 [ 702.962760][T15210] netlink: 'syz.9.2643': attribute type 4 has an invalid length. [ 704.389495][T15220] netlink: 'syz.5.2645': attribute type 1 has an invalid length. [ 704.428535][T15220] netlink: 'syz.5.2645': attribute type 4 has an invalid length. [ 704.442444][T13460] tipc: Node number set to 2886997162 [ 704.480414][T15220] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.2645'. [ 704.671088][ T8460] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.727719][ T8460] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.782659][ T8460] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.841332][ T8460] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.891653][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 705.358862][T15227] loop4: detected capacity change from 0 to 512 [ 705.415015][T10920] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 705.458696][T15227] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 705.586024][T15227] EXT4-fs (loop4): 1 truncate cleaned up [ 705.615019][T10920] usb 10-1: Using ep0 maxpacket: 16 [ 705.623062][T10920] usb 10-1: unable to get BOS descriptor or descriptor too short [ 705.651903][T10920] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 705.680526][T15227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.697596][T10920] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 705.740911][T10920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.777951][T10920] usb 10-1: Product: syz [ 705.812789][T10920] usb 10-1: Manufacturer: syz [ 705.831016][T10920] usb 10-1: SerialNumber: syz [ 706.186201][T15225] netlink: 666 bytes leftover after parsing attributes in process `syz.9.2647'. [ 706.274491][T13352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.297584][T10920] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 706.375349][T10920] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 706.424268][ T8460] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.477169][ T8460] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.501082][T15225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.545463][ T8460] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.594947][ T8460] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.630883][T15225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.744636][T10920] usb 10-1: 2:1 : can't get High Capability descriptor [ 706.875890][T15243] futex_wake_op: syz.4.2651 tries to shift op by -1; fix this program [ 708.512402][T10920] usb 10-1: USB disconnect, device number 7 [ 709.046070][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.875191][T10920] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 710.057431][T10920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.107642][T10920] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 710.154480][T10920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 710.483357][T10920] usb 5-1: Product: syz [ 710.506249][T10920] usb 5-1: Manufacturer: syz [ 711.482022][T10920] usb 5-1: SerialNumber: syz [ 711.518414][T10920] usb 5-1: config 0 descriptor?? [ 712.162786][T10920] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 712.174093][T10920] pctv452e: pctv452e_power_ctrl: 1 [ 712.174093][T10920] [ 712.188391][T10920] usb 5-1: selecting invalid altsetting 3 [ 712.198214][T10920] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 712.198214][T10920] [ 712.216482][T10920] dvb-usb: bulk message failed: -22 (5/0) [ 712.343326][T10920] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 713.045079][ T30] audit: type=1326 audit(1778626102.501:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15286 comm="syz.9.2665" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f9ce59 code=0x0 [ 713.109174][T10920] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 713.223260][T10920] usb 5-1: USB disconnect, device number 4 [ 716.161440][T14820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 716.250632][T14820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.318333][T14820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 716.455168][T14820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.528824][T14820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 716.626280][T14820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 716.686052][T14820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 717.023877][T14820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.566167][ T30] audit: type=1804 audit(1778626109.011:237): pid=15335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2677" name="bus" dev="ramfs" ino=45765 res=1 errno=0 [ 719.702167][ T4937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 719.715365][ T4937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 719.733082][ T4937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 719.758379][ T4937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 719.769942][ T4937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 720.315176][ T30] audit: type=1804 audit(1778626109.361:238): pid=15345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2677" name="bus" dev="ramfs" ino=45765 res=1 errno=0 [ 721.387555][T15357] netlink: 'syz.4.2681': attribute type 27 has an invalid length. [ 721.529892][T15357] netlink: 'syz.4.2681': attribute type 4 has an invalid length. [ 721.699602][T15357] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2681'. [ 721.868306][ T4937] Bluetooth: hci7: command tx timeout [ 723.945937][ T4937] Bluetooth: hci7: command tx timeout [ 726.038212][ T4937] Bluetooth: hci7: command tx timeout [ 728.187644][ T4937] Bluetooth: hci7: command tx timeout [ 728.499707][T15416] fuse: fd is not a fuse device [ 730.008407][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2702'. [ 730.077164][T15423] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.086380][T15423] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.602385][T15423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.683752][T15423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.501253][ T8440] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.613561][ T8440] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.688469][ T8440] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.719959][ T8440] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.797766][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2712'. [ 732.835887][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2712'. [ 733.422025][T15495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.265689][T10920] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 739.664903][T10920] usb 5-1: Using ep0 maxpacket: 16 [ 739.881597][T10920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.900038][T10920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 739.919365][T15342] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.949269][T10920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 739.967257][T15342] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.008541][T10920] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 740.025192][T15342] bridge_slave_0: entered allmulticast mode [ 740.054787][T15342] bridge_slave_0: entered promiscuous mode [ 740.067970][T10920] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.107010][T15342] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.133835][T15342] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.153442][T10920] usb 5-1: string descriptor 0 read error: -71 [ 740.167297][T15576] loop5: detected capacity change from 0 to 1024 [ 740.174065][T15342] bridge_slave_1: entered allmulticast mode [ 740.182056][T10920] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 740.209047][T15576] EXT4-fs: Ignoring removed bh option [ 740.222923][T15342] bridge_slave_1: entered promiscuous mode [ 740.229281][T10920] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 740.291962][T15576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.336082][T10920] usb 5-1: config 0 descriptor?? [ 740.397711][T10920] usb 5-1: can't set config #0, error -71 [ 740.455637][T10920] usb 5-1: USB disconnect, device number 5 [ 740.472653][ T1169] bridge_slave_1: left allmulticast mode [ 740.501809][ T1169] bridge_slave_1: left promiscuous mode [ 740.538224][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.613301][ T1169] bridge_slave_0: left allmulticast mode [ 740.648419][ T1169] bridge_slave_0: left promiscuous mode [ 740.681728][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.176988][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.290885][ T9089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.319227][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.392075][ T1169] bond0 (unregistering): Released all slaves [ 744.624454][T15342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.417373][T15342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.577993][T15624] loop9: detected capacity change from 0 to 256 [ 745.621633][T15624] exfat: Deprecated parameter 'utf8' [ 745.671362][T15624] exfat: Deprecated parameter 'namecase' [ 745.713889][T15624] exfat: Deprecated parameter 'utf8' [ 745.860540][ T1169] hsr_slave_0: left promiscuous mode [ 745.882865][T15624] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 745.900870][ T1169] hsr_slave_1: left promiscuous mode [ 745.930779][T15633] netlink: 'syz.6.2748': attribute type 7 has an invalid length. [ 745.959392][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.005099][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.589398][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.602665][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.419970][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2764'. [ 747.920578][T15670] loop9: detected capacity change from 0 to 512 [ 747.958757][T15670] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 748.059548][T15670] EXT4-fs (loop9): 1 truncate cleaned up [ 748.091404][T15670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.337373][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 749.179263][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 749.285981][T12815] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.877264][T15342] team0: Port device team_slave_0 added [ 750.901867][T15342] team0: Port device team_slave_1 added [ 751.219126][T15342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.249251][T15342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.361607][T15342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.416980][T15342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.431695][T15342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.521170][T15342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.181743][T15342] hsr_slave_0: entered promiscuous mode [ 752.222576][T15342] hsr_slave_1: entered promiscuous mode [ 752.286212][T15342] debugfs: 'hsr0' already exists in 'hsr' [ 752.311351][T15342] Cannot create hsr debugfs directory [ 753.584260][T15742] loop4: detected capacity change from 0 to 1024 [ 753.627739][T15742] EXT4-fs: Ignoring removed bh option [ 753.662990][T15742] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 753.687093][T15744] loop5: detected capacity change from 0 to 256 [ 753.802510][T15742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.582942][ T4937] Bluetooth: hci0: unexpected event for opcode 0x080f [ 754.722541][T13352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.903848][T15803] netlink: 'syz.6.2786': attribute type 15 has an invalid length. [ 758.584966][ T4937] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 758.601741][ T4937] Bluetooth: hci0: Injecting HCI hardware error event [ 758.611662][ T5635] Bluetooth: hci0: hardware error 0x00 [ 758.857622][T15809] overlayfs: failed to clone upperpath [ 761.268357][ T5635] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 762.748561][ T30] audit: type=1804 audit(1778626152.201:239): pid=15849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2798" name="bus" dev="ramfs" ino=49512 res=1 errno=0 [ 762.872419][ T30] audit: type=1804 audit(1778626152.241:240): pid=15849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2798" name="bus" dev="ramfs" ino=49512 res=1 errno=0 [ 763.295866][T15342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 763.339392][T15342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.371051][T15342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 763.418283][T15342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.463014][T15342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 763.536284][T15342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.566519][T15342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 763.594317][T15342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.909902][T15342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.972923][T15342] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.018380][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.025589][ T8715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.082686][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.089929][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.218322][T15342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.352010][T15342] veth0_vlan: entered promiscuous mode [ 765.368411][T15342] veth1_vlan: entered promiscuous mode [ 765.419690][T15342] veth0_macvtap: entered promiscuous mode [ 765.437577][T15342] veth1_macvtap: entered promiscuous mode [ 765.480674][T15342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.507831][T15342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.557911][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.585198][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.602438][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.632045][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.859494][ T8460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.881563][ T8460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.944886][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.953901][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.188842][T15911] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 766.195918][T15911] overlayfs: failed to set xattr on upper [ 766.201649][T15911] overlayfs: ...falling back to redirect_dir=nofollow. [ 766.208794][T15911] overlayfs: ...falling back to index=off. [ 766.214606][T15911] overlayfs: ...falling back to uuid=null. [ 766.251698][T15911] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 766.261131][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2814'. [ 766.286929][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2814'. [ 766.952981][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2814'. [ 772.648067][ T5635] Bluetooth: hci6: unexpected event for opcode 0x0c6d [ 775.400703][T16007] overlayfs: failed to clone upperpath [ 775.984476][T16016] net_ratelimit: 10 callbacks suppressed [ 775.984505][T16016] Set syz0 is full, maxelem 0 reached [ 777.826766][ T30] audit: type=1326 audit(1778626167.291:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f9ce59 code=0x7ffc0000 [ 777.883156][T16023] loop9: detected capacity change from 0 to 256 [ 778.043853][T16023] exFAT-fs (loop9): error, The cluster chain has a loop [ 778.111883][T16023] exFAT-fs (loop9): failed to count the number of clusters in root [ 778.139924][ T30] audit: type=1326 audit(1778626167.291:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f9ce59 code=0x7ffc0000 [ 778.166186][ T30] audit: type=1326 audit(1778626167.291:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f9ce59 code=0x7ffc0000 [ 778.201070][ T30] audit: type=1326 audit(1778626167.291:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f9ce59 code=0x7ffc0000 [ 778.228482][ T30] audit: type=1326 audit(1778626167.291:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f9ce59 code=0x7ffc0000 [ 778.966465][ T30] audit: type=1326 audit(1778626167.301:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe0d2f9ce59 code=0x7ffc0000 [ 778.994309][ T30] audit: type=1326 audit(1778626167.301:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0d2f9cbc2 code=0x7ffc0000 [ 779.026375][T16023] exFAT-fs (loop9): failed to recognize exfat type [ 779.261729][ T30] audit: type=1326 audit(1778626167.321:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0d2f5d68e code=0x7ffc0000 [ 779.287159][ T30] audit: type=1326 audit(1778626167.321:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe0d2f9cc87 code=0x7ffc0000 [ 779.312390][ T30] audit: type=1326 audit(1778626167.321:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16022 comm="syz.9.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0d2f5d68e code=0x7ffc0000 [ 779.767589][T16023] loop9: detected capacity change from 0 to 2048 [ 779.777511][T16034] could not allocate digest TFM handle hmac(streebog512) [ 780.630014][T16023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.545041][T10920] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 786.769933][T10920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.812903][T10920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.879719][T10920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 786.972777][T10920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.064456][T10920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.801366][T10920] usb 2-1: config 0 descriptor?? [ 788.487803][T16098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.520960][T10920] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 788.543301][T16098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.267614][T10920] usb 2-1: USB disconnect, device number 7 [ 790.358619][T16141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2862'. [ 790.989558][T16148] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[7934] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[16148] [ 792.919567][T16163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2867'. [ 792.928673][T16163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2867'. [ 794.558750][T16179] loop4: detected capacity change from 0 to 512 [ 794.734033][T16179] EXT4-fs: Mount option(s) incompatible with ext2 [ 796.082729][T16202] fuse: Bad value for 'fd' [ 796.105875][T16202] fuse: fd is not a fuse device [ 797.264735][T16214] xt_connbytes: Forcing CT accounting to be enabled [ 797.302390][T16220] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 799.431478][T16254] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2888'. [ 801.795042][T16273] binder: 16268:16273 ioctl c0306201 0 returned -14 [ 803.294624][T16288] x_tables: ip_tables: osf match: only valid for protocol 6 [ 806.529897][T16312] loop5: detected capacity change from 0 to 512 [ 806.537499][T16312] EXT4-fs: Ignoring removed orlov option [ 806.584479][T16312] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 806.633700][T16312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 806.666872][T16312] EXT4-fs error (device loop5): ext4_iget_extra_inode:5127: inode #15: comm syz.5.2900: corrupted in-inode xattr: e_value size too large [ 806.747419][T16312] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 806.750298][T16312] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.2900: couldn't read orphan inode 15 (err -117) [ 806.759625][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 806.759660][ C0] EXT4-fs (loop5): initial error at time 1778626196: ext4_iget_extra_inode:5127: inode 15 [ 806.759713][ C0] EXT4-fs (loop5): last error at time 1778626196: ext4_iget_extra_inode:5127: inode 15 [ 806.855011][T16312] loop5: lost filesystem error report for type 5 error -117 [ 806.862780][T16312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.037838][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.044451][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.055087][T15214] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 808.145952][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 808.145977][ T30] audit: type=1804 audit(1778626197.611:308): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2913" name="file0" dev="tmpfs" ino=2950 res=1 errno=0 [ 808.149626][T16346] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 808.219211][T16346] ref_ctr increment failed for inode: 0xb86 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807dd73100 [ 808.270717][T16349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.272592][T16343] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 808.288495][T15214] usb 6-1: Using ep0 maxpacket: 16 [ 808.290916][T16349] batadv_slave_0: entered promiscuous mode [ 808.318579][T15214] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 808.348332][T16343] ref_ctr decrement failed for inode: 0xb86 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807dd73100 [ 808.350070][T15214] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 808.402499][T15214] usb 6-1: New USB device found, idVendor=0b00, idProduct=3070, bcdDevice=d3.a4 [ 808.416870][T15214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.427006][T16343] uprobe: syz.2.2913:16343 failed to unregister, leaking uprobe [ 808.465823][T15214] usb 6-1: Product: syz [ 808.482999][T15214] usb 6-1: Manufacturer: syz [ 808.506200][T15214] usb 6-1: SerialNumber: syz [ 809.842669][T15214] usb 6-1: USB disconnect, device number 12 [ 810.312913][ T9089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.560835][T16379] loop1: detected capacity change from 0 to 4096 [ 810.603244][T16379] EXT4-fs: inline encryption not supported [ 810.963571][T16379] EXT4-fs (loop1): Test dummy encryption mode enabled [ 811.679888][T16379] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 811.943476][T16379] System zones: 0-5 [ 812.007697][T16379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.416293][T15342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.146027][T16426] bridge_slave_0: left allmulticast mode [ 815.157599][T16426] bridge_slave_0: left promiscuous mode [ 815.200046][T16426] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.936543][T16426] bridge_slave_1: left allmulticast mode [ 816.949505][T16426] bridge_slave_1: left promiscuous mode [ 816.963094][T16426] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.034595][T16447] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5627] was attempted by ""[16447] [ 817.566818][T16426] bond0: (slave bond_slave_0): Releasing backup interface [ 817.680705][T16426] bond0: (slave bond_slave_1): Releasing backup interface [ 817.877567][T16426] team0: Port device team_slave_0 removed [ 817.935371][T16426] team0: Port device team_slave_1 removed [ 817.984380][T16426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.023691][T16426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.077192][T16426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.098119][T16426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.138850][T16426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 818.207476][T16430] team0: Mode changed to "random" [ 818.227698][T16432] vlan0: entered promiscuous mode [ 818.291201][T16432] team0: Port device vlan0 added [ 818.339121][T16439] tipc: Started in network mode [ 818.540456][T16439] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 818.561209][T16439] tipc: Enabled bearer , priority 0 [ 819.849292][T13484] tipc: Node number set to 11578026 [ 820.546662][T16478] loop4: detected capacity change from 0 to 256 [ 820.746280][T16478] vfat: Bad value for 'shortname' [ 822.725604][T15214] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 822.965313][T15214] usb 2-1: Using ep0 maxpacket: 16 [ 822.998281][T15214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.018118][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2958'. [ 823.057601][T15214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.104497][T15214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 824.128524][T15214] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 824.140302][T15214] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.158630][T15214] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 824.171154][T15214] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 824.181071][T15214] usb 2-1: Manufacturer: syz [ 824.192022][T15214] usb 2-1: config 0 descriptor?? [ 825.708989][T15214] rc_core: IR keymap rc-hauppauge not found [ 825.728712][T15214] Registered IR keymap rc-empty [ 825.753623][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.806563][T16542] netlink: 'syz.6.2966': attribute type 2 has an invalid length. [ 825.825386][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.865207][T16542] netlink: 'syz.6.2966': attribute type 2 has an invalid length. [ 825.890439][T15214] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 825.957231][T16551] loop4: detected capacity change from 0 to 128 [ 825.991509][T15214] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 827.232469][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2973'. [ 827.248573][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 828.086404][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 828.166172][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 828.259796][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 828.325045][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 828.385618][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 828.488236][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 828.546063][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 828.715105][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 829.002115][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 829.052620][T16586] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2979'. [ 829.054980][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 829.353644][T15214] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 829.995615][T15214] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 830.014915][T15214] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 830.141965][T15214] usb 2-1: USB disconnect, device number 8 [ 831.205779][T16607] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 833.593617][T16634] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 841.997013][T13479] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 842.211415][T16714] fuse: fd is not a fuse device [ 842.225031][T13479] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.406757][T13479] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 842.432042][T13479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.286859][T13479] usb 5-1: config 0 descriptor?? [ 843.341051][T13479] usb 5-1: can't set config #0, error -71 [ 843.420435][T13479] usb 5-1: USB disconnect, device number 6 [ 843.863249][ T30] audit: type=1326 audit(1778626233.321:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44f79ce59 code=0x7ffc0000 [ 844.712825][ T30] audit: type=1326 audit(1778626233.351:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44f79ce59 code=0x7ffc0000 [ 844.764271][ T30] audit: type=1326 audit(1778626233.351:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44f79ce59 code=0x7ffc0000 [ 845.051096][ T30] audit: type=1326 audit(1778626233.351:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44f79ce59 code=0x7ffc0000 [ 845.099450][ T30] audit: type=1326 audit(1778626233.351:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff44f79ce59 code=0x7ffc0000 [ 845.136410][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3026'. [ 845.157432][ T30] audit: type=1326 audit(1778626233.441:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff44f75d68e code=0x7ffc0000 [ 846.137556][T16733] Bluetooth: hci7: command 0x0406 tx timeout [ 846.182514][ T30] audit: type=1326 audit(1778626233.501:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff44f75d68e code=0x7ffc0000 [ 846.488235][ T30] audit: type=1326 audit(1778626233.501:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff44f75d68e code=0x7ffc0000 [ 846.514637][ T30] audit: type=1326 audit(1778626233.551:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff44f75d68e code=0x7ffc0000 [ 846.683447][ T30] audit: type=1326 audit(1778626233.601:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.6.3018" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff44f75d68e code=0x7ffc0000 [ 846.870724][T16762] loop4: detected capacity change from 0 to 4096 [ 849.540207][T16786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.433030][T16786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.583589][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3038'. [ 850.655716][T16799] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3038'. [ 853.453816][T16821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3047'. [ 854.289353][T16826] loop5: detected capacity change from 0 to 512 [ 854.512061][T16826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.180236][ T9089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.417904][T16863] netlink: 'syz.4.3059': attribute type 1 has an invalid length. [ 858.026220][T16869] netlink: 'syz.1.3058': attribute type 1 has an invalid length. [ 858.358982][T16863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3059'. [ 860.014470][T16889] netlink: 'syz.9.3063': attribute type 4 has an invalid length. [ 866.423246][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 866.423271][ T30] audit: type=1326 audit(1778626255.881:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 866.642015][ T30] audit: type=1326 audit(1778626255.881:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 867.685810][ T30] audit: type=1326 audit(1778626255.881:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 867.787092][ T30] audit: type=1326 audit(1778626255.901:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 867.878373][ T30] audit: type=1326 audit(1778626255.901:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 867.992368][ T30] audit: type=1326 audit(1778626255.901:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 868.139514][ T30] audit: type=1326 audit(1778626255.901:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 868.392512][ T30] audit: type=1326 audit(1778626255.901:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 868.433189][ T30] audit: type=1326 audit(1778626255.901:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 869.199446][ T30] audit: type=1326 audit(1778626255.901:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16937 comm="syz.2.3078" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7421b9ce59 code=0x7ffc0000 [ 869.470983][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.489658][T16972] sctp: [Deprecated]: syz.5.3087 (pid 16972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 869.489658][T16972] Use struct sctp_sack_info instead [ 869.557850][T16974] netlink: 'syz.6.3089': attribute type 1 has an invalid length. [ 871.259714][T16978] bond5: (slave gretap2): making interface the new active one [ 871.342265][T16978] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 871.460778][T16995] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3095'. [ 872.523366][T17007] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3095'. [ 872.536493][T17000] loop4: detected capacity change from 0 to 128 [ 872.646774][T17000] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 872.716855][T16995] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.728981][T16995] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.552832][T17000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 873.658414][T17007] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.665789][T17007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.673355][T17007] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.680579][T17007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.700671][T17007] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3095'. [ 873.773315][T17007] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.786565][T17007] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.577091][T17021] loop1: detected capacity change from 0 to 512 [ 874.706454][T17021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.728826][T17021] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 875.797213][T17032] loop5: detected capacity change from 0 to 128 [ 878.162843][T15342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.745676][T17069] netlink: 'syz.5.3114': attribute type 1 has an invalid length. [ 880.091862][T17053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.100477][T17053] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.116205][T17053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.056999][T17053] veth1_vlan: left promiscuous mode [ 881.063910][T17053] veth0_vlan: left promiscuous mode [ 881.072174][T17053] veth0_vlan: entered promiscuous mode [ 881.082238][T17053] veth1_vlan: entered promiscuous mode [ 881.095105][T17053] veth1_macvtap: left promiscuous mode [ 881.102275][T17053] veth0_macvtap: left promiscuous mode [ 881.109633][T17053] veth0_macvtap: entered promiscuous mode [ 881.117210][T17053] veth1_macvtap: entered promiscuous mode [ 881.130530][T17053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 881.139236][T17053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.149824][T17053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 881.159616][T17053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 881.189423][T17053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 881.238893][T17053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 881.401649][T17053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 881.426468][T17053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 882.651634][T17053] 8021q: adding VLAN 0 to HW filter on device bond5 [ 882.722489][T17069] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 883.104745][ T1169] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.138378][ T1169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.150135][ T1169] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.159665][ T1169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.179683][ T1169] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.188668][ T1169] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.258326][ T1169] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.307017][ T1169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.550715][T17110] fuse: fd is not a fuse device [ 888.349032][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3140'. [ 889.400620][T17170] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 889.575013][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 889.605049][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 889.647663][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 889.805026][T17180] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 889.812135][T17180] overlayfs: failed to set xattr on upper [ 889.817987][T17180] overlayfs: ...falling back to redirect_dir=nofollow. [ 889.824966][T17180] overlayfs: ...falling back to index=off. [ 889.830783][T17180] overlayfs: ...falling back to uuid=null. [ 889.841294][T17182] loop5: detected capacity change from 0 to 128 [ 889.858119][T17182] vfat: Bad value for 'fmask' [ 889.956366][T17180] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 891.461528][T17205] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3155'. [ 891.555350][T13484] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 891.780201][T13484] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 891.823958][T13484] usb 2-1: config 0 has no interface number 0 [ 891.872959][T13484] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 891.916723][T13484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.960679][T13484] usb 2-1: Product: syz [ 891.993846][T13484] usb 2-1: Manufacturer: syz [ 892.014970][T13484] usb 2-1: SerialNumber: syz [ 892.052218][T13484] usb 2-1: config 0 descriptor?? [ 892.277791][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 892.277818][ T30] audit: type=1800 audit(1778626281.731:339): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3160" name="file1" dev="tmpfs" ino=1063 res=0 errno=0 [ 893.175570][T13484] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 893.321127][T13484] usb 2-1: USB disconnect, device number 9 [ 896.699073][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3167'. [ 901.031890][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'. [ 901.097465][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3174'. [ 901.207248][T17267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3174'. [ 903.292257][T17302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3186'. [ 903.361238][T17302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3186'. [ 903.813983][T17311] fuse: fd is not a fuse device [ 903.914996][T15214] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 904.089922][T15214] usb 6-1: unable to get BOS descriptor or descriptor too short [ 904.121818][T15214] usb 6-1: not running at top speed; connect to a high speed hub [ 904.155092][T15214] usb 6-1: config 8 has an invalid interface number: 249 but max is 0 [ 904.179280][T15214] usb 6-1: config 8 has no interface number 0 [ 904.210962][T15214] usb 6-1: config 8 interface 249 has no altsetting 0 [ 904.241730][T15214] usb 6-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 904.281033][T15214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.312907][T15214] usb 6-1: Product: syz [ 904.330761][T15214] usb 6-1: Manufacturer: syz [ 904.348867][T15214] usb 6-1: SerialNumber: syz [ 904.704726][T15214] usb-storage 6-1:8.249: USB Mass Storage device detected [ 905.342557][T15214] usb-storage 6-1:8.249: Quirks match for vid 0451 pid 5416: 2 [ 905.640059][T15214] usb 6-1: USB disconnect, device number 13 [ 921.996001][T17425] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[13352] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[17425] [ 923.019077][T17433] loop4: detected capacity change from 0 to 512 [ 923.188661][T17433] EXT4-fs: Ignoring removed nobh option [ 924.275064][T17442] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 925.015186][T17433] EXT4-fs error (device loop4): ext4_iget_extra_inode:5127: inode #15: comm syz.4.3238: corrupted in-inode xattr: overlapping e_value [ 925.029724][T17433] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 925.030324][T17433] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.3238: couldn't read orphan inode 15 (err -117) [ 925.039559][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 925.039592][ C1] EXT4-fs (loop4): initial error at time 1778626314: ext4_iget_extra_inode:5127: inode 15 [ 925.039649][ C1] EXT4-fs (loop4): last error at time 1778626314: ext4_iget_extra_inode:5127: inode 15 [ 925.195001][T17433] loop4: lost filesystem error report for type 5 error -117 [ 925.207324][T17433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.912497][T17433] tipc: Started in network mode [ 926.175975][T17433] tipc: Node identity ac14142f, cluster identity 4711 [ 926.183542][T17433] tipc: New replicast peer: 0.0.0.0 [ 926.230819][T17433] tipc: Enabled bearer , priority 10 [ 926.318154][T17458] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 926.724339][T13352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.910541][T17466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3230'. [ 927.573774][T15189] tipc: Node number set to 2886997039 [ 927.961801][T17470] loop4: detected capacity change from 0 to 256 [ 929.285710][T17481] x_tables: ip_tables: osf match: only valid for protocol 6 [ 930.395952][T17470] FAT-fs (loop4): Directory bread(block 64) failed [ 930.413445][T17470] FAT-fs (loop4): Directory bread(block 65) failed [ 930.504225][T17487] loop5: detected capacity change from 0 to 256 [ 930.508795][T17470] FAT-fs (loop4): Directory bread(block 66) failed [ 930.550726][T17487] exfat: Deprecated parameter 'utf8' [ 930.562070][T17470] FAT-fs (loop4): Directory bread(block 67) failed [ 930.594580][T17470] FAT-fs (loop4): Directory bread(block 68) failed [ 930.595037][T17487] exfat: Deprecated parameter 'namecase' [ 930.631874][T17470] FAT-fs (loop4): Directory bread(block 69) failed [ 930.656955][T17487] exfat: Deprecated parameter 'utf8' [ 930.659572][T17470] FAT-fs (loop4): Directory bread(block 70) failed [ 930.699958][T17470] FAT-fs (loop4): Directory bread(block 71) failed [ 930.721513][T17487] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 930.732267][T17470] FAT-fs (loop4): Directory bread(block 72) failed [ 930.765147][T17470] FAT-fs (loop4): Directory bread(block 73) failed [ 930.914231][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.633748][T17505] netlink: 164 bytes leftover after parsing attributes in process `syz.9.3244'. [ 941.892624][T16733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 941.915908][T16733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 942.038924][T16733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 942.159152][T16733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 942.310424][T16733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 944.993145][T16733] Bluetooth: hci4: command tx timeout [ 945.130903][T17604] netlink: zone id is out of range [ 945.137168][T17604] netlink: zone id is out of range [ 945.143044][T17604] netlink: zone id is out of range [ 945.148271][T17604] netlink: zone id is out of range [ 945.153370][T17604] netlink: zone id is out of range [ 945.158778][T17604] netlink: zone id is out of range [ 945.163879][T17604] netlink: zone id is out of range [ 945.169247][T17604] netlink: zone id is out of range [ 945.174359][T17604] netlink: zone id is out of range [ 945.179531][T17604] netlink: zone id is out of range [ 947.162858][T16733] Bluetooth: hci4: command tx timeout [ 947.560797][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.233100][T16733] Bluetooth: hci4: command tx timeout [ 949.464120][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.770357][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.305250][T16733] Bluetooth: hci4: command tx timeout [ 951.988814][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.442202][T17727] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[7934] was attempted by " [ 960.593691][T17729] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3300'. [ 961.492179][T17750] loop5: detected capacity change from 0 to 256 [ 961.547438][T17750] vfat: Unknown parameter 'shortna' [ 961.908556][ T48] bridge_slave_1: left allmulticast mode [ 961.951862][ T48] bridge_slave_1: left promiscuous mode [ 961.980483][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.077837][ T48] bridge_slave_0: left allmulticast mode [ 962.120870][ T48] bridge_slave_0: left promiscuous mode [ 962.158119][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.766683][T13462] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 965.962784][T13462] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 966.014781][T13462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.052204][T13462] usb 6-1: Product: syz [ 966.076664][T13462] usb 6-1: Manufacturer: syz [ 966.096500][T13462] usb 6-1: SerialNumber: syz [ 966.103984][T17797] binder_alloc: 17795: binder_alloc_buf, no vma [ 966.238612][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.308196][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.416701][ T48] bond0 (unregistering): Released all slaves [ 966.667412][T13462] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 967.105374][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 968.563668][T17827] netlink: 'syz.9.3324': attribute type 1 has an invalid length. [ 968.630692][T13458] usb 6-1: USB disconnect, device number 14 [ 968.677728][T13458] usblp0: removed [ 968.726052][T17582] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.745137][T17582] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.776429][T17582] bridge_slave_0: entered allmulticast mode [ 968.842649][T17582] bridge_slave_0: entered promiscuous mode [ 968.965628][T17829] bond2: (slave gretap1): making interface the new active one [ 969.026599][T17829] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 969.182474][T17582] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.198156][T17582] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.233838][T17582] bridge_slave_1: entered allmulticast mode [ 969.263343][T17582] bridge_slave_1: entered promiscuous mode [ 969.438203][ T48] hsr_slave_0: left promiscuous mode [ 969.499678][ T48] hsr_slave_1: left promiscuous mode [ 969.535466][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.003489][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.072527][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.437204][ T48] veth1_macvtap: left promiscuous mode [ 972.178137][ T48] veth0_macvtap: left promiscuous mode [ 972.355485][ T48] veth1_vlan: left promiscuous mode [ 972.378938][ T48] veth0_vlan: left promiscuous mode [ 976.958781][ T48] team0 (unregistering): Port device team_slave_1 removed [ 977.052211][ T48] team0 (unregistering): Port device team_slave_0 removed [ 977.596692][T17582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.645189][T17582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.660772][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 977.930776][T17582] team0: Port device team_slave_0 added [ 977.981371][T17582] team0: Port device team_slave_1 added [ 978.085672][T17909] netlink: 'syz.4.3342': attribute type 1 has an invalid length. [ 978.101612][T17907] fuse: fd is not a fuse device [ 978.713510][T17582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.721732][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.443959][T17582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.541035][T17582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.581996][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.846881][T17582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.776046][T17582] hsr_slave_0: entered promiscuous mode [ 980.803253][T17582] hsr_slave_1: entered promiscuous mode [ 980.843520][T17582] debugfs: 'hsr0' already exists in 'hsr' [ 980.856575][T17582] Cannot create hsr debugfs directory [ 982.268583][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 983.330239][T17582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 983.346914][T17582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 983.362678][T17582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 983.373625][T17582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 983.382875][T17582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 983.417509][T17582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 983.427326][T17582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 983.441458][T17582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 983.571017][T17582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.629195][T17582] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.656952][T17586] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.664148][T17586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.706749][T17586] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.713941][T17586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.814731][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 984.900925][T17582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.019192][T17582] veth0_vlan: entered promiscuous mode [ 985.045687][T17582] veth1_vlan: entered promiscuous mode [ 985.097367][T17582] veth0_macvtap: entered promiscuous mode [ 985.109478][T17582] veth1_macvtap: entered promiscuous mode [ 985.136864][T17582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.157773][T17582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.192872][ T8437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.220532][ T8437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.242530][ T8437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.264985][ T8437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.548766][ T8473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.566262][ T8473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.644408][ T8473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.665301][ T8473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.217422][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3361'. [ 988.591405][T18021] Invalid ELF header magic: != ELF [ 992.351740][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.141683][T18087] tipc: Failed to remove unknown binding: 66,0,0/0:3732898092/3732898094 [ 995.154895][T18087] tipc: Failed to remove unknown binding: 66,0,0/0:3732898092/3732898093 [ 995.170272][T18087] tipc: Failed to remove unknown binding: 66,0,0/0:3732898092/3732898094 [ 995.178881][T18087] tipc: Failed to remove unknown binding: 66,0,0/0:3732898092/3732898093 [ 996.737890][T18093] netlink: 'syz.0.3367': attribute type 1 has an invalid length. [ 997.001708][T18102] fuse: fd is not a fuse device [ 997.054152][T18102] 9p: Bad value for 'rfdno' [ 998.785282][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 999.818855][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1001.300951][T18153] binder: transaction release 77 bad handle 1, ret = -22 [ 1004.782883][T18181] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1004.985801][T18186] netlink: 'syz.2.3394': attribute type 1 has an invalid length. [ 1005.126431][T18185] netlink: 'syz.9.3397': attribute type 12 has an invalid length. [ 1006.373754][T18193] bond7: (slave gretap1): making interface the new active one [ 1006.408454][T18205] netlink: 'syz.6.3398': attribute type 1 has an invalid length. [ 1006.420975][T18193] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1006.689444][T18205] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1006.849474][T18209] bond6: (slave geneve2): making interface the new active one [ 1006.873194][T18209] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1008.227344][T18238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.407401][T18278] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3416'. [ 1013.460895][T18284] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3416'. [ 1013.522321][T18286] netlink: 'syz.5.3415': attribute type 1 has an invalid length. [ 1013.599532][T18284] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3416'. [ 1014.216042][T18287] bond3: (slave gretap2): making interface the new active one [ 1014.333199][T18287] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1014.404193][T18304] loop0: detected capacity change from 0 to 256 [ 1014.512472][T18304] vfat: Bad value for 'shortname' [ 1015.804108][T18314] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 1017.557168][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3425'. [ 1019.589751][T18381] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3437'. [ 1019.708784][T18381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.716201][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.871038][T18387] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3437'. [ 1021.012928][T18387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.020360][T18387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.028079][T18387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.035264][T18387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.088280][T18387] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3437'. [ 1022.198070][T18387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.205559][T18387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.515923][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1027.013616][T18457] loop5: detected capacity change from 0 to 1024 [ 1030.074012][T18482] loop4: detected capacity change from 0 to 256 [ 1031.383742][T18482] FAT-fs (loop4): Directory bread(block 64) failed [ 1031.583783][T18482] FAT-fs (loop4): Directory bread(block 65) failed [ 1033.683220][T18482] FAT-fs (loop4): Directory bread(block 66) failed [ 1033.777405][T18482] FAT-fs (loop4): Directory bread(block 67) failed [ 1033.844123][T18482] FAT-fs (loop4): Directory bread(block 68) failed [ 1033.903930][T18482] FAT-fs (loop4): Directory bread(block 69) failed [ 1033.974572][T18482] FAT-fs (loop4): Directory bread(block 70) failed [ 1034.055166][T18482] FAT-fs (loop4): Directory bread(block 71) failed [ 1034.074628][T18482] FAT-fs (loop4): Directory bread(block 72) failed [ 1034.214957][T18482] FAT-fs (loop4): Directory bread(block 73) failed [ 1045.223893][T18594] fuse: fd is not a fuse device [ 1045.965465][T18597] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[18600] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[18597] [ 1047.647077][T18613] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1049.683211][T13462] IPVS: starting estimator thread 0... [ 1049.845241][T18625] IPVS: using max 23 ests per chain, 55200 per kthread [ 1052.852257][T18642] fuse: fd is not a fuse device [ 1053.618756][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1053.780198][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1053.817104][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1053.845995][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.929811][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1053.973689][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1056.665280][T16733] Bluetooth: hci7: command tx timeout [ 1058.745861][T16733] Bluetooth: hci7: command tx timeout [ 1059.063256][T18717] fuse: fd is not a fuse device [ 1060.923728][T16733] Bluetooth: hci7: command tx timeout [ 1062.987766][ T5635] Bluetooth: hci7: command tx timeout [ 1066.198548][T16733] Bluetooth: hci4: command 0x0406 tx timeout [ 1068.545891][T18794] overlayfs: failed to clone upperpath [ 1072.147955][T18652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.176335][T18652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.209723][T18652] bridge_slave_0: entered allmulticast mode [ 1072.243396][T18652] bridge_slave_0: entered promiscuous mode [ 1072.303352][T18652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.340934][T18652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.366874][T18652] bridge_slave_1: entered allmulticast mode [ 1072.422361][T18652] bridge_slave_1: entered promiscuous mode [ 1074.556090][T18652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.569542][T18652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.364384][T18652] team0: Port device team_slave_0 added [ 1076.403164][T18652] team0: Port device team_slave_1 added [ 1078.510125][T18652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.755400][T18652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.856955][T18652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.904670][T18652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.120909][T18652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.967847][T18652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.441366][T18652] hsr_slave_0: entered promiscuous mode [ 1080.471358][T18652] hsr_slave_1: entered promiscuous mode [ 1080.506887][T18652] debugfs: 'hsr0' already exists in 'hsr' [ 1080.533202][T18652] Cannot create hsr debugfs directory [ 1080.587010][T18873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.736497][T18879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.842725][T18873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1081.028846][T18889] loop5: detected capacity change from 0 to 4096 [ 1081.045433][T18889] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1082.290713][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806290d400: rx timeout, send abort [ 1082.790874][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806290ec00: rx timeout, send abort [ 1082.803631][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806290d400: abort rx timeout. Force session deactivation [ 1083.299174][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806290ec00: abort rx timeout. Force session deactivation [ 1083.412252][T18907] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3555'. [ 1084.809424][T18652] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1084.830781][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.848231][T18652] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1084.871180][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.896312][T18652] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1084.935388][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1084.957445][T18652] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1084.981132][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.279185][T18652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.330721][T18652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.360306][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.367541][ T8441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.423371][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.430609][ T8438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.524514][T18652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.267609][T18652] veth0_vlan: entered promiscuous mode [ 1087.290635][T18652] veth1_vlan: entered promiscuous mode [ 1087.357367][T18652] veth0_macvtap: entered promiscuous mode [ 1087.380750][T18652] veth1_macvtap: entered promiscuous mode [ 1087.426341][T18652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.448383][T18652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.472649][ T8473] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.497595][ T8473] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.538897][ T8473] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.579509][ T8473] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.753230][ T8438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.771688][ T8438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.833290][ T8438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.865763][ T8438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.848712][T19106] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1101.875427][ T5635] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1101.887049][ T5635] Bluetooth: hci7: Injecting HCI hardware error event [ 1101.897217][ T5635] Bluetooth: hci7: hardware error 0x00 [ 1103.864913][T19135] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1104.499641][ T5635] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1108.725657][T19163] loop5: detected capacity change from 0 to 1024 [ 1108.761716][T19163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1108.902624][T19163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.565083][T19180] fuse: fd is not a fuse device [ 1110.578826][ T30] audit: type=1800 audit(1778626500.031:340): pid=19163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3598" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1115.282671][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.694334][ T9089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.720534][T19219] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3609'. [ 1119.450614][T19247] sctp: [Deprecated]: syz.2.3616 (pid 19247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1119.450614][T19247] Use struct sctp_sack_info instead [ 1119.566704][ T30] audit: type=1326 audit(1778626509.021:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19233 comm="syz.5.3611" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd67119ce59 code=0x0 [ 1123.535512][T19272] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5627] was attempted by " [ 1124.408380][T19276] loop8: detected capacity change from 0 to 1024 [ 1124.561716][T19276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1125.566839][T19276] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.024681][T18652] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.140410][T19359] loop5: detected capacity change from 0 to 512 [ 1132.281158][T19359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1132.366867][T19359] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.397206][T19384] loop8: detected capacity change from 0 to 1024 [ 1243.304860][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1243.311857][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19393/1:b..l P13146/1:b..l P19390/3:b..l [ 1243.323409][ C1] rcu: (detected by 1, t=10502 jiffies, g=139461, q=905 ncpus=2) [ 1243.331225][ C1] task:udevd state:R running task stack:26640 pid:19390 tgid:19390 ppid:4987 task_flags:0x400040 flags:0x00080000 [ 1243.347803][ C1] Call Trace: [ 1243.351198][ C1] [ 1243.354144][ C1] __schedule+0x1295/0x67a0 [ 1243.358710][ C1] ? page_table_check_set+0x486/0x920 [ 1243.364140][ C1] ? __pfx___schedule+0x10/0x10 [ 1243.369027][ C1] ? find_held_lock+0x2b/0x80 [ 1243.373754][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1243.379174][ C1] preempt_schedule_common+0x42/0xc0 [ 1243.384586][ C1] preempt_schedule_thunk+0x16/0x30 [ 1243.389834][ C1] _raw_spin_unlock+0x3e/0x50 [ 1243.394543][ C1] filemap_map_pages+0x15ac/0x2140 [ 1243.399693][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.405355][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.411028][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1243.416534][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.422202][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1243.427688][ C1] do_fault+0x985/0x1750 [ 1243.431981][ C1] __handle_mm_fault+0x187d/0x2a00 [ 1243.437132][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.442796][ C1] ? reacquire_held_locks+0xce/0x1e0 [ 1243.448108][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1243.453597][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.459257][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 1243.464508][ C1] handle_mm_fault+0x36d/0xa20 [ 1243.469312][ C1] do_user_addr_fault+0x5a3/0x12f0 [ 1243.474472][ C1] exc_page_fault+0x6f/0xd0 [ 1243.479014][ C1] asm_exc_page_fault+0x26/0x30 [ 1243.483884][ C1] RIP: 0033:0x7f44752454d0 [ 1243.488305][ C1] RSP: 002b:00007ffce3df1b18 EFLAGS: 00010206 [ 1243.494388][ C1] RAX: 000056312b1f60a0 RBX: 000056312b1f60a0 RCX: 0000000000000138 [ 1243.502398][ C1] RDX: 000056312b1f61a0 RSI: 00000000000005ea RDI: 000056312b1f60a0 [ 1243.510396][ C1] RBP: 0000000000000001 R08: 00000000ffffffff R09: 0000000000000000 [ 1243.518379][ C1] R10: 00007ffce3df2055 R11: 0000000000000000 R12: 000056310f6bd95f [ 1243.526378][ C1] R13: 000056310f6ce660 R14: 0000000000000000 R15: 00000000ffffffff [ 1243.534398][ C1] [ 1243.537434][ C1] task:syz.7.2089 state:R running task stack:24728 pid:13146 tgid:13145 ppid:10498 task_flags:0x400040 flags:0x00080003 [ 1243.551125][ C1] Call Trace: [ 1243.554417][ C1] [ 1243.557369][ C1] __schedule+0x1295/0x67a0 [ 1243.561921][ C1] ? kfree_skbmem+0x15d/0x210 [ 1243.566636][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.572306][ C1] ? kasan_save_stack+0x3f/0x50 [ 1243.577223][ C1] ? __pfx___schedule+0x10/0x10 [ 1243.582156][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.587823][ C1] ? mark_held_locks+0x40/0x70 [ 1243.592628][ C1] preempt_schedule_irq+0x50/0x90 [ 1243.597705][ C1] irqentry_exit+0x205/0x7e0 [ 1243.602347][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.608024][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1243.614069][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1243.620169][ C1] Code: b6 6d 5b 00 48 89 df 5b e9 9d f8 60 00 be 03 00 00 00 5b e9 12 97 ef 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 65 5a 02 12 48 8b 34 24 65 48 8b 15 41 5a 02 [ 1243.639808][ C1] RSP: 0018:ffffc90003fef030 EFLAGS: 00000202 [ 1243.645906][ C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff8b26c16f [ 1243.653896][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88807def9ec0 [ 1243.661928][ C1] RBP: ffff888053e84000 R08: 0000000000000005 R09: 0000000000000000 [ 1243.669922][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806ab92800 [ 1243.677915][ C1] R13: ffffffff90da057c R14: ffff88802980ca90 R15: dffffc0000000000 [ 1243.685914][ C1] ? net_generic+0xcf/0x2a0 [ 1243.690468][ C1] net_generic+0x18c/0x2a0 [ 1243.694924][ C1] tipc_msg_lookup_dest+0x116/0x730 [ 1243.700174][ C1] ? __pfx_tipc_msg_lookup_dest+0x10/0x10 [ 1243.705927][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1243.710994][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.716658][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 1243.721996][ C1] tipc_sk_rcv+0x15a5/0x1c90 [ 1243.726624][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.732295][ C1] ? kasan_save_track+0x14/0x30 [ 1243.737443][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1243.742517][ C1] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1243.748617][ C1] ? kmalloc_reserve+0x148/0x350 [ 1243.753591][ C1] ? tipc_buf_acquire+0x26/0xe0 [ 1243.758481][ C1] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1243.763452][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.769140][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.774801][ C1] ? find_held_lock+0x2b/0x80 [ 1243.779523][ C1] ? tipc_node_xmit+0x1f6/0xfb0 [ 1243.784444][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.790131][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 1243.795536][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.801199][ C1] tipc_node_xmit+0x23e/0xfb0 [ 1243.805920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.811584][ C1] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1243.816822][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1243.821901][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.827560][ C1] ? kmalloc_reserve+0xf9/0x350 [ 1243.832456][ C1] ? tipc_node_distr_xmit+0x177/0x3c0 [ 1243.837868][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.843532][ C1] tipc_node_distr_xmit+0x177/0x3c0 [ 1243.848786][ C1] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 1243.854593][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.860250][ C1] ? tipc_group_proto_xmit+0x150/0x7c0 [ 1243.865745][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.871413][ C1] tipc_group_cong+0x47c/0x550 [ 1243.876240][ C1] ? __pfx_tipc_group_cong+0x10/0x10 [ 1243.881578][ C1] ? kfree+0x223/0x6c0 [ 1243.885684][ C1] tipc_send_group_anycast+0x33b/0x840 [ 1243.891206][ C1] ? __pfx_tipc_send_group_anycast+0x10/0x10 [ 1243.897211][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.902887][ C1] ? clockevents_program_event+0x1ef/0x820 [ 1243.908751][ C1] ? __entry_text_end+0x1020b6/0x1020b9 [ 1243.914326][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.919999][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1243.925397][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.931072][ C1] __tipc_sendmsg+0x150f/0x1ad0 [ 1243.935972][ C1] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1243.941194][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.947378][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1243.952367][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1243.957328][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.962990][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1243.968093][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.973813][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1243.979481][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 1243.984807][ C1] tipc_sendmsg+0x4f/0x70 [ 1243.989175][ C1] ____sys_sendmsg+0x9e1/0xb70 [ 1243.993972][ C1] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1243.999028][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1244.004375][ C1] ___sys_sendmsg+0x190/0x1e0 [ 1244.009095][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1244.014359][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.020051][ C1] __sys_sendmsg+0x170/0x220 [ 1244.024701][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 1244.029831][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1244.035064][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.040728][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.046403][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.052061][ C1] ? rcu_is_watching+0x12/0xc0 [ 1244.056874][ C1] do_syscall_64+0x10b/0xf80 [ 1244.061530][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.067442][ C1] RIP: 0033:0x7f965919ce59 [ 1244.071864][ C1] RSP: 002b:00007f965a014028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1244.080297][ C1] RAX: ffffffffffffffda RBX: 00007f9659415fa0 RCX: 00007f965919ce59 [ 1244.088286][ C1] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000004 [ 1244.096272][ C1] RBP: 00007f9659232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1244.104254][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.112235][ C1] R13: 00007f9659416038 R14: 00007f9659415fa0 R15: 00007ffde7f631f8 [ 1244.120249][ C1] [ 1244.123275][ C1] task:dhcpcd-run-hook state:R running task stack:27256 pid:19393 tgid:19393 ppid:19388 task_flags:0x400040 flags:0x00080000 [ 1244.136843][ C1] Call Trace: [ 1244.140130][ C1] [ 1244.143070][ C1] __schedule+0x1295/0x67a0 [ 1244.147623][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1244.153842][ C1] ? __pfx___schedule+0x10/0x10 [ 1244.158726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.164390][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.170057][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1244.175483][ C1] preempt_schedule_common+0x42/0xc0 [ 1244.180918][ C1] preempt_schedule_thunk+0x16/0x30 [ 1244.186180][ C1] _raw_spin_unlock+0x3e/0x50 [ 1244.190890][ C1] __zap_vma_range+0x1791/0x4bf0 [ 1244.195910][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1244.201241][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.206905][ C1] ? find_held_lock+0x2b/0x80 [ 1244.211727][ C1] unmap_vmas+0x299/0x5f0 [ 1244.216114][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1244.221013][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.226673][ C1] ? mas_next_slot+0x10a3/0x1960 [ 1244.231685][ C1] exit_mmap+0x1ef/0xa10 [ 1244.235945][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.241612][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1244.246393][ C1] ? rcu_is_watching+0x12/0xc0 [ 1244.251209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.256878][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1244.262032][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1244.267179][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.272880][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.278539][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1244.284213][ C1] __mmput+0x12a/0x410 [ 1244.288321][ C1] mmput+0x67/0x80 [ 1244.292103][ C1] begin_new_exec+0x10f0/0x3880 [ 1244.297011][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.302673][ C1] ? __pfx_begin_new_exec+0x10/0x10 [ 1244.307916][ C1] ? __pfx_load_elf_phdrs+0x10/0x10 [ 1244.313148][ C1] ? rw_verify_area+0xce/0x6d0 [ 1244.317958][ C1] load_elf_binary+0x8f1/0x51b0 [ 1244.322865][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.328526][ C1] ? lock_acquire+0x1b1/0x370 [ 1244.333233][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.338901][ C1] ? find_held_lock+0x2b/0x80 [ 1244.343638][ C1] ? load_misc_binary+0x95e/0xd20 [ 1244.348712][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.354380][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 1244.359707][ C1] ? find_held_lock+0x2b/0x80 [ 1244.364425][ C1] ? bprm_execve+0x8d3/0x1740 [ 1244.369137][ C1] ? bprm_execve+0x8d3/0x1740 [ 1244.373852][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.379525][ C1] bprm_execve+0x8f5/0x1740 [ 1244.384079][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 1244.389077][ C1] ? copy_strings.isra.0+0x491/0x790 [ 1244.394426][ C1] do_execveat_common.isra.0+0x4a5/0x580 [ 1244.400202][ C1] __x64_sys_execve+0x93/0xd0 [ 1244.404954][ C1] do_syscall_64+0x10b/0xf80 [ 1244.409600][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.415520][ C1] RIP: 0033:0x7f9af1c56107 [ 1244.419944][ C1] RSP: 002b:00007fffadeb8bb8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1244.428378][ C1] RAX: ffffffffffffffda RBX: 0000557f54338080 RCX: 00007f9af1c56107 [ 1244.436455][ C1] RDX: 0000557f543380a8 RSI: 0000557f54338080 RDI: 0000557f54338138 [ 1244.444438][ C1] RBP: 0000557f54338138 R08: 00007fffadebce8d R09: 0000000000000000 [ 1244.452419][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 0000557f543380a8 [ 1244.460398][ C1] R13: 00007f9af1e1be8b R14: 0000557f543380a8 R15: 0000000000000000 [ 1244.468457][ C1] [ 1244.471497][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g139461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1244.482804][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1244.492889][ C1] rcu: RCU grace-period kthread stack dump: [ 1244.498817][ C1] task:rcu_preempt state:R running task stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1244.512398][ C1] Call Trace: [ 1244.515682][ C1] [ 1244.518629][ C1] __schedule+0x1295/0x67a0 [ 1244.523176][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.528874][ C1] ? __pfx___schedule+0x10/0x10 [ 1244.533850][ C1] ? find_held_lock+0x2b/0x80 [ 1244.538658][ C1] ? schedule+0x2bf/0x390 [ 1244.543018][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.548688][ C1] schedule+0xdd/0x390 [ 1244.552834][ C1] schedule_timeout+0x127/0x280 [ 1244.557714][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1244.563117][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1244.568448][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.574110][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1244.579946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.585606][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1244.591099][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1244.595886][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.601546][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1244.606858][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.612518][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1244.617481][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1244.622699][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1244.628541][ C1] rcu_gp_kthread+0x179/0x230 [ 1244.633238][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1244.638460][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1244.644305][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.649967][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.655623][ C1] ? __kthread_parkme+0x18c/0x230 [ 1244.660701][ C1] ? kthread+0x13a/0x450 [ 1244.664968][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1244.670188][ C1] kthread+0x370/0x450 [ 1244.674287][ C1] ? __pfx_kthread+0x10/0x10 [ 1244.678908][ C1] ret_from_fork+0x72b/0xd50 [ 1244.683534][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1244.688679][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.694346][ C1] ? __switch_to+0x800/0x1100 [ 1244.699065][ C1] ? __switch_to_asm+0x39/0x70 [ 1244.703858][ C1] ? __pfx_kthread+0x10/0x10 [ 1244.708479][ C1] ret_from_fork_asm+0x1a/0x30 [ 1244.713304][ C1] [ 1244.716329][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1244.722675][ C1] CPU: 1 UID: 0 PID: 17734 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.733813][ C1] Tainted: [L]=SOFTLOCKUP [ 1244.738140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1244.748638][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1244.755182][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1244.761268][ C1] Code: b6 6d 5b 00 48 89 df 5b e9 9d f8 60 00 be 03 00 00 00 5b e9 12 97 ef 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 65 5a 02 12 48 8b 34 24 65 48 8b 15 41 5a 02 [ 1244.780890][ C1] RSP: 0018:ffffc9000c757868 EFLAGS: 00000202 [ 1244.786979][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc127d [ 1244.794958][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888023ac8000 [ 1244.802937][ C1] RBP: ffff8880b8443180 R08: 0000000000000005 R09: 0000000000000000 [ 1244.810913][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1244.818894][ C1] R13: ffffed1017088631 R14: 0000000000000001 R15: ffff8880b853c700 [ 1244.826883][ C1] FS: 0000000000000000(0000) GS:ffff888124471000(0000) knlGS:0000000000000000 [ 1244.835833][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1244.842431][ C1] CR2: 00007fe0d2fea540 CR3: 000000000e596000 CR4: 0000000000350ef0 [ 1244.850420][ C1] Call Trace: [ 1244.853707][ C1] [ 1244.856643][ C1] smp_call_function_many_cond+0x587/0x1700 [ 1244.862582][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1244.867657][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1244.874018][ C1] ? perf_event_text_poke+0x132/0x180 [ 1244.879431][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 1244.885978][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1244.891748][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1244.896811][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1244.901958][ C1] smp_text_poke_batch_finish+0x976/0xc60 [ 1244.907734][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1244.914027][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.919689][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1244.925971][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.931651][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1244.937681][ C1] jump_label_update+0x37a/0x550 [ 1244.942666][ C1] static_key_disable_cpuslocked+0x162/0x1c0 [ 1244.948687][ C1] static_key_disable+0x1a/0x20 [ 1244.953574][ C1] toggle_allocation_gate+0x149/0x2d0 [ 1244.958976][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1244.964901][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1244.970988][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.976654][ C1] ? rcu_is_watching+0x12/0xc0 [ 1244.981463][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1244.987132][ C1] process_one_work+0xa0e/0x1980 [ 1244.992154][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1244.997555][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.003257][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.008923][ C1] worker_thread+0x5ef/0xe50 [ 1245.013574][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1245.018715][ C1] ? kthread+0x13a/0x450 [ 1245.022978][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1245.028113][ C1] kthread+0x370/0x450 [ 1245.032205][ C1] ? __pfx_kthread+0x10/0x10 [ 1245.036821][ C1] ret_from_fork+0x72b/0xd50 [ 1245.041440][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1245.046610][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.052296][ C1] ? __switch_to+0x800/0x1100 [ 1245.057099][ C1] ? __switch_to_asm+0x39/0x70 [ 1245.061893][ C1] ? __pfx_kthread+0x10/0x10 [ 1245.066511][ C1] ret_from_fork_asm+0x1a/0x30 [ 1245.071331][ C1] [ 1387.915149][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [kworker/u8:2:17734] [ 1387.915185][ C1] Modules linked in: [ 1387.915202][ C1] irq event stamp: 2067486 [ 1387.915214][ C1] hardirqs last enabled at (2067485): [] irqentry_exit+0x24d/0x7e0 [ 1387.915284][ C1] hardirqs last disabled at (2067486): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1387.915347][ C1] softirqs last enabled at (2067484): [] __irq_exit_rcu+0x162/0x210 [ 1387.915407][ C1] softirqs last disabled at (2067451): [] __irq_exit_rcu+0x162/0x210 [ 1387.915478][ C1] CPU: 1 UID: 0 PID: 17734 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1387.915530][ C1] Tainted: [L]=SOFTLOCKUP [ 1387.915543][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1387.915568][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1387.915619][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1700 [ 1387.915663][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 69 83 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1387.915700][ C1] RSP: 0018:ffffc9000c757870 EFLAGS: 00000293 [ 1387.915726][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc127d [ 1387.915750][ C1] RDX: ffff888023ac8000 RSI: ffffffff81fc1257 RDI: ffff888023ac8000 [ 1387.915775][ C1] RBP: ffff8880b8443180 R08: 0000000000000005 R09: 0000000000000000 [ 1387.915798][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1387.915820][ C1] R13: ffffed1017088631 R14: 0000000000000001 R15: ffff8880b853c700 [ 1387.915848][ C1] FS: 0000000000000000(0000) GS:ffff888124471000(0000) knlGS:0000000000000000 [ 1387.915879][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1387.915904][ C1] CR2: 00007fe0d2fea540 CR3: 000000000e596000 CR4: 0000000000350ef0 [ 1387.915928][ C1] Call Trace: [ 1387.915939][ C1] [ 1387.915960][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1387.916035][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1387.916078][ C1] ? perf_event_text_poke+0x132/0x180 [ 1387.916134][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 1387.916195][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1387.916261][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1387.916313][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1387.916360][ C1] smp_text_poke_batch_finish+0x976/0xc60 [ 1387.916427][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1387.916491][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1387.916535][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1387.916596][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1387.916654][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1387.916714][ C1] jump_label_update+0x37a/0x550 [ 1387.916777][ C1] static_key_disable_cpuslocked+0x162/0x1c0 [ 1387.916840][ C1] static_key_disable+0x1a/0x20 [ 1387.916898][ C1] toggle_allocation_gate+0x149/0x2d0 [ 1387.916949][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1387.917013][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1387.917055][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1387.917099][ C1] ? rcu_is_watching+0x12/0xc0 [ 1387.917157][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1387.917209][ C1] process_one_work+0xa0e/0x1980 [ 1387.917275][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1387.917318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1387.917377][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1387.917428][ C1] worker_thread+0x5ef/0xe50 [ 1387.917486][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1387.917533][ C1] ? kthread+0x13a/0x450 [ 1387.917571][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1387.917614][ C1] kthread+0x370/0x450 [ 1387.917653][ C1] ? __pfx_kthread+0x10/0x10 [ 1387.917697][ C1] ret_from_fork+0x72b/0xd50 [ 1387.917742][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1387.917788][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1387.917830][ C1] ? __switch_to+0x800/0x1100 [ 1387.917882][ C1] ? __switch_to_asm+0x39/0x70 [ 1387.917932][ C1] ? __pfx_kthread+0x10/0x10 [ 1387.917976][ C1] ret_from_fork_asm+0x1a/0x30 [ 1387.918057][ C1] [ 1387.918071][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1388.321972][ C0] NMI backtrace for cpu 0 [ 1388.322000][ C0] CPU: 0 UID: 0 PID: 19395 Comm: syz.9.3650 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.322046][ C0] Tainted: [L]=SOFTLOCKUP [ 1388.322058][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1388.322077][ C0] RIP: 0010:__lock_acquire+0x551/0x2630 [ 1388.322124][ C0] Code: 66 41 81 e1 ff 1f c1 e0 0d 44 09 c8 98 44 29 c0 31 f8 89 f7 89 c6 29 c7 01 d0 c1 c6 06 31 fe 89 f7 29 f2 01 c6 c1 c7 08 31 d7 <89> fa 29 f8 01 f7 c1 c2 10 41 89 f8 31 c2 89 d0 29 d6 01 fa c1 c8 [ 1388.322161][ C0] RSP: 0018:ffffc90000007d30 EFLAGS: 00000086 [ 1388.322187][ C0] RAX: 00000000ffffff8c RBX: ffff888032620b90 RCX: 0000000000000000 [ 1388.322208][ C0] RDX: 0000000000001c30 RSI: 00000000ffffe35a RDI: 00000000ffe3d2cf [ 1388.322228][ C0] RBP: ffff888032620000 R08: 00000000ffffffff R09: 0000000000000070 [ 1388.322249][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1388.322269][ C0] R13: 0000000000000070 R14: 0000000000000000 R15: 0000000000000002 [ 1388.322292][ C0] FS: 00007fe0d3da96c0(0000) GS:ffff888124371000(0000) knlGS:0000000000000000 [ 1388.322323][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1388.322344][ C0] CR2: 00007fe0d3da8ff8 CR3: 0000000022361000 CR4: 0000000000350ef0 [ 1388.322365][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1388.322384][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1388.322404][ C0] Call Trace: [ 1388.322415][ C0] [ 1388.322430][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.322472][ C0] ? find_held_lock+0x2b/0x80 [ 1388.322525][ C0] ? advance_sched+0x76b/0xd20 [ 1388.322558][ C0] ? advance_sched+0x76b/0xd20 [ 1388.322588][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.322628][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.322672][ C0] lock_acquire+0x1b1/0x370 [ 1388.322709][ C0] ? __hrtimer_run_queues+0x1bd/0xa00 [ 1388.322768][ C0] _raw_spin_lock_irq+0x36/0x50 [ 1388.322817][ C0] ? __hrtimer_run_queues+0x1bd/0xa00 [ 1388.322864][ C0] __hrtimer_run_queues+0x1bd/0xa00 [ 1388.322921][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1388.322985][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1388.323033][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1388.323083][ C0] [ 1388.323093][ C0] [ 1388.323105][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1388.323150][ C0] RIP: 0010:do_futex+0x4/0x350 [ 1388.323196][ C0] Code: ff e8 80 54 7a 00 e9 0f ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> b8 00 00 00 00 00 fc ff df 41 57 41 56 49 89 ce 41 55 49 89 fd [ 1388.323229][ C0] RSP: 0018:ffffc90007b37e18 EFLAGS: 00000287 [ 1388.323253][ C0] RAX: 0000000000000178 RBX: 1ffff92000f66fca RCX: 0000000000000000 [ 1388.323274][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe0d321609c [ 1388.323294][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1388.323313][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1388.323333][ C0] R13: 0000000000000081 R14: ffffc90007b37e90 R15: 0000000000000000 [ 1388.323366][ C0] __x64_sys_futex+0x34f/0x4d0 [ 1388.323417][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 1388.323462][ C0] ? __x64_sys_clock_settime+0x1c9/0x2a0 [ 1388.323519][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.323558][ C0] ? rcu_is_watching+0x12/0xc0 [ 1388.323610][ C0] do_syscall_64+0x10b/0xf80 [ 1388.323663][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.323696][ C0] RIP: 0033:0x7fe0d2f9ce59 [ 1388.323722][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.323752][ C0] RSP: 002b:00007fe0d3da90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1388.323781][ C0] RAX: ffffffffffffffda RBX: 00007fe0d3216098 RCX: 00007fe0d2f9ce59 [ 1388.323802][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe0d321609c [ 1388.323823][ C0] RBP: 00007fe0d3216090 R08: 0000000000000001 R09: 0000000000000000 [ 1388.323843][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1388.323863][ C0] R13: 00007fe0d3216128 R14: 00007ffdf768d390 R15: 00007ffdf768d478 [ 1388.323898][ C0] [ 1388.735874][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 1388.742563][ C1] CPU: 1 UID: 0 PID: 17734 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.753706][ C1] Tainted: [L]=SOFTLOCKUP [ 1388.758034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1388.768103][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1388.774658][ C1] Call Trace: [ 1388.777944][ C1] [ 1388.780793][ C1] dump_stack_lvl+0x100/0x190 [ 1388.785502][ C1] vpanic+0x552/0x970 [ 1388.789505][ C1] ? __pfx_vpanic+0x10/0x10 [ 1388.794025][ C1] ? __entry_text_end+0x1020b5/0x1020b9 [ 1388.799602][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1388.804852][ C1] panic+0xd1/0xe0 [ 1388.808601][ C1] ? __pfx_panic+0x10/0x10 [ 1388.813120][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.818793][ C1] ? __pfx_printk_trigger_flush+0x10/0x10 [ 1388.824560][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1388.830234][ C1] ? wq_watchdog_touch+0xec/0x1a0 [ 1388.835293][ C1] ? watchdog_timer_fn.cold+0x5/0x25 [ 1388.840613][ C1] ? watchdog_timer_fn+0x702/0x7a0 [ 1388.845761][ C1] watchdog_timer_fn.cold+0x16/0x25 [ 1388.850990][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1388.856486][ C1] __hrtimer_run_queues+0x142/0xa00 [ 1388.861743][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1388.866774][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1388.872793][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1388.878473][ C1] [ 1388.881408][ C1] [ 1388.884348][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1388.890360][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1700 [ 1388.897078][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 69 83 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1388.916723][ C1] RSP: 0018:ffffc9000c757870 EFLAGS: 00000293 [ 1388.922818][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc127d [ 1388.930802][ C1] RDX: ffff888023ac8000 RSI: ffffffff81fc1257 RDI: ffff888023ac8000 [ 1388.938793][ C1] RBP: ffff8880b8443180 R08: 0000000000000005 R09: 0000000000000000 [ 1388.946775][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1388.954760][ C1] R13: ffffed1017088631 R14: 0000000000000001 R15: ffff8880b853c700 [ 1388.962757][ C1] ? smp_call_function_many_cond+0x5ad/0x1700 [ 1388.968863][ C1] ? smp_call_function_many_cond+0x587/0x1700 [ 1388.974978][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1388.980088][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1388.986453][ C1] ? perf_event_text_poke+0x132/0x180 [ 1388.991861][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 1388.998414][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1389.004206][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1389.009276][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1389.014419][ C1] smp_text_poke_batch_finish+0x976/0xc60 [ 1389.020189][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1389.026479][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1389.032140][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1389.038422][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1389.044097][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1389.050134][ C1] jump_label_update+0x37a/0x550 [ 1389.055120][ C1] static_key_disable_cpuslocked+0x162/0x1c0 [ 1389.061154][ C1] static_key_disable+0x1a/0x20 [ 1389.066047][ C1] toggle_allocation_gate+0x149/0x2d0 [ 1389.071494][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1389.077428][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1389.083515][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1389.089177][ C1] ? rcu_is_watching+0x12/0xc0 [ 1389.093977][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1389.099737][ C1] process_one_work+0xa0e/0x1980 [ 1389.104767][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1389.110174][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1389.115857][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1389.121526][ C1] worker_thread+0x5ef/0xe50 [ 1389.126162][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1389.131305][ C1] ? kthread+0x13a/0x450 [ 1389.135571][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1389.140713][ C1] kthread+0x370/0x450 [ 1389.144809][ C1] ? __pfx_kthread+0x10/0x10 [ 1389.149428][ C1] ret_from_fork+0x72b/0xd50 [ 1389.154047][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1389.159184][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1389.164839][ C1] ? __switch_to+0x800/0x1100 [ 1389.169547][ C1] ? __switch_to_asm+0x39/0x70 [ 1389.174345][ C1] ? __pfx_kthread+0x10/0x10 [ 1389.178960][ C1] ret_from_fork_asm+0x1a/0x30 [ 1389.183800][ C1] [ 1390.349008][ C1] Shutting down cpus with NMI [ 1390.354025][ C1] Kernel Offset: disabled [ 1390.358349][ C1] Rebooting in 86400 seconds..