last executing test programs: 10m43.979931843s ago: executing program 5 (id=1404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f10bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d00b07862c4fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52c094016406cdd32abf77fea373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515dca8811922929e08538fab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f57cbc05cd897f40693ec427ea71578130cde48de3b4dda0c7b615b57ccd4f8ac729a80f891d91a89d967948b9d95b1f22480ab48969e86b854a8c17f3e264ce11f9f63552364e759eec94572f2f7b0e2f293573d0b80709815f4344f908c00"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) 10m40.900804189s ago: executing program 5 (id=1408): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x3010050, &(0x7f0000000080)=ANY=[], 0x41, 0x14fe, &(0x7f0000000500)="$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") setrlimit(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') madvise(0x0, 0x200000, 0x17) syz_open_dev$usbfs(0x0, 0x76, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00fb1d0aaef4b769fc3fb5aa3decb84c4cd8249e036321a59d9937a73dda6d93546aefa51e4a8115f9e83b20b0ccd486a700e2fbd9ab1af29aa30f2907"], 0x1, 0x5d3, &(0x7f0000001a00)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) open(0x0, 0x0, 0x24) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 10m38.002118274s ago: executing program 5 (id=1412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40080, &(0x7f000005ffe4)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x7b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101d42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) 10m35.989322923s ago: executing program 5 (id=1419): socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) 10m32.468390212s ago: executing program 5 (id=1426): socket$inet6(0xa, 0x2, 0x402) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/xt_recent/syz0\x00', 0x0, 0x0) pread64(r2, &(0x7f00000009c0)=""/15, 0xf, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 10m30.168675286s ago: executing program 5 (id=1430): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000100)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 10m17.092059368s ago: executing program 32 (id=1421): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6cebf72e29071d4d38efe42b91ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x9, 0xff}, 0x3c) 10m15.305066632s ago: executing program 33 (id=1427): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000002c0), 0x56) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000340)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000640)="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", 0x273}, {&(0x7f00000008c0)="acf730000094767e", 0xdd86}], 0x3}, 0x44081) 10m14.901420169s ago: executing program 34 (id=1430): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000100)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 7m41.024264516s ago: executing program 6 (id=1671): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$phonet(0x23, 0x2, 0x1) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7m38.703876441s ago: executing program 6 (id=1677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x801, 0x80000000001, 0x3, 0x3}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f0000000300)=""/78, 0x4e, 0x0) 7m36.662059922s ago: executing program 6 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="e61646ea54da11756e9868eff90dbb551865a5f90556214d14141bd346390c574293544c140de2db1120f41ad3a12d341195aa784b523c8067149fa07b33a09f6dab6bd9de38a1f18935da05a83aee0155a8fdfce4c9303794509acfcd87dabed76bb01c9a97b335d75ba310aaafaaad235397162c89d8c92de2eda4e2bf53ac2b993abeee3d3891ea31c0bf4990225cae740dfef1efb55253", 0x99, 0x4000, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x15, r4, 0x1, 0x1}, 0x14) 7m33.549948955s ago: executing program 6 (id=1686): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8dff, &(0x7f0000000dc0)={0xa, 0x1234, 0x2, @mcast2, 0xfffffffd}, 0x1c) mount(0x0, &(0x7f00000000c0)='./debug\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 7m32.067639966s ago: executing program 6 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000bc0)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000019bc0)={0x2, 0xe, &(0x7f0000019c80)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f000001aa00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000001aa40), 0xffffffffffffff97, 0x10, &(0x7f000001aa80), 0xfffffffffffffd27}, 0x48) 7m26.547744687s ago: executing program 6 (id=1696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 7m10.507896511s ago: executing program 35 (id=1696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 5m0.829774603s ago: executing program 8 (id=1940): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x178) openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000193c0)=0x410000002) mount(0x0, 0x0, 0x0, 0x100054, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019440), 0x1, 0x0) mount(&(0x7f0000019500)=@filename='mtd0\x00', &(0x7f0000019540)='./file0\x00', &(0x7f0000019580)='jffs2\x00', 0x800040, 0x0) 4m59.044682296s ago: executing program 8 (id=1942): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fsopen(0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x20048014) socket$inet6(0xa, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000500)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r1, 0x100000000) timer_create(0x0, 0x0, 0x0) 4m49.490030862s ago: executing program 8 (id=1955): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000540)={0x7, 0x0, '\x00', 0x0, 0x0}) io_setup(0x5, &(0x7f0000000240)=0x0) io_pgetevents(r3, 0x4, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 4m46.557990978s ago: executing program 8 (id=1957): syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a"], 0x28}}, 0x0) 4m44.439732582s ago: executing program 8 (id=1960): socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019440)=0x7) io_cancel(0x0, 0x0, 0x0) 4m40.891488721s ago: executing program 8 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000001d40)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001d80)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001dc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001e40), 0x0, 0x0) read$msr(r3, &(0x7f0000001e80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001ae80)=0x80000000000003) pipe(&(0x7f000001af00)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r4, &(0x7f000001b000)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) 4m25.300675668s ago: executing program 36 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000001d40)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001d80)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001dc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001e40), 0x0, 0x0) read$msr(r3, &(0x7f0000001e80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001ae80)=0x80000000000003) pipe(&(0x7f000001af00)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r4, &(0x7f000001b000)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) 3m42.755428409s ago: executing program 3 (id=2025): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(r7, r3, r4, r5, &(0x7f0000000280)={0x2e, 0x4, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0xcc0, 0x0, 0x0, 0x1000, 0x1000, 0xffffffffffffffff, 0x0, 0x49}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffefff7f, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x211e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x600, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m39.228899343s ago: executing program 3 (id=2033): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x79a, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000300)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000c80)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000d00)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3m36.909592674s ago: executing program 3 (id=2038): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x820d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3m34.427558734s ago: executing program 3 (id=2045): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fcntl$setlease(r0, 0x400, 0x1) unshare(0x24040400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000440)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 3m30.686791881s ago: executing program 3 (id=2052): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019440)=0x7) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 3m28.449506663s ago: executing program 3 (id=2053): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f00000048c0)=""/102392, 0x18ff8) sched_setattr(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x2000003}) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "000000000000000000000000f600"}) 3m13.286868988s ago: executing program 37 (id=2053): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f00000048c0)=""/102392, 0x18ff8) sched_setattr(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x2000003}) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "000000000000000000000000f600"}) 2m6.525589518s ago: executing program 2 (id=2172): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m3.584338949s ago: executing program 2 (id=2179): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 2m3.478511273s ago: executing program 9 (id=2181): syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0xffffffffffffffed, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x185301, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0xa7c, r0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/fillfile\x00', 0x42, 0x9f) write(r1, &(0x7f0000000580)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) setns(0xffffffffffffffff, 0x24020000) 1m58.253823235s ago: executing program 9 (id=2190): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000005c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000006c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) fadvise64(0xffffffffffffffff, 0x73, 0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06000000040000002010000089"], 0x50) 1m57.812850447s ago: executing program 2 (id=2192): socket$inet(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002400000000098000000060a010603000000000000000200000a0900010073797a30000000000900020073797a30000000006c0004802c0001800e000100696d6d65646961746500000018000280080001400000"], 0x12c}}, 0xc0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255, 0x0, r6}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1fffffff, 0xe4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1e, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 1m53.986011104s ago: executing program 2 (id=2198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000e80)='X', 0x1}], 0x1) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m48.253008924s ago: executing program 2 (id=2205): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019280)=0x7) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019340)={0x0, 0x0, 0x0, 0x1, 0x4801000000000000}, 0x0) add_key$user(&(0x7f0000019380), &(0x7f00000193c0)={'syz', 0x3}, &(0x7f0000019400), 0xf2, 0xfffffffffffffffd) 1m45.757606685s ago: executing program 2 (id=2207): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 1m45.494917256s ago: executing program 9 (id=2208): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) close(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 1m42.829393404s ago: executing program 9 (id=2211): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x6) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffe14, &(0x7f0000000280), 0x130}, 0x0) r2 = open(0x0, 0x0, 0x112) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1m40.733720545s ago: executing program 9 (id=2218): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000019600)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000019640)={0x0, 0x10, &(0x7f0000019680)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000196c0)=0x10) 1m37.745393882s ago: executing program 9 (id=2221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f00000004c0)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f0000000500)=""/4096, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) 1m30.47500937s ago: executing program 38 (id=2207): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 1m20.744950942s ago: executing program 39 (id=2221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f00000004c0)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f0000000500)=""/4096, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) 18.384869725s ago: executing program 7 (id=2312): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000b00)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000500)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f00000006c0)="cd89", 0x2}], 0x1) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d"}, 0x3ee) 18.141415669s ago: executing program 1 (id=2313): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='7', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000340)='1', 0x1) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='3', 0x1) 17.524652245s ago: executing program 1 (id=2314): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 17.506255752s ago: executing program 0 (id=2324): close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) io_submit(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) 16.356752368s ago: executing program 0 (id=2315): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socket$key(0xf, 0x3, 0x2) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 16.28387798s ago: executing program 7 (id=2316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 13.155222407s ago: executing program 0 (id=2317): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x5, 0x0) pipe2$9p(&(0x7f0000005500), 0x800) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13.15495074s ago: executing program 7 (id=2318): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000900)={0xfffffff8, 0x0, 0x1, 'queue1\x00', 0xcd65}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000400)='GPL\x00'}, 0x80) 13.154759166s ago: executing program 1 (id=2319): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 13.095427003s ago: executing program 4 (id=2320): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) syz_open_dev$usbfs(0x0, 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r4, &(0x7f0000000400)={0x23, 0x0, 0x0, 0x1d}, 0x10) 11.152616381s ago: executing program 4 (id=2321): msgget$private(0x0, 0x19b) socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000b40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000bc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000c00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019c00)=0x7) chown(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 10.64889307s ago: executing program 0 (id=2322): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0xfffffce2) timer_create(0x0, 0x0, &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.086130704s ago: executing program 4 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000"], 0x0, 0x37}, 0x28) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x10448) socket$inet6_tcp(0xa, 0x1, 0x0) 8.077143505s ago: executing program 7 (id=2334): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000b00)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000500)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$9p(0xffffffffffffffff, &(0x7f0000000640)='-', 0x1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000680)=[{&(0x7f00000006c0)="cd89", 0x2}], 0x1) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "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"}, 0x3ee) close_range(r0, 0xffffffffffffffff, 0x0) 4.21950854s ago: executing program 4 (id=2325): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='7', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000340)='1', 0x1) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='3', 0x1) 4.217434871s ago: executing program 7 (id=2326): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000000280)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000019380)='mountstats\x00') sched_getscheduler(0x0) syz_open_pts(0xffffffffffffffff, 0x80) read$watch_queue(0xffffffffffffffff, &(0x7f0000032400)=""/4095, 0xfff) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000033440)={0x0, 0x0, &(0x7f0000033480)={&(0x7f00000334c0)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x48854}, 0x24000080) 4.216733443s ago: executing program 1 (id=2327): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000b00)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000500)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$9p(0xffffffffffffffff, &(0x7f0000000640)='-', 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f00000006c0)="cd89", 0x2}], 0x1) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "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"}, 0x3ee) 4.041219088s ago: executing program 0 (id=2328): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.914386384s ago: executing program 4 (id=2329): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 2.913210368s ago: executing program 1 (id=2340): syz_open_dev$cec(&(0x7f0000001b40), 0x0, 0x100) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400"/19, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) listns(&(0x7f0000000440)={0x20, 0x0, 0x7}, &(0x7f0000000480)=[0x0], 0xf4240, 0x0) 2.277330063s ago: executing program 7 (id=2330): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000200)=ANY=[], 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 416.809542ms ago: executing program 1 (id=2331): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000980)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./config\x00', &(0x7f0000000a00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000a40)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x17f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$P9_RREADLINK(r0, &(0x7f0000000bc0)={0x32, 0x17, 0x2001, {0x29, './config/usb_gadget/g1/functions/uvc.usb0'}}, 0x32) 165.185009ms ago: executing program 4 (id=2332): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000540)={0xd, 0x9, 0x100, "518ba3fa2f26202c0a43a795ad948b4400346a97159e1eff930ed7d432082d61", 0x3247504d}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0xd) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) 0s ago: executing program 0 (id=2333): setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x143) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kexec_load(0x80, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) kernel console output (not intermixed with test programs): ice bond0 [ 750.080057][T12157] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.100036][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.100165][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.248008][ T3287] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.248154][ T3287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.316557][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 750.659485][ T780] bridge_slave_1: left allmulticast mode [ 750.659532][ T780] bridge_slave_1: left promiscuous mode [ 750.659818][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.665990][ T780] bridge_slave_0: left allmulticast mode [ 750.666026][ T780] bridge_slave_0: left promiscuous mode [ 750.666299][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.025566][ T780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.037468][ T780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.040615][ T780] bond0 (unregistering): Released all slaves [ 751.743050][ T780] hsr_slave_0: left promiscuous mode [ 751.743803][ T780] hsr_slave_1: left promiscuous mode [ 751.744674][ T780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.757351][ T780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.973355][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.973446][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.056426][ T780] team0 (unregistering): Port device team_slave_1 removed [ 752.075042][ T780] team0 (unregistering): Port device team_slave_0 removed [ 752.536624][T12157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.708737][T12186] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 752.750811][T12186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 752.752747][T12186] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 752.830607][T12186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 752.836636][T12186] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 752.844101][T12186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 752.844974][T12186] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 752.870679][T12186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.079563][T12184] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 753.084666][T12184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 753.086368][T12184] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 753.092436][T12184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 753.111666][T12184] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 753.140813][T12184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 753.161433][T12184] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 753.166041][T12184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.457889][T12186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.476738][T12157] veth0_vlan: entered promiscuous mode [ 753.520369][T12157] veth1_vlan: entered promiscuous mode [ 753.559104][T12186] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.602441][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.602581][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.621488][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.621629][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.662341][T12184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.762049][T12184] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.783707][T12157] veth0_macvtap: entered promiscuous mode [ 753.828318][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.828450][ T6581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.854476][T12157] veth1_macvtap: entered promiscuous mode [ 753.901241][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.901395][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.033165][T12157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.079089][T12157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.229709][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.234498][ T780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.234738][ T780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.264467][ T6580] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.505604][ T6579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.505660][ T6579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.700384][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.700419][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.772596][T12186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.734607][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.255623][T12446] No source specified [ 760.577478][ T6581] IPVS: starting estimator thread 0... [ 760.888588][T12471] IPVS: using max 25 ests per chain, 60000 per kthread [ 761.268939][T12476] binder: 12475:12476 ioctl c0306201 200000000180 returned -14 [ 761.374623][T12186] veth0_vlan: entered promiscuous mode [ 761.481550][T12186] veth1_vlan: entered promiscuous mode [ 761.702380][T12486] loop4: detected capacity change from 0 to 512 [ 761.736034][T12486] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 761.736055][T12486] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 761.788233][T12486] EXT4-fs (loop4): 1 truncate cleaned up [ 761.885365][T12486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.047451][T12186] veth0_macvtap: entered promiscuous mode [ 762.122794][T12186] veth1_macvtap: entered promiscuous mode [ 762.246611][T12186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.273172][T12186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.292204][ T780] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.292502][ T780] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.292593][ T780] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.292654][ T780] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.108763][T12184] veth0_vlan: entered promiscuous mode [ 764.669836][T12184] veth1_vlan: entered promiscuous mode [ 765.835671][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.835719][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.220264][T12184] veth0_macvtap: entered promiscuous mode [ 766.236083][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.236581][T12184] veth1_macvtap: entered promiscuous mode [ 767.436492][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1660'. [ 767.667210][T12531] ip_tables: iptables: counters copy to user failed while replacing table [ 768.307036][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.307072][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.370924][T12184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.432282][T12184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.646954][ T780] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.647568][ T780] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.647964][ T780] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.650763][ T6580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.812357][T12549] loop4: detected capacity change from 0 to 2048 [ 771.977474][T12549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.193372][T12549] EXT4-fs error (device loop4): ext4_lookup:1779: inode #2: comm syz.4.1665: bad inode number: 12 [ 772.196494][T12549] EXT4-fs (loop4): Remounting filesystem read-only [ 772.321277][ T3287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.321310][ T3287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.493944][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.493978][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.343108][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.777447][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 775.366812][ T3287] IPVS: starting estimator thread 0... [ 775.458205][T12595] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 775.559375][T12594] IPVS: using max 22 ests per chain, 52800 per kthread [ 775.860917][T12600] loop4: detected capacity change from 0 to 1024 [ 775.880957][T12600] EXT4-fs: Ignoring removed bh option [ 776.191236][T12600] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 776.651843][T12600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.577412][T12621] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 778.577627][T12621] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 778.611217][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1679'. [ 778.618225][T12621] hsr_slave_0: left promiscuous mode [ 778.644844][T12621] hsr_slave_1: left promiscuous mode [ 778.972415][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.732056][T12657] FAULT_INJECTION: forcing a failure. [ 784.732056][T12657] name failslab, interval 1, probability 0, space 0, times 0 [ 784.732148][T12657] CPU: 1 UID: 0 PID: 12657 Comm: syz.4.1688 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.732206][T12657] Tainted: [L]=SOFTLOCKUP [ 784.732220][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 784.732245][T12657] Call Trace: [ 784.732260][T12657] [ 784.732276][T12657] dump_stack_lvl+0x100/0x190 [ 784.732392][T12657] should_fail_ex.cold+0x5/0xa [ 784.732438][T12657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.732496][T12657] should_failslab+0xc2/0x120 [ 784.732549][T12657] __kmalloc_noprof+0xfc/0x840 [ 784.732592][T12657] ? io_cache_alloc_new+0x45/0xe0 [ 784.732743][T12657] io_cache_alloc_new+0x45/0xe0 [ 784.732801][T12657] __io_prep_rw+0x21d/0xfb0 [ 784.732888][T12657] ? __pfx___io_prep_rw+0x10/0x10 [ 784.732955][T12657] ? __do_sys_io_uring_enter+0xa7e/0x1b10 [ 784.733000][T12657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.733066][T12657] io_read_mshot_prep+0x60/0x150 [ 784.733109][T12657] io_submit_sqes+0xa03/0x2480 [ 784.733178][T12657] __do_sys_io_uring_enter+0xa88/0x1b10 [ 784.733229][T12657] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 784.733332][T12657] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 784.733408][T12657] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 784.733477][T12657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.733526][T12657] ? xfd_validate_state+0x129/0x190 [ 784.733588][T12657] ? exit_to_user_mode_loop+0x166/0x700 [ 784.733715][T12657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.733765][T12657] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.733822][T12657] do_syscall_64+0x123/0x790 [ 784.733878][T12657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.733920][T12657] RIP: 0033:0x7fb58019f559 [ 784.733957][T12657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.733997][T12657] RSP: 002b:00007fb581144f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 784.734036][T12657] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fb58019f559 [ 784.734064][T12657] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 784.734088][T12657] RBP: 00000000000001fa R08: 0000000000000000 R09: 0000000000000008 [ 784.734110][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.734136][T12657] R13: 0000000000000008 R14: 0000000000000f39 R15: 0000000000000000 [ 784.734189][T12657] [ 788.755602][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 788.755660][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 788.891590][T12698] netlink: 'syz.3.1695': attribute type 4 has an invalid length. [ 788.891626][T12698] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1695'. [ 789.345096][T12689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.029554][T12692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.061545][T12692] bond1: (slave bond0): making interface the new active one [ 791.064898][T12692] bond1: (slave bond0): Enslaving as an active interface with an up link [ 791.068063][T12698] .`: renamed from bond0 (while UP) [ 791.350492][T12711] loop4: detected capacity change from 0 to 1024 [ 791.388947][T12711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 791.506087][T12711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 791.506287][T12711] System zones: 0-1, 3-36 [ 791.538990][T12711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.887933][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.370001][ T31] audit: type=1326 audit(1792507319.848:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.7.1705" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7fc00000 [ 795.370150][ T31] audit: type=1326 audit(1792507319.848:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.7.1705" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb39859f559 code=0x7fc00000 [ 795.370241][ T31] audit: type=1326 audit(1792507319.848:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.7.1705" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7fc00000 [ 800.273910][T12770] loop8: detected capacity change from 0 to 128 [ 803.723503][T12770] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 803.723574][T12770] FAT-fs (loop8): data area starts beyond volume (36 > 6) [ 803.723605][T12770] FAT-fs (loop8): Can't find a valid FAT filesystem [ 805.604563][T12790] loop4: detected capacity change from 0 to 256 [ 805.706785][T12790] loop4: detected capacity change from 0 to 16 [ 805.766137][T12790] erofs (device loop4): mounted with root inode @ nid 36. [ 806.064431][ T5635] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 806.992425][ T31] audit: type=1800 audit(1792507331.558:630): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1718" name="file2" dev="overlay" ino=89 res=0 errno=0 [ 808.122451][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 808.146819][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 808.157129][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 808.158303][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 808.159170][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 811.899739][ T5635] Bluetooth: hci5: command tx timeout [ 814.094671][ T5631] Bluetooth: hci5: command tx timeout [ 814.095627][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.095731][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.205367][T12855] loop7: detected capacity change from 0 to 128 [ 815.246542][T12855] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 815.246595][T12855] FAT-fs (loop7): data area starts beyond volume (36 > 6) [ 815.246627][T12855] FAT-fs (loop7): Can't find a valid FAT filesystem [ 816.139872][ T5631] Bluetooth: hci5: command tx timeout [ 818.203587][ T3287] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.240057][ T5631] Bluetooth: hci5: command tx timeout [ 820.225452][T12811] rxe_eth0 speed is unknown, defaulting to 1000 [ 820.653844][ T3287] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.771843][T12909] loop8: detected capacity change from 0 to 128 [ 821.833261][T12909] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 821.888043][T12909] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 825.348214][ T3287] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.458797][T12811] lo speed is unknown, defaulting to 1000 [ 826.850960][T12927] loop8: detected capacity change from 0 to 256 [ 826.852221][T12927] vfat: Bad value for 'fmask' [ 827.551258][T12927] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1749'. [ 827.746714][T12952] loop7: detected capacity change from 0 to 2048 [ 827.834798][T12927] bond0: (slave bond_slave_0): Releasing backup interface [ 827.924114][T12952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.261846][T12927] bond_slave_0: entered promiscuous mode [ 828.261894][T12927] bond_slave_0: entered allmulticast mode [ 828.367426][T12963] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 828.726816][ T3287] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.338692][T12954] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 829.354934][T12184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.669524][T12978] loop4: detected capacity change from 0 to 512 [ 831.316189][T12978] EXT4-fs (loop4): Test dummy encryption mode enabled [ 831.386745][T12978] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 831.427376][T12978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e01c, mo2=0002] [ 831.427541][T12978] System zones: 1-12 [ 831.427842][T12978] EXT4-fs (loop4): orphan cleanup on readonly fs [ 831.435928][T12978] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.1759: invalid indirect mapped block 12 (level 1) [ 831.435987][T12978] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 831.451767][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 831.451802][ C1] EXT4-fs (loop4): initial error at time 1792507355: ext4_free_branches:1020: inode 11 [ 831.451852][ C1] EXT4-fs (loop4): last error at time 1792507355: ext4_free_branches:1020: inode 11 [ 831.568240][T12978] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.1759: invalid indirect mapped block 2 (level 2) [ 831.568300][T12978] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 831.617541][T12978] EXT4-fs (loop4): 1 truncate cleaned up [ 831.620642][T12978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 831.908865][T12990] loop8: detected capacity change from 0 to 1024 [ 832.061104][T12990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.163470][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 834.648237][T12990] pimreg: entered allmulticast mode [ 836.046304][T13018] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 836.706910][T13018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 837.071789][T13031] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 837.195419][T12186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.197920][ T3287] bridge_slave_1: left allmulticast mode [ 837.197954][ T3287] bridge_slave_1: left promiscuous mode [ 837.198264][ T3287] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.251556][ T3287] bridge_slave_0: left allmulticast mode [ 837.251601][ T3287] bridge_slave_0: left promiscuous mode [ 837.251958][ T3287] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.320478][T13033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1768'. [ 837.868924][T13039] loop7: detected capacity change from 0 to 256 [ 837.870318][T13039] vfat: Bad value for 'fmask' [ 837.926576][ T31] audit: type=1326 audit(1792507362.478:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 837.958503][ T31] audit: type=1326 audit(1792507362.528:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 837.968308][T13039] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1769'. [ 837.986370][ T31] audit: type=1326 audit(1792507362.528:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 837.986456][ T31] audit: type=1326 audit(1792507362.528:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 837.986529][ T31] audit: type=1326 audit(1792507362.528:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 837.986601][ T31] audit: type=1326 audit(1792507362.528:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 837.986675][ T31] audit: type=1326 audit(1792507362.528:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 837.989903][ T31] audit: type=1326 audit(1792507362.558:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 837.990048][ T31] audit: type=1326 audit(1792507362.558:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 837.990126][ T31] audit: type=1326 audit(1792507362.558:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.8.1770" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca899f559 code=0x7ffc0000 [ 838.950051][T13060] loop8: detected capacity change from 0 to 512 [ 839.526900][T13060] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 839.526932][T13060] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 839.527076][T13060] EXT4-fs (loop8): Unsupported encryption level 7 [ 839.673414][ T3287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.704091][ T3287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.722972][ T3287] bond0 (unregistering): Released all slaves [ 839.910769][T13023] bond5: (slave gretap1): making interface the new active one [ 839.918220][T13023] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 840.031329][T13031] bond0: entered promiscuous mode [ 840.031835][T13031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.045096][T13033] bond0: entered allmulticast mode [ 840.171867][T13036] bond0: (slave bridge1): making interface the new active one [ 840.171906][T13036] bridge1: entered promiscuous mode [ 840.172151][T13036] bridge1: entered allmulticast mode [ 840.178341][T13036] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 842.046403][T13080] netlink: 'syz.4.1776': attribute type 2 has an invalid length. [ 842.046441][T13080] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 842.046514][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1776'. [ 842.121305][T13080] netlink: 'syz.4.1776': attribute type 2 has an invalid length. [ 842.121337][T13080] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 842.121361][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1776'. [ 842.121414][T13080] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 844.887662][T12811] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.889050][T12811] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.889232][T12811] bridge_slave_0: entered allmulticast mode [ 844.918664][T12811] bridge_slave_0: entered promiscuous mode [ 844.930467][T12811] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.930589][T12811] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.930767][T12811] bridge_slave_1: entered allmulticast mode [ 844.933281][T12811] bridge_slave_1: entered promiscuous mode [ 847.275091][T13119] loop8: detected capacity change from 0 to 128 [ 847.298319][T13119] EXT4-fs (loop8): Test dummy encryption mode enabled [ 847.307823][T12811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.564194][T12811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.587565][T13119] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 847.618688][T13119] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 848.084398][T13137] netlink: 'syz.4.1788': attribute type 1 has an invalid length. [ 848.889456][T12811] team0: Port device team_slave_0 added [ 848.942323][T12186] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 850.246605][T13137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 850.664888][T13139] bond2: (slave gretap1): making interface the new active one [ 850.690617][T13139] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 850.713952][T12811] team0: Port device team_slave_1 added [ 850.767664][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 850.767706][ T31] audit: type=1800 audit(1792507375.328:659): pid=13159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1792" name="nullb0" dev="tmpfs" ino=1994 res=0 errno=0 [ 850.781375][ T3287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.781417][ T3287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.828496][ T3287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.828534][ T3287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.936516][ T3287] veth1_macvtap: left promiscuous mode [ 851.936579][ T3287] veth0_macvtap: left promiscuous mode [ 851.936928][ T3287] veth1_vlan: left promiscuous mode [ 851.938187][ T3287] veth0_vlan: left promiscuous mode [ 854.553035][ T3287] team0 (unregistering): Port device team_slave_1 removed [ 854.592438][ T3287] team0 (unregistering): Port device team_slave_0 removed [ 854.683500][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1802'. [ 857.275688][T13223] loop4: detected capacity change from 0 to 512 [ 857.310019][T13223] EXT4-fs (loop4): 1 truncate cleaned up [ 857.340314][T13223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.459814][T13228] EXT4-fs error (device loop4): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 858.526687][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.944994][T13243] binder: transaction release 138 bad handle 1, ret = -22 [ 859.068776][T12811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.068806][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.068855][T12811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.098705][T13237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1808'. [ 860.098893][T13237] lo: Caught tx_queue_len zero misconfig [ 860.529024][T12811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.529054][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.529105][T12811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.685392][T12811] hsr_slave_0: entered promiscuous mode [ 860.686923][T12811] hsr_slave_1: entered promiscuous mode [ 860.687999][T12811] debugfs: 'hsr0' already exists in 'hsr' [ 860.688029][T12811] Cannot create hsr debugfs directory [ 860.755970][ T5629] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 860.827654][T13271] loop8: detected capacity change from 0 to 256 [ 860.840180][T13271] vfat: Unknown parameter 'ÿÿÿÿ' [ 860.960545][T13273] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 861.068995][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1815'. [ 861.338298][ T5629] usb 5-1: Using ep0 maxpacket: 8 [ 861.551148][ T5629] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 861.613825][T13273] bond6: entered promiscuous mode [ 861.649143][T13273] 8021q: adding VLAN 0 to HW filter on device bond6 [ 861.851627][T13275] bond6: entered allmulticast mode [ 861.928129][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.928226][ T5629] usb 5-1: Product: syz [ 861.928432][ T5629] usb 5-1: Manufacturer: syz [ 861.928505][ T5629] usb 5-1: SerialNumber: syz [ 861.986538][ T5629] usb 5-1: config 0 descriptor?? [ 862.140184][T13283] syzkaller0: entered promiscuous mode [ 862.140228][T13283] syzkaller0: entered allmulticast mode [ 862.291957][ T5629] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 862.359064][T12811] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 862.399051][T12811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 862.776183][T12811] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 862.805426][T12811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.806569][T12811] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 862.860369][T12811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.862771][T12811] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 862.875139][ T3287] IPVS: stop unused estimator thread 0... [ 862.921259][T12811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 863.607699][T12811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.718694][T12811] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.734719][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.734932][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.827012][ T3287] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.827189][ T3287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.366424][ T5629] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 864.408814][ T5629] usb 5-1: USB disconnect, device number 8 [ 865.835357][T13346] netlink: 'syz.3.1827': attribute type 1 has an invalid length. [ 866.079276][T13354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 866.095734][T13354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 866.096901][T13354] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 866.098129][T13354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 866.099017][T13354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 866.211167][T13351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1827'. [ 866.230339][T13346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 866.231802][T13349] veth0_virt_wifi: entered promiscuous mode [ 866.465880][T13349] bond2: (slave veth0_virt_wifi): making interface the new active one [ 866.468067][T13349] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 866.515410][T13351] bond2: entered promiscuous mode [ 866.515684][T13351] bond2: entered allmulticast mode [ 866.515711][T13351] veth0_virt_wifi: entered allmulticast mode [ 866.634634][T13346] bond2: (slave veth0_virt_wifi): Releasing active interface [ 866.634834][T13346] veth0_virt_wifi: left allmulticast mode [ 866.701514][T13339] Bluetooth: hci6: command 0x0406 tx timeout [ 866.782899][T13339] Bluetooth: hci4: command 0x0406 tx timeout [ 868.235766][ T5635] Bluetooth: hci3: command tx timeout [ 870.823068][ T5631] Bluetooth: hci3: command tx timeout [ 872.620881][ T31] audit: type=1326 audit(1792507397.178:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.621850][ T31] audit: type=1326 audit(1792507397.178:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.621953][ T31] audit: type=1326 audit(1792507397.178:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.624203][ T31] audit: type=1326 audit(1792507397.178:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.626498][ T31] audit: type=1326 audit(1792507397.178:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.641063][ T31] audit: type=1326 audit(1792507397.208:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.641266][ T31] audit: type=1326 audit(1792507397.208:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.641757][ T31] audit: type=1326 audit(1792507397.208:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.641940][ T31] audit: type=1326 audit(1792507397.208:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.676365][ T31] audit: type=1326 audit(1792507397.208:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.7.1836" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb39859f559 code=0x7ffc0000 [ 872.870569][ T5631] Bluetooth: hci3: command tx timeout [ 874.886099][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.886187][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.949652][ T5631] Bluetooth: hci3: command tx timeout [ 877.428202][T13435] loop8: detected capacity change from 0 to 256 [ 877.503037][T13435] exfat: Deprecated parameter 'utf8' [ 877.503154][T13435] exfat: Deprecated parameter 'namecase' [ 877.503236][T13435] exfat: Deprecated parameter 'namecase' [ 877.503338][T13435] exfat: Deprecated parameter 'namecase' [ 877.640912][T13435] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 877.659496][T13435] netlink: 'syz.8.1846': attribute type 1 has an invalid length. [ 877.797069][T13350] rxe_eth0 speed is unknown, defaulting to 1000 [ 879.325774][T13446] xt_TPROXY: Can be used only with -p tcp or -p udp [ 880.215434][T13446] ip_tables: iptables: counters copy to user failed while replacing table [ 880.229904][T13446] ip_tables: iptables: counters copy to user failed while replacing table [ 880.831764][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 880.831815][ T31] audit: type=1800 audit(1792507405.398:713): pid=13464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1851" name="/" dev="fuse" ino=1 res=0 errno=0 [ 881.374118][T13474] netlink: 'syz.7.1853': attribute type 1 has an invalid length. [ 881.552260][T13474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 881.557404][T13350] lo speed is unknown, defaulting to 1000 [ 882.043637][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 883.910599][T13479] bond1: (slave gretap1): making interface the new active one [ 883.912305][T13479] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 883.913039][T13494] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1857'. [ 884.370235][T10380] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 884.738357][T13497] random: crng reseeded on system resumption [ 885.014662][T13505] jffs2: notice: (13505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 885.355335][ T61] bridge_slave_1: left allmulticast mode [ 885.355377][ T61] bridge_slave_1: left promiscuous mode [ 885.355651][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.511310][T10380] usb 9-1: unable to get BOS descriptor or descriptor too short [ 885.511768][T10380] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 885.543402][ T61] bridge_slave_0: left allmulticast mode [ 885.543449][ T61] bridge_slave_0: left promiscuous mode [ 885.543787][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.600019][T10380] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 885.600070][T10380] usb 9-1: can't read configurations, error -71 [ 886.772624][T13521] netlink: 'syz.8.1864': attribute type 1 has an invalid length. [ 886.970604][T13522] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1864'. [ 889.227486][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.246122][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.262443][ T61] bond0 (unregistering): Released all slaves [ 890.616021][T13521] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 895.281472][ T61] hsr_slave_0: left promiscuous mode [ 895.293925][ T61] hsr_slave_1: left promiscuous mode [ 895.294898][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.390661][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.107369][ T31] audit: type=1326 audit(1792507421.658:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13593 comm="syz.0.1881" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa37f99f559 code=0x0 [ 898.936281][ T61] team0 (unregistering): Port device team_slave_1 removed [ 899.174110][ T61] team0 (unregistering): Port device team_slave_0 removed [ 905.003205][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13 [ 905.984852][T13662] jffs2: notice: (13662) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 907.764923][T13690] loop7: detected capacity change from 0 to 512 [ 907.954122][T13690] EXT4-fs (loop7): 1 truncate cleaned up [ 907.970069][T13690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.061926][T13350] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.120537][T13350] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.120769][T13350] bridge_slave_0: entered allmulticast mode [ 908.123384][T13350] bridge_slave_0: entered promiscuous mode [ 908.156445][T13350] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.156566][T13350] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.156697][T13350] bridge_slave_1: entered allmulticast mode [ 908.357166][T13350] bridge_slave_1: entered promiscuous mode [ 909.588022][T12184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.246694][T13350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.250099][T13350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.994556][T13350] team0: Port device team_slave_0 added [ 912.998226][T13350] team0: Port device team_slave_1 added [ 914.370075][T13350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.370106][T13350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.370159][T13350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.640155][T13350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.640189][T13350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.640255][T13350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.249936][T13350] hsr_slave_0: entered promiscuous mode [ 917.251283][T13350] hsr_slave_1: entered promiscuous mode [ 917.252187][T13350] debugfs: 'hsr0' already exists in 'hsr' [ 917.252216][T13350] Cannot create hsr debugfs directory [ 917.849803][T13766] loop4: detected capacity change from 0 to 16 [ 917.944944][T13766] erofs (device loop4): mounted with root inode @ nid 36. [ 918.008525][T13766] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 918.021176][T13766] syz.4.1913: attempt to access beyond end of device [ 918.021176][T13766] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 918.082481][T13766] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 918.082608][T13766] erofs (device loop4): read error -117 @ 0 of nid 89 [ 918.085996][ T31] audit: type=1800 audit(1792507442.648:715): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1913" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 918.605984][T13760] syzkaller0: entered promiscuous mode [ 918.606023][T13760] syzkaller0: entered allmulticast mode [ 923.416850][T13795] input: syz0 as /devices/virtual/input/input13 [ 924.870304][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14 [ 925.197515][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1919'. [ 927.201950][T13812] jffs2: notice: (13812) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 927.276066][T13817] xt_TPROXY: Can be used only with -p tcp or -p udp [ 927.511995][T10367] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 927.844341][T10367] usb 5-1: Using ep0 maxpacket: 32 [ 928.037278][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 928.041077][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 928.042082][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 928.043310][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 928.044069][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 928.053913][T10367] usb 5-1: unable to get BOS descriptor or descriptor too short [ 928.054024][T10367] usb 5-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 928.310463][T10367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.310680][T10367] usb 5-1: Product: syz [ 928.310876][T10367] usb 5-1: Manufacturer: syz [ 928.311145][T10367] usb 5-1: SerialNumber: syz [ 928.800964][T13817] ip_tables: iptables: counters copy to user failed while replacing table [ 928.823677][T13817] ip_tables: iptables: counters copy to user failed while replacing table [ 928.938861][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1930'. [ 929.163200][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1930'. [ 929.244159][T10367] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 929.244615][T10367] usb 5-1: MIDIStreaming interface descriptor not found [ 929.289273][ T50] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.306979][ T50] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.307699][ T780] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.307773][ T780] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.907905][T10367] usb 5-1: USB disconnect, device number 9 [ 930.127899][T13852] udevd[13852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 930.219901][ T5631] Bluetooth: hci5: command tx timeout [ 932.265371][ T31] audit: type=1326 audit(1792507456.828:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13865 comm="syz.4.1933" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb58019f559 code=0x0 [ 932.313510][ T13] bridge_slave_1: left allmulticast mode [ 932.313542][ T13] bridge_slave_1: left promiscuous mode [ 932.313771][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.330682][ T5631] Bluetooth: hci5: command tx timeout [ 932.757629][ T13] bridge_slave_0: left allmulticast mode [ 932.757759][ T13] bridge_slave_0: left promiscuous mode [ 932.758534][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.784908][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.787608][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.789201][ T13] bond0 (unregistering): Released all slaves [ 934.247325][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 934.501771][ T5631] Bluetooth: hci5: command tx timeout [ 934.726728][T13900] jffs2: notice: (13900) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 935.124507][T13892] lo: entered allmulticast mode [ 935.154875][T13903] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 935.437707][T13885] lo: left allmulticast mode [ 936.353250][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1944'. [ 936.364381][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.364510][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.559939][ T5631] Bluetooth: hci5: command tx timeout [ 937.969816][T13824] rxe_eth0 speed is unknown, defaulting to 1000 [ 943.401941][ T13] hsr_slave_0: left promiscuous mode [ 943.585799][ T13] hsr_slave_1: left promiscuous mode [ 943.587093][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.732467][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.054662][ T31] audit: type=1326 audit(1792507469.628:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.7.1951" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb39859f559 code=0x0 [ 948.614488][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1957'. [ 949.557509][ T13] team0 (unregistering): Port device team_slave_1 removed [ 949.617443][ T13] team0 (unregistering): Port device team_slave_0 removed [ 953.836578][T13824] lo speed is unknown, defaulting to 1000 [ 953.873315][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16 [ 953.910089][T13967] siw: device registration error -23 [ 957.878963][T14025] openvswitch: netlink: IP tunnel dst address not specified [ 967.906628][T13824] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.921624][T13824] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.921869][T13824] bridge_slave_0: entered allmulticast mode [ 967.930198][T13824] bridge_slave_0: entered promiscuous mode [ 967.970266][T13824] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.970479][T13824] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.970680][T13824] bridge_slave_1: entered allmulticast mode [ 967.977783][T13824] bridge_slave_1: entered promiscuous mode [ 967.992530][T14062] siw: device registration error -23 [ 968.135944][T14062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1976'. [ 968.354680][T14062] bridge0: port 1(macvlan2) entered disabled state [ 968.801460][T14062] macvlan2 (unregistering): left allmulticast mode [ 968.801651][T14062] macvlan2 (unregistering): left promiscuous mode [ 968.801830][T14062] bridge0: port 1(macvlan2) entered disabled state [ 972.054971][T13824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.082833][T13824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.352239][T13824] team0: Port device team_slave_0 added [ 972.356906][T13824] team0: Port device team_slave_1 added [ 972.460714][T13824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.460800][T13824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.460854][T13824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.463425][T13824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.463448][T13824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.463497][T13824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.399776][T13824] hsr_slave_0: entered promiscuous mode [ 973.509816][T13824] hsr_slave_1: entered promiscuous mode [ 973.602157][T13824] debugfs: 'hsr0' already exists in 'hsr' [ 973.608196][T13824] Cannot create hsr debugfs directory [ 973.986743][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 974.009078][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 974.012097][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.014487][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 974.016882][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 976.025154][ T31] audit: type=1800 audit(1792507500.588:718): pid=14122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1987" name="file0" dev="overlay" ino=1894 res=0 errno=0 [ 976.289775][ T5635] Bluetooth: hci3: command tx timeout [ 977.737025][ T31] audit: type=1800 audit(1792507502.298:719): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1989" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 978.138553][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.197846][ T31] audit: type=1326 audit(1792507502.738:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.0.1991" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37f99f559 code=0x7ffc0000 [ 978.211307][ T31] audit: type=1326 audit(1792507502.778:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.0.1991" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37f99f559 code=0x7ffc0000 [ 978.285370][ T31] audit: type=1326 audit(1792507502.838:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.0.1991" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37f99f559 code=0x7ffc0000 [ 978.285463][ T31] audit: type=1326 audit(1792507502.838:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.0.1991" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37f99f559 code=0x7ffc0000 [ 978.294303][ T31] audit: type=1326 audit(1792507502.858:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.0.1991" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa37f99f559 code=0x7ffc0000 [ 978.364943][ T31] audit: type=1326 audit(1792507502.918:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.0.1991" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37f99f559 code=0x7ffc0000 [ 978.365197][ T31] audit: type=1326 audit(1792507502.918:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.0.1991" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37f99f559 code=0x7ffc0000 [ 978.396787][ T5635] Bluetooth: hci3: command tx timeout [ 978.545656][ T31] audit: type=1326 audit(1792507503.108:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14133 comm="syz.0.1991" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37f99f559 code=0x7ffc0000 [ 979.520298][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.644673][T14147] siw: device registration error -23 [ 979.692228][T14147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1994'. [ 980.456823][T14147] bridge0: port 3(syz_tun) entered disabled state [ 980.480924][ T5635] Bluetooth: hci3: command tx timeout [ 980.662997][T14147] syz_tun (unregistering): left allmulticast mode [ 980.663047][T14147] syz_tun (unregistering): left promiscuous mode [ 980.663179][T14147] bridge0: port 3(syz_tun) entered disabled state [ 981.410912][T14103] rxe_eth0 speed is unknown, defaulting to 1000 [ 983.145137][ T5635] Bluetooth: hci3: command tx timeout [ 983.158321][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.991205][T14176] overlayfs: failed to clone upperpath [ 985.531932][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.187166][T14103] lo speed is unknown, defaulting to 1000 [ 986.720108][T14184] syzkaller0: entered promiscuous mode [ 986.720145][T14184] syzkaller0: entered allmulticast mode [ 986.833777][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 986.849292][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 986.863225][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 986.879957][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 986.880846][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 987.367992][T14204] fuse: fd is not a fuse device [ 988.845644][ T13] bridge_slave_1: left allmulticast mode [ 988.845841][ T13] bridge_slave_1: left promiscuous mode [ 988.846268][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.872590][ T13] bridge_slave_0: left allmulticast mode [ 988.872632][ T13] bridge_slave_0: left promiscuous mode [ 988.873044][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.899869][ T13] pimreg: left allmulticast mode [ 988.949769][ T5631] Bluetooth: hci6: command tx timeout [ 989.163720][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.165813][ T13] bond0 (unregistering): Released all slaves [ 989.197960][T14212] syzkaller0: entered promiscuous mode [ 989.198003][T14212] syzkaller0: entered allmulticast mode [ 990.125829][T14242] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 991.142064][ T5631] Bluetooth: hci6: command tx timeout [ 993.159198][T14103] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.159341][T14103] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.159705][T14103] bridge_slave_0: entered allmulticast mode [ 993.169555][T14103] bridge_slave_0: entered promiscuous mode [ 993.174713][T14197] rxe_eth0 speed is unknown, defaulting to 1000 [ 993.179253][ T5631] Bluetooth: hci6: command tx timeout [ 993.183760][T14103] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.184033][T14103] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.185843][T14103] bridge_slave_1: entered allmulticast mode [ 993.191874][T14103] bridge_slave_1: entered promiscuous mode [ 993.369757][T14103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.388007][T14103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.323204][T14103] team0: Port device team_slave_0 added [ 994.393782][T14103] team0: Port device team_slave_1 added [ 994.458117][T14103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.458196][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.458329][T14103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.460774][T14103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.460799][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.460847][T14103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.569777][ T5631] Bluetooth: hci6: command tx timeout [ 995.702413][T14103] hsr_slave_0: entered promiscuous mode [ 995.895235][T14103] hsr_slave_1: entered promiscuous mode [ 995.896402][T14103] debugfs: 'hsr0' already exists in 'hsr' [ 995.896439][T14103] Cannot create hsr debugfs directory [ 996.382826][T14287] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 996.382922][T14287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 996.407061][T14284] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 996.407107][T14284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 996.407263][T14284] vhci_hcd vhci_hcd.0: Device attached [ 996.469187][T14287] vhci_hcd vhci_hcd.0: Device attached [ 996.509935][T14284] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 996.509982][T14284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 996.510043][T14284] vhci_hcd vhci_hcd.0: Device attached [ 996.517861][T14284] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 996.517906][T14284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 996.607807][T14284] vhci_hcd vhci_hcd.0: Device attached [ 996.701648][T10388] usb 41-2: new high-speed USB device number 2 using vhci_hcd [ 996.720061][T14287] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(14) [ 996.720105][T14287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 996.720214][T14287] vhci_hcd vhci_hcd.0: Device attached [ 996.723984][T14284] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 996.724037][T14284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 996.724171][T14284] vhci_hcd vhci_hcd.0: Device attached [ 996.812037][T14300] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(13) [ 996.812088][T14300] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 996.812287][T14300] vhci_hcd vhci_hcd.0: Device attached [ 996.813839][T14298] vhci_hcd: connection closed [ 996.814575][T14288] vhci_hcd: connection reset by peer [ 996.815110][T14296] vhci_hcd: connection closed [ 996.815442][T14302] vhci_hcd: connection closed [ 996.821682][T14293] vhci_hcd: connection closed [ 996.822854][T14304] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 996.823128][T14291] vhci_hcd: connection closed [ 996.839558][T14285] vhci_hcd: connection closed [ 996.939100][ T3267] vhci_hcd vhci_hcd.4: stop threads [ 996.953616][ T3267] vhci_hcd vhci_hcd.4: release socket [ 996.965244][ T3267] vhci_hcd vhci_hcd.4: disconnect device [ 996.966042][ T3267] vhci_hcd vhci_hcd.4: stop threads [ 996.966082][ T3267] vhci_hcd vhci_hcd.4: release socket [ 996.966228][ T3267] vhci_hcd vhci_hcd.4: disconnect device [ 996.968421][ T3267] vhci_hcd vhci_hcd.4: stop threads [ 996.968452][ T3267] vhci_hcd vhci_hcd.4: release socket [ 996.968576][ T3267] vhci_hcd vhci_hcd.4: disconnect device [ 996.968744][ T3267] vhci_hcd vhci_hcd.4: stop threads [ 996.968770][ T3267] vhci_hcd vhci_hcd.4: release socket [ 996.968911][ T3267] vhci_hcd vhci_hcd.4: disconnect device [ 996.969205][ T3267] vhci_hcd vhci_hcd.4: stop threads [ 996.969239][ T3267] vhci_hcd vhci_hcd.4: release socket [ 997.044947][T14297] team0: Device xfrm0 is of different type [ 997.063901][ T3267] vhci_hcd vhci_hcd.4: disconnect device [ 997.075635][T14306] fuse: fd is not a fuse device [ 997.076179][ T3267] vhci_hcd vhci_hcd.4: stop threads [ 997.076216][ T3267] vhci_hcd vhci_hcd.4: release socket [ 997.076299][ T3267] vhci_hcd vhci_hcd.4: disconnect device [ 997.082010][ T3267] vhci_hcd vhci_hcd.4: stop threads [ 997.082041][ T3267] vhci_hcd vhci_hcd.4: release socket [ 997.082153][ T3267] vhci_hcd vhci_hcd.4: disconnect device [ 997.207713][T14197] lo speed is unknown, defaulting to 1000 [ 999.680700][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.680817][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.373100][ T5279] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1001.207878][ T13] hsr_slave_0: left promiscuous mode [ 1001.210757][ T13] hsr_slave_1: left promiscuous mode [ 1001.211783][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.211808][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.212937][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.212960][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.332691][ T13] veth1_macvtap: left promiscuous mode [ 1001.332742][ T13] veth0_macvtap: left promiscuous mode [ 1001.332957][ T13] veth1_vlan: left promiscuous mode [ 1001.333041][ T13] veth0_vlan: left promiscuous mode [ 1001.842619][T10388] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1001.961763][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1001.993916][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1003.184212][T10367] usb usb42-port7: attempt power cycle [ 1003.343529][ T780] bridge_slave_1: left allmulticast mode [ 1003.343579][ T780] bridge_slave_1: left promiscuous mode [ 1003.343890][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.349134][ T780] bridge_slave_0: left allmulticast mode [ 1003.349167][ T780] bridge_slave_0: left promiscuous mode [ 1003.350104][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.539508][ T780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.543251][ T780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.545405][ T780] bond0 (unregistering): Released all slaves [ 1003.709721][T14197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.729771][T14197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.730017][T14197] bridge_slave_0: entered allmulticast mode [ 1003.758846][T14197] bridge_slave_0: entered promiscuous mode [ 1003.762630][T14197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.762776][T14197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.762946][T14197] bridge_slave_1: entered allmulticast mode [ 1003.814209][T14197] bridge_slave_1: entered promiscuous mode [ 1003.817210][T10367] usb usb42-port7: unable to enumerate USB device [ 1004.007168][T14197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.014484][T14197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.258537][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1004.278611][T14197] team0: Port device team_slave_0 added [ 1004.283139][T14197] team0: Port device team_slave_1 added [ 1004.353116][ T780] hsr_slave_0: left promiscuous mode [ 1004.353868][ T780] hsr_slave_1: left promiscuous mode [ 1004.354981][ T780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.358617][ T780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.555374][ T780] team0 (unregistering): Port device team_slave_1 removed [ 1004.587174][ T780] team0 (unregistering): Port device team_slave_0 removed [ 1004.770380][T14197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.770405][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.770445][T14197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.833497][T14197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.833526][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.833576][T14197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.862311][T14103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1004.877642][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1004.908744][T14103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1004.916162][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1004.920035][T14103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1004.964164][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1005.019071][T14103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1005.035515][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.063967][T14197] hsr_slave_0: entered promiscuous mode [ 1005.065472][T14197] hsr_slave_1: entered promiscuous mode [ 1005.066288][T14197] debugfs: 'hsr0' already exists in 'hsr' [ 1005.066316][T14197] Cannot create hsr debugfs directory [ 1005.561317][T14197] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1005.564996][T14197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1005.587024][T14103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.589290][T14197] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1005.595041][T14197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1005.596563][T14197] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1005.629308][T14197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1005.639479][T14197] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1005.643113][T14197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.675061][T14103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.701816][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.701951][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.732280][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.732394][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.929176][T14197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.985252][T14197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.019765][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.019917][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.022709][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.022832][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.166666][T14103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.311048][T14103] veth0_vlan: entered promiscuous mode [ 1007.329641][T14103] veth1_vlan: entered promiscuous mode [ 1007.406025][T14103] veth0_macvtap: entered promiscuous mode [ 1007.450976][T14103] veth1_macvtap: entered promiscuous mode [ 1007.476818][T14197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.505996][T14103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.526892][T14103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.631729][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.633386][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.633571][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.633719][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.811745][ T6582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.811862][ T6582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.922103][ T3287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.922142][ T3287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.313405][T14197] veth0_vlan: entered promiscuous mode [ 1012.938037][T14197] veth1_vlan: entered promiscuous mode [ 1013.007898][T14197] veth0_macvtap: entered promiscuous mode [ 1013.014188][T14197] veth1_macvtap: entered promiscuous mode [ 1013.049350][T14197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.067120][T14197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.356358][ T3287] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.358455][ T3287] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.358512][ T3287] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.358565][ T3287] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.688808][ T6585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.688947][ T6585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.270831][T14444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.270996][T14444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.703589][T14477] xt_CT: No such helper "snmp_trap" [ 1033.858076][T14597] loop2: detected capacity change from 0 to 8 [ 1033.931137][T14597] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1033.931185][T14597] SQUASHFS error: Failed to read block 0x9b: -5 [ 1033.931208][T14597] SQUASHFS error: Unable to read metadata cache entry [99] [ 1033.931231][T14597] SQUASHFS error: Unable to read inode 0x127 [ 1040.085805][ T5635] Bluetooth: hci6: command 0x0405 tx timeout [ 1040.120512][T14661] jffs2: notice: (14661) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1044.775975][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1044.786913][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1044.817279][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1044.819606][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1044.821632][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1046.871078][ T5635] Bluetooth: hci5: command tx timeout [ 1047.142122][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 1048.407910][T14724] syzkaller0: entered promiscuous mode [ 1048.407947][T14724] syzkaller0: entered allmulticast mode [ 1049.011841][ T5635] Bluetooth: hci5: command tx timeout [ 1051.099912][ T5635] Bluetooth: hci5: command tx timeout [ 1053.190627][ T5635] Bluetooth: hci5: command tx timeout [ 1054.237326][T14760] loop2: detected capacity change from 0 to 256 [ 1054.277222][T14696] rxe_eth0 speed is unknown, defaulting to 1000 [ 1059.185216][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.185321][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.829206][T14696] lo speed is unknown, defaulting to 1000 [ 1059.920273][T14777] lo speed is unknown, defaulting to 1000 [ 1059.920518][T14777] lo speed is unknown, defaulting to 1000 [ 1059.921493][T14777] lo speed is unknown, defaulting to 1000 [ 1060.020133][T14777] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1060.020189][T14777] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1060.020278][T14777] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1060.074417][T14777] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1060.346063][T14777] lo speed is unknown, defaulting to 1000 [ 1060.348152][T14777] lo speed is unknown, defaulting to 1000 [ 1060.350263][T14777] lo speed is unknown, defaulting to 1000 [ 1060.352189][T14777] lo speed is unknown, defaulting to 1000 [ 1060.353892][T14777] lo speed is unknown, defaulting to 1000 [ 1060.355494][T14777] lo speed is unknown, defaulting to 1000 [ 1060.357098][T14777] lo speed is unknown, defaulting to 1000 [ 1060.846435][T14803] syzkaller0: entered promiscuous mode [ 1060.846486][T14803] syzkaller0: entered allmulticast mode [ 1060.868059][ T6655] hfsc: classify hop budget exhausted, dropping packet [ 1060.989704][T14803] hfsc: classify hop budget exhausted, dropping packet [ 1061.183247][T14814] FAULT_INJECTION: forcing a failure. [ 1061.183247][T14814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1061.183540][T14814] CPU: 1 UID: 0 PID: 14814 Comm: syz.7.2106 Tainted: G L syzkaller #0 PREEMPT(full) [ 1061.183625][T14814] Tainted: [L]=SOFTLOCKUP [ 1061.183641][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1061.183670][T14814] Call Trace: [ 1061.183792][T14814] [ 1061.183809][T14814] dump_stack_lvl+0x100/0x190 [ 1061.184014][T14814] should_fail_ex.cold+0x5/0xa [ 1061.184123][T14814] ? prepare_alloc_pages+0x16d/0x5b0 [ 1061.184261][T14814] should_fail_alloc_page+0xeb/0x140 [ 1061.184374][T14814] prepare_alloc_pages+0x1f0/0x5b0 [ 1061.184423][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.184481][T14814] ? __lock_acquire+0x5c0/0x1f40 [ 1061.184575][T14814] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1061.184683][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.184733][T14814] ? pick_task_fair+0x136/0x1e10 [ 1061.184900][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.184956][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.185005][T14814] ? lock_acquire+0x1d1/0x380 [ 1061.185048][T14814] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1061.185142][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.185193][T14814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1061.185262][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.185312][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.185360][T14814] ? rcu_is_watching+0x13/0xc0 [ 1061.185482][T14814] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1061.185529][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.185641][T14814] ? lockdep_hardirqs_on+0x7d/0x110 [ 1061.185877][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.185927][T14814] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1061.185975][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.186025][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.186074][T14814] ? rcu_is_watching+0x13/0xc0 [ 1061.186131][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.186180][T14814] ? trace_sched_exit_tp+0x120/0x160 [ 1061.186263][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.186330][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.186378][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.186424][T14814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1061.186605][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.186653][T14814] ? policy_nodemask+0xed/0x4f0 [ 1061.186734][T14814] alloc_pages_mpol+0x201/0x550 [ 1061.186796][T14814] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1061.186846][T14814] ? preempt_schedule_thunk+0x16/0x40 [ 1061.186924][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.186973][T14814] ? preempt_schedule_common+0x3c/0xb0 [ 1061.187048][T14814] folio_alloc_mpol_noprof+0x36/0x260 [ 1061.187113][T14814] vma_alloc_folio_noprof+0xed/0x1d0 [ 1061.187174][T14814] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1061.187256][T14814] ? __pfx_try_to_wake_up+0x10/0x10 [ 1061.187300][T14814] ? futex_hash+0x311/0x400 [ 1061.187378][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.187435][T14814] do_anonymous_page+0xac9/0x2050 [ 1061.187525][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.187586][T14814] ? __pfx_do_anonymous_page+0x10/0x10 [ 1061.187639][T14814] ? rcu_read_unlock+0x2d/0xb0 [ 1061.187713][T14814] ? rcu_read_unlock+0x2d/0xb0 [ 1061.187773][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.187821][T14814] ? __pte_offset_map+0x179/0x310 [ 1061.187897][T14814] __handle_mm_fault+0x1ff3/0x2f60 [ 1061.187955][T14814] ? lock_vma_under_rcu+0x11d/0x590 [ 1061.188005][T14814] ? __pfx___handle_mm_fault+0x10/0x10 [ 1061.188079][T14814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1061.188129][T14814] ? lock_vma_under_rcu+0x17c/0x590 [ 1061.188205][T14814] handle_mm_fault+0x363/0xa20 [ 1061.188272][T14814] do_user_addr_fault+0x59c/0x12f0 [ 1061.188401][T14814] exc_page_fault+0x6f/0xd0 [ 1061.188446][T14814] asm_exc_page_fault+0x26/0x30 [ 1061.188482][T14814] RIP: 0033:0x7fb398466746 [ 1061.188542][T14814] Code: ce fe ff 48 c7 c0 ff ff ff ff eb b0 0f 1f 84 00 00 00 00 00 41 56 41 55 41 54 55 53 48 81 ec 40 20 00 00 48 8b 05 22 13 1f 00 <48> 89 7c 24 18 48 89 74 24 10 be 02 55 08 80 48 89 54 24 08 48 8b [ 1061.188587][T14814] RSP: 002b:00007fb399393fb0 EFLAGS: 00010202 [ 1061.188672][T14814] RAX: 0000100000000000 RBX: 00007fb398825fa0 RCX: 0000000000000000 [ 1061.188697][T14814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1061.188724][T14814] RBP: 00007fb398636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1061.188750][T14814] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000000 [ 1061.188783][T14814] R13: 00007fb398826038 R14: 00007fb398825fa0 R15: 00007fff646e3048 [ 1061.188839][T14814] [ 1061.212939][T14814] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1063.780187][T14829] loop2: detected capacity change from 0 to 2048 [ 1063.794235][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.794490][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.794726][T14696] bridge_slave_0: entered allmulticast mode [ 1063.796903][T14696] bridge_slave_0: entered promiscuous mode [ 1063.815626][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.815764][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.816028][T14696] bridge_slave_1: entered allmulticast mode [ 1063.818334][T14696] bridge_slave_1: entered promiscuous mode [ 1063.968242][T14829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1064.017315][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.022120][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.773847][T14696] team0: Port device team_slave_0 added [ 1066.795929][T14696] team0: Port device team_slave_1 added [ 1066.856040][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.856069][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.856119][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.859418][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.929616][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.929677][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.052453][T14696] hsr_slave_0: entered promiscuous mode [ 1067.053734][T14696] hsr_slave_1: entered promiscuous mode [ 1067.054644][T14696] debugfs: 'hsr0' already exists in 'hsr' [ 1067.054676][T14696] Cannot create hsr debugfs directory [ 1071.220232][T14868] netlink: 'syz.4.2109': attribute type 13 has an invalid length. [ 1071.220275][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'. [ 1075.731897][T14890] program syz.7.2115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1077.674262][T14895] loop2: detected capacity change from 0 to 128 [ 1077.991652][T14895] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1077.992491][T14895] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.154436][T14907] fuse: fd is not a fuse device [ 1080.255339][T14103] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1083.935126][T14696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1084.817114][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.818698][T14696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1084.876455][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.877668][T14696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1084.905422][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1084.944903][T14696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1084.972180][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1086.835720][T14696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.881050][T14696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.984732][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.984853][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.089362][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.089630][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.593983][T14696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.802012][T14696] veth0_vlan: entered promiscuous mode [ 1090.880204][T14696] veth1_vlan: entered promiscuous mode [ 1091.130260][T14696] veth0_macvtap: entered promiscuous mode [ 1091.173605][T14696] veth1_macvtap: entered promiscuous mode [ 1091.564215][T14696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.374707][T14696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.811265][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.112908][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.113861][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.220964][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.938266][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.938307][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.515847][T15043] overlayfs: failed to clone upperpath [ 1096.229308][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.229345][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.641344][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 1100.746625][T15059] FAULT_INJECTION: forcing a failure. [ 1100.746625][T15059] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.746797][T15059] CPU: 0 UID: 0 PID: 15059 Comm: syz.2.2154 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.746853][T15059] Tainted: [L]=SOFTLOCKUP [ 1100.746868][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1100.746892][T15059] Call Trace: [ 1100.746917][T15059] [ 1100.746932][T15059] dump_stack_lvl+0x100/0x190 [ 1100.747013][T15059] should_fail_ex.cold+0x5/0xa [ 1100.747065][T15059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.747122][T15059] should_failslab+0xc2/0x120 [ 1100.747180][T15059] __kmalloc_noprof+0xfc/0x840 [ 1100.747265][T15059] ? tomoyo_profile+0x47/0x60 [ 1100.747430][T15059] ? tomoyo_supervisor+0x65d/0x1340 [ 1100.747505][T15059] tomoyo_supervisor+0x65d/0x1340 [ 1100.747581][T15059] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1100.747690][T15059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.747739][T15059] ? tomoyo_check_path_acl+0x141/0x210 [ 1100.747813][T15059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.747862][T15059] ? tomoyo_check_acl+0x1f7/0x410 [ 1100.747914][T15059] tomoyo_path_permission+0x270/0x3b0 [ 1100.747969][T15059] tomoyo_check_open_permission+0x34d/0x3c0 [ 1100.748022][T15059] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1100.748090][T15059] ? hook_file_open+0x248/0x8e0 [ 1100.748215][T15059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.748273][T15059] tomoyo_file_open+0x6b/0x90 [ 1100.748314][T15059] security_file_open+0xb5/0x1e0 [ 1100.748397][T15059] do_dentry_open+0x552/0x1470 [ 1100.748475][T15059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.748532][T15059] vfs_open_consume+0xcc/0x460 [ 1100.748585][T15059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.748642][T15059] path_openat+0x1551/0x2430 [ 1100.748735][T15059] ? __pfx_path_openat+0x10/0x10 [ 1100.748800][T15059] do_file_open+0x20e/0x430 [ 1100.748853][T15059] ? __pfx_do_file_open+0x10/0x10 [ 1100.748940][T15059] ? _raw_spin_unlock+0x28/0x50 [ 1100.749049][T15059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.749098][T15059] ? alloc_fd+0x471/0x7a0 [ 1100.749210][T15059] do_sys_openat2+0x163/0x1d0 [ 1100.749267][T15059] ? __pfx_do_sys_openat2+0x10/0x10 [ 1100.749342][T15059] __x64_sys_openat+0x12d/0x210 [ 1100.749398][T15059] ? __pfx___x64_sys_openat+0x10/0x10 [ 1100.749465][T15059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.749522][T15059] do_syscall_64+0x123/0x790 [ 1100.749604][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.749645][T15059] RIP: 0033:0x7f4a84f9f559 [ 1100.749689][T15059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.749769][T15059] RSP: 002b:00007f4a85d80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1100.749839][T15059] RAX: ffffffffffffffda RBX: 00007f4a85225fa0 RCX: 00007f4a84f9f559 [ 1100.749866][T15059] RDX: 0000000000000002 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 1100.749891][T15059] RBP: 00007f4a85036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1100.749917][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1100.749941][T15059] R13: 00007f4a85226038 R14: 00007f4a85225fa0 R15: 00007ffd9fc99478 [ 1100.749994][T15059] [ 1102.129166][T15102] loop7: detected capacity change from 0 to 32768 [ 1103.394315][T15112] orangefs_mount: mount request failed with -4 [ 1105.239417][T15129] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input14 [ 1110.973844][T15175] overlayfs: failed to clone upperpath [ 1115.553257][ T5631] Bluetooth: hci6: command 0x0405 tx timeout [ 1116.096284][T15207] FAULT_INJECTION: forcing a failure. [ 1116.096284][T15207] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1116.096448][T15207] CPU: 1 UID: 60929 PID: 15207 Comm: syz.7.2187 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.096506][T15207] Tainted: [L]=SOFTLOCKUP [ 1116.096521][T15207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1116.096546][T15207] Call Trace: [ 1116.096560][T15207] [ 1116.096575][T15207] dump_stack_lvl+0x100/0x190 [ 1116.096646][T15207] should_fail_ex.cold+0x5/0xa [ 1116.096701][T15207] get_futex_key+0x1c9/0x13e0 [ 1116.096773][T15207] ? __pfx_get_futex_key+0x10/0x10 [ 1116.096827][T15207] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.096922][T15207] ? __pfx_process_one_work+0x10/0x10 [ 1116.097055][T15207] futex_wake+0xf4/0x5e0 [ 1116.097118][T15207] ? bh_worker+0x4b7/0x8f0 [ 1116.097178][T15207] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.097239][T15207] ? __pfx_futex_wake+0x10/0x10 [ 1116.097305][T15207] ? lockdep_hardirqs_on+0x7d/0x110 [ 1116.097355][T15207] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1116.097422][T15207] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.097480][T15207] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.097529][T15207] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.097585][T15207] do_futex+0x2b2/0x440 [ 1116.097644][T15207] ? __pfx_do_futex+0x10/0x10 [ 1116.097699][T15207] ? rcu_is_watching+0x13/0xc0 [ 1116.097766][T15207] ? tasklet_action_common+0x75/0x3d0 [ 1116.097843][T15207] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.097891][T15207] ? lockdep_hardirqs_on+0x7d/0x110 [ 1116.097944][T15207] __x64_sys_futex+0x34f/0x4d0 [ 1116.098013][T15207] ? __pfx___x64_sys_futex+0x10/0x10 [ 1116.098073][T15207] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.098131][T15207] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.098190][T15207] do_syscall_64+0x123/0x790 [ 1116.098282][T15207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.098324][T15207] RIP: 0033:0x7fb39859f559 [ 1116.098381][T15207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.098422][T15207] RSP: 002b:00007fb3993960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1116.098470][T15207] RAX: ffffffffffffffda RBX: 00007fb398825fa8 RCX: 00007fb39859f559 [ 1116.098495][T15207] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb398825fac [ 1116.098519][T15207] RBP: 00007fb398825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1116.098542][T15207] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1116.098564][T15207] R13: 00007fb398826038 R14: 00007fff646e2f60 R15: 00007fff646e3048 [ 1116.098613][T15207] [ 1120.647129][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.647220][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.469148][T15267] loop1: detected capacity change from 0 to 512 [ 1124.622494][T15267] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1124.630576][T15267] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 1124.630650][T15267] loop1: lost filesystem error report for type 5 error -12 [ 1124.637252][ C1] EXT4-fs (loop1): initial error at time 1792507649: ext4_process_orphan:346 [ 1124.637318][ C1] EXT4-fs (loop1): last error at time 1792507649: ext4_process_orphan:346 [ 1124.748192][T15267] EXT4-fs (loop1): 1 truncate cleaned up [ 1124.802930][T15267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.268386][T14696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.380177][T13339] Bluetooth: hci6: command 0x0405 tx timeout [ 1134.479928][ T5635] Bluetooth: hci6: command 0x0405 tx timeout [ 1136.733581][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 1137.928565][T15340] tipc: Enabling of bearer rejected, failed to enable media [ 1143.601349][T15362] tipc: Started in network mode [ 1143.601402][T15362] tipc: Node identity 36e3bc953d39, cluster identity 4711 [ 1143.601735][T15362] tipc: Enabled bearer , priority 0 [ 1143.636528][T15362] syzkaller0: entered promiscuous mode [ 1143.636557][T15362] syzkaller0: entered allmulticast mode [ 1145.617447][T15372] tipc: Resetting bearer [ 1146.656679][T15357] tipc: Resetting bearer [ 1146.972216][T15357] tipc: Disabling bearer [ 1147.332819][T15396] No such timeout policy "syz1" [ 1147.423387][T15397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2233'. [ 1148.763924][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1148.777410][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1148.783129][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1148.787164][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1148.788179][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1149.278694][T10389] tipc: Node number set to 198884501 [ 1150.488620][T15422] FAULT_INJECTION: forcing a failure. [ 1150.488620][T15422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1150.488727][T15422] CPU: 1 UID: 0 PID: 15422 Comm: syz.7.2237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.488875][T15422] Tainted: [L]=SOFTLOCKUP [ 1150.488891][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1150.488916][T15422] Call Trace: [ 1150.488933][T15422] [ 1150.488948][T15422] dump_stack_lvl+0x100/0x190 [ 1150.489010][T15422] should_fail_ex.cold+0x5/0xa [ 1150.489082][T15422] ? prepare_alloc_pages+0x16d/0x5b0 [ 1150.489142][T15422] should_fail_alloc_page+0xeb/0x140 [ 1150.489195][T15422] prepare_alloc_pages+0x1f0/0x5b0 [ 1150.489250][T15422] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1150.489316][T15422] ? __pfx___css_rstat_updated+0x10/0x10 [ 1150.489424][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.489481][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.489527][T15422] ? lock_acquire+0x1d1/0x380 [ 1150.489573][T15422] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1150.489621][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.489667][T15422] ? find_held_lock+0x2b/0x80 [ 1150.489749][T15422] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1150.489794][T15422] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1150.489843][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.489892][T15422] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1150.489958][T15422] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1150.490004][T15422] ? lockdep_hardirqs_on+0x7d/0x110 [ 1150.490045][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.490091][T15422] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1150.490135][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.490183][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.490228][T15422] ? rcu_is_watching+0x13/0xc0 [ 1150.490282][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.490329][T15422] ? trace_sched_exit_tp+0x120/0x160 [ 1150.490383][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.490429][T15422] ? __schedule+0x126b/0x6980 [ 1150.490507][T15422] ? stack_depot_save_flags+0x27/0x9f0 [ 1150.490613][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.490659][T15422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1150.490715][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.490761][T15422] ? policy_nodemask+0xed/0x4f0 [ 1150.490822][T15422] alloc_pages_mpol+0x201/0x550 [ 1150.490875][T15422] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1150.490921][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.490968][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.491027][T15422] alloc_pages_noprof+0x1a/0x160 [ 1150.491084][T15422] get_free_pages_noprof+0x10/0xb0 [ 1150.491125][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.491170][T15422] __kasan_populate_vmalloc+0xa0/0x210 [ 1150.491221][T15422] alloc_vmap_area+0x95d/0x2bb0 [ 1150.491277][T15422] ? kasan_save_track+0x14/0x30 [ 1150.491316][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.491362][T15422] ? __kasan_kmalloc+0xaa/0xb0 [ 1150.491402][T15422] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1150.491442][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.491493][T15422] ? __get_vm_area_node+0x124/0x350 [ 1150.491614][T15422] __get_vm_area_node+0x1ed/0x350 [ 1150.491669][T15422] __vmalloc_node_range_noprof+0x268/0x1420 [ 1150.491721][T15422] ? bpf_prog_calc_tag+0x63/0x340 [ 1150.491823][T15422] ? preempt_schedule_irq+0x79/0x90 [ 1150.491863][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.491912][T15422] ? irqentry_exit+0x2c9/0xa90 [ 1150.491954][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.492000][T15422] ? irqentry_exit+0x2c9/0xa90 [ 1150.492042][T15422] ? bpf_prog_calc_tag+0x63/0x340 [ 1150.492096][T15422] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1150.492150][T15422] ? bpf_check_btf_info+0x820/0x1710 [ 1150.492277][T15422] ? bpf_check_btf_info+0x10f5/0x1710 [ 1150.492345][T15422] ? bpf_prog_calc_tag+0x63/0x340 [ 1150.492387][T15422] __vmalloc_node_noprof+0xad/0xf0 [ 1150.492438][T15422] ? bpf_prog_calc_tag+0x63/0x340 [ 1150.492487][T15422] __vmalloc_noprof+0xa3/0x120 [ 1150.492535][T15422] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1150.492582][T15422] ? sort+0x97/0xd0 [ 1150.492651][T15422] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 1150.492712][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.492762][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.492817][T15422] bpf_prog_calc_tag+0x63/0x340 [ 1150.492871][T15422] bpf_check+0x6bd8/0xac70 [ 1150.492954][T15422] ? __pfx___css_rstat_updated+0x10/0x10 [ 1150.493039][T15422] ? __pfx_bpf_check+0x10/0x10 [ 1150.493086][T15422] ? irqentry_exit+0x2c9/0xa90 [ 1150.493124][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.493187][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.493233][T15422] ? __asan_memset+0x23/0x50 [ 1150.493294][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.493358][T15422] ? bpf_prog_load+0x1ae1/0x2ab0 [ 1150.493437][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.493484][T15422] bpf_prog_load+0x1ae1/0x2ab0 [ 1150.493541][T15422] ? __pfx_bpf_prog_load+0x10/0x10 [ 1150.493615][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.493663][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.493710][T15422] ? irqentry_exit+0x2c9/0xa90 [ 1150.493786][T15422] __sys_bpf+0x1f46/0x4a30 [ 1150.493877][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.493923][T15422] ? plist_check_list+0x1b8/0x280 [ 1150.494035][T15422] ? plist_check_list+0x190/0x280 [ 1150.494093][T15422] ? __pfx___sys_bpf+0x10/0x10 [ 1150.494149][T15422] ? find_held_lock+0x2b/0x80 [ 1150.494205][T15422] ? futex_wake+0x4ea/0x5e0 [ 1150.494270][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.494318][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.494363][T15422] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1150.494438][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.494485][T15422] ? futex_private_hash_put+0x24/0x30 [ 1150.494535][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.494593][T15422] ? __pfx_futex_wake+0x10/0x10 [ 1150.494666][T15422] ? kasan_quarantine_put+0x104/0x240 [ 1150.494717][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.494766][T15422] ? kmem_cache_free+0x127/0x6c0 [ 1150.494880][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.494951][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.494998][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.495046][T15422] ? __x64_sys_futex+0x358/0x4d0 [ 1150.495104][T15422] ? __x64_sys_openat+0x12d/0x210 [ 1150.495163][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.495210][T15422] ? xfd_validate_state+0x129/0x190 [ 1150.495291][T15422] ? __x64_sys_bpf+0xce/0x140 [ 1150.495351][T15422] __x64_sys_bpf+0xce/0x140 [ 1150.495415][T15422] ? do_syscall_64+0xae/0x790 [ 1150.495460][T15422] do_syscall_64+0x123/0x790 [ 1150.495507][T15422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.495546][T15422] RIP: 0033:0x7fb39859f559 [ 1150.495579][T15422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.495616][T15422] RSP: 002b:00007fb3967d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.495654][T15422] RAX: ffffffffffffffda RBX: 00007fb398826180 RCX: 00007fb39859f559 [ 1150.495679][T15422] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1150.495703][T15422] RBP: 00007fb398636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1150.495726][T15422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.495749][T15422] R13: 00007fb398826218 R14: 00007fb398826180 R15: 00007fff646e3048 [ 1150.495799][T15422] [ 1150.496183][T15422] syz.7.2237: vmalloc error: size 48, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1150.496575][T15422] CPU: 1 UID: 0 PID: 15422 Comm: syz.7.2237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.496631][T15422] Tainted: [L]=SOFTLOCKUP [ 1150.496645][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1150.496667][T15422] Call Trace: [ 1150.496680][T15422] [ 1150.496694][T15422] dump_stack_lvl+0x100/0x190 [ 1150.496753][T15422] warn_alloc.cold+0x9e/0xb2 [ 1150.496851][T15422] ? __pfx_warn_alloc+0x10/0x10 [ 1150.496909][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.496954][T15422] ? lockdep_hardirqs_on+0x7d/0x110 [ 1150.496999][T15422] ? __get_vm_area_node+0x2f0/0x350 [ 1150.497056][T15422] ? __get_vm_area_node+0x22b/0x350 [ 1150.497110][T15422] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 1150.497161][T15422] ? preempt_schedule_irq+0x79/0x90 [ 1150.497200][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.497249][T15422] ? irqentry_exit+0x2c9/0xa90 [ 1150.497290][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.497358][T15422] ? irqentry_exit+0x2c9/0xa90 [ 1150.497400][T15422] ? bpf_prog_calc_tag+0x63/0x340 [ 1150.497454][T15422] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1150.497509][T15422] ? bpf_check_btf_info+0x820/0x1710 [ 1150.497574][T15422] ? bpf_check_btf_info+0x10f5/0x1710 [ 1150.497641][T15422] ? bpf_prog_calc_tag+0x63/0x340 [ 1150.497684][T15422] __vmalloc_node_noprof+0xad/0xf0 [ 1150.497732][T15422] ? bpf_prog_calc_tag+0x63/0x340 [ 1150.497781][T15422] __vmalloc_noprof+0xa3/0x120 [ 1150.497836][T15422] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1150.497883][T15422] ? sort+0x97/0xd0 [ 1150.497920][T15422] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 1150.497982][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.498030][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.498081][T15422] bpf_prog_calc_tag+0x63/0x340 [ 1150.498133][T15422] bpf_check+0x6bd8/0xac70 [ 1150.498187][T15422] ? __pfx___css_rstat_updated+0x10/0x10 [ 1150.498268][T15422] ? __pfx_bpf_check+0x10/0x10 [ 1150.498314][T15422] ? irqentry_exit+0x2c9/0xa90 [ 1150.498387][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.498449][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.498499][T15422] ? __asan_memset+0x23/0x50 [ 1150.498559][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.498614][T15422] ? bpf_prog_load+0x1ae1/0x2ab0 [ 1150.498658][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.498728][T15422] bpf_prog_load+0x1ae1/0x2ab0 [ 1150.498786][T15422] ? __pfx_bpf_prog_load+0x10/0x10 [ 1150.498837][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.498885][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.498931][T15422] ? irqentry_exit+0x2c9/0xa90 [ 1150.499007][T15422] __sys_bpf+0x1f46/0x4a30 [ 1150.499062][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.499109][T15422] ? plist_check_list+0x1b8/0x280 [ 1150.499172][T15422] ? plist_check_list+0x190/0x280 [ 1150.499229][T15422] ? __pfx___sys_bpf+0x10/0x10 [ 1150.499285][T15422] ? find_held_lock+0x2b/0x80 [ 1150.499341][T15422] ? futex_wake+0x4ea/0x5e0 [ 1150.499405][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.499454][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.499502][T15422] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1150.499553][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.499599][T15422] ? futex_private_hash_put+0x24/0x30 [ 1150.499647][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.499704][T15422] ? __pfx_futex_wake+0x10/0x10 [ 1150.499764][T15422] ? kasan_quarantine_put+0x104/0x240 [ 1150.499816][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.499862][T15422] ? kmem_cache_free+0x127/0x6c0 [ 1150.499959][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.500028][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.500073][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.500119][T15422] ? __x64_sys_futex+0x358/0x4d0 [ 1150.500175][T15422] ? __x64_sys_openat+0x12d/0x210 [ 1150.500229][T15422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.500274][T15422] ? xfd_validate_state+0x129/0x190 [ 1150.500321][T15422] ? __x64_sys_bpf+0xce/0x140 [ 1150.500379][T15422] __x64_sys_bpf+0xce/0x140 [ 1150.500441][T15422] ? do_syscall_64+0xae/0x790 [ 1150.500484][T15422] do_syscall_64+0x123/0x790 [ 1150.500531][T15422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.500570][T15422] RIP: 0033:0x7fb39859f559 [ 1150.500601][T15422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.500638][T15422] RSP: 002b:00007fb3967d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.500674][T15422] RAX: ffffffffffffffda RBX: 00007fb398826180 RCX: 00007fb39859f559 [ 1150.500700][T15422] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1150.500724][T15422] RBP: 00007fb398636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1150.500748][T15422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.500772][T15422] R13: 00007fb398826218 R14: 00007fb398826180 R15: 00007fff646e3048 [ 1150.500848][T15422] [ 1150.500906][T15422] Mem-Info: [ 1150.501041][T15422] active_anon:55434 inactive_anon:0 isolated_anon:0 [ 1150.501041][T15422] active_file:2338 inactive_file:62595 isolated_file:0 [ 1150.501041][T15422] unevictable:0 dirty:426 writeback:0 [ 1150.501041][T15422] slab_reclaimable:12364 slab_unreclaimable:110974 [ 1150.501041][T15422] mapped:50009 shmem:48178 pagetables:1872 [ 1150.501041][T15422] sec_pagetables:0 bounce:0 [ 1150.501041][T15422] kernel_misc_reclaimable:0 [ 1150.501041][T15422] free:1184529 free_pcp:19759 free_cma:0 [ 1150.501179][T15422] Node 0 active_anon:221736kB inactive_anon:0kB active_file:9352kB inactive_file:250124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200004kB dirty:1700kB writeback:0kB shmem:192712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14176kB pagetables:7372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1150.501297][T15422] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1150.501418][T15422] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.501574][T15422] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 1150.501871][T15422] Node 0 DMA32 free:776424kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:221760kB inactive_anon:0kB active_file:9352kB inactive_file:250124kB unevictable:0kB writepending:1700kB zspages:0kB present:3129332kB managed:2510956kB mlocked:0kB bounce:0kB free_pcp:79036kB local_pcp:35444kB free_cma:0kB [ 1150.502113][T15422] lowmem_reserve[]: 0 0 0 0 0 [ 1150.502393][T15422] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.502574][T15422] lowmem_reserve[]: 0 0 0 0 0 [ 1150.502844][T15422] Node 1 Normal free:3946332kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.503002][T15422] lowmem_reserve[]: 0 0 0 0 0 [ 1150.503281][T15422] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1150.503988][T15422] Node 0 DMA32: 1084*4kB (UM) 439*8kB (UE) 104*16kB (UM) 93*32kB (UE) 33*64kB (UME) 151*128kB (UME) 50*256kB (UME) 25*512kB (UME) 12*1024kB (ME) 4*2048kB (UM) 170*4096kB (UM) = 776328kB [ 1150.505002][T15422] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1150.505560][T15422] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 6*16kB (UM) 11*32kB (UM) 10*64kB (UM) 2*128kB (U) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 3*2048kB (UM) 961*4096kB (UM) = 3946332kB [ 1150.506715][T15422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.506756][T15422] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1150.506821][T15422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.506883][T15422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1150.506944][T15422] 113095 total pagecache pages [ 1150.507016][T15422] 0 pages in swap cache [ 1150.507107][T15422] Free swap = 124996kB [ 1150.507159][T15422] Total swap = 124996kB [ 1150.507203][T15422] 2097051 pages RAM [ 1150.507279][T15422] 0 pages HighMem/MovableOnly [ 1150.507332][T15422] 437680 pages reserved [ 1150.507375][T15422] 0 pages cma reserved [ 1150.894319][ T5635] Bluetooth: hci0: command tx timeout [ 1153.564046][ T5635] Bluetooth: hci0: command tx timeout [ 1156.429856][ T5635] Bluetooth: hci0: command tx timeout [ 1158.469827][ T5635] Bluetooth: hci0: command tx timeout [ 1158.663205][T13339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1158.680377][T13339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1158.682130][T13339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1158.707527][T13339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1158.708400][T13339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1159.036789][ T6585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.189223][T15461] overlayfs: failed to clone upperpath [ 1160.769592][T13339] Bluetooth: hci3: command tx timeout [ 1162.897868][T13339] Bluetooth: hci3: command tx timeout [ 1163.196990][ T6585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.483321][T15399] rxe_eth0 speed is unknown, defaulting to 1000 [ 1163.772001][T10381] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1163.896499][ T6585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.015957][T10381] usb 2-1: Using ep0 maxpacket: 8 [ 1164.076419][T10381] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1164.179653][T10381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.269432][T10381] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1164.269519][T10381] pvrusb2: ********** [ 1164.269562][T10381] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1164.269607][T10381] pvrusb2: Important functionality might not be entirely working. [ 1164.269626][T10381] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1164.269677][T10381] pvrusb2: ********** [ 1164.651792][ T6585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.697350][ T2356] pvrusb2: Invalid write control endpoint [ 1164.798113][ T5861] usb 2-1: USB disconnect, device number 7 [ 1164.952402][ T5635] Bluetooth: hci3: command tx timeout [ 1165.402759][T15444] rxe_eth0 speed is unknown, defaulting to 1000 [ 1165.528029][T15399] lo speed is unknown, defaulting to 1000 [ 1166.444046][T15399] lo speed is unknown, defaulting to 1000 [ 1166.552084][T10381] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1166.711082][ T2356] pvrusb2: Invalid write control endpoint [ 1166.711175][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1166.711217][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1166.711232][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1166.711273][ T2356] pvrusb2: Device being rendered inoperable [ 1166.819093][T10381] usb 8-1: Using ep0 maxpacket: 8 [ 1166.858009][T10381] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1167.023954][T13339] Bluetooth: hci3: command tx timeout [ 1167.821067][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1167.821361][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1167.831768][ T2356] pvrusb2: Attached sub-driver cx25840 [ 1167.831825][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1167.831847][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1168.019496][T10381] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.019681][T10381] usb 8-1: Product: syz [ 1168.019769][T10381] usb 8-1: Manufacturer: syz [ 1168.019843][T10381] usb 8-1: SerialNumber: syz [ 1168.029444][T10381] usb 8-1: config 0 descriptor?? [ 1168.924832][T13339] Bluetooth: hci5: command 0x0406 tx timeout [ 1169.272852][T10381] usb 8-1: can't set config #0, error -71 [ 1169.276198][T10381] usb 8-1: USB disconnect, device number 2 [ 1171.592575][T15444] lo speed is unknown, defaulting to 1000 [ 1171.641348][ T6585] bridge_slave_1: left allmulticast mode [ 1171.641405][ T6585] bridge_slave_1: left promiscuous mode [ 1171.641627][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.768974][ T6585] bridge_slave_0: left allmulticast mode [ 1172.769023][ T6585] bridge_slave_0: left promiscuous mode [ 1172.769303][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.386952][T15551] Device name not specified. [ 1177.386952][T15551] [ 1178.553245][ T6585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.731234][ T6585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.751837][ T6585] bond0 (unregistering): Released all slaves [ 1180.047375][T15444] lo speed is unknown, defaulting to 1000 [ 1180.311262][ T5279] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1182.346230][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.346326][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.817535][T15399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.845165][T15399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.845450][T15399] bridge_slave_0: entered allmulticast mode [ 1182.872776][T15399] bridge_slave_0: entered promiscuous mode [ 1182.932011][T15399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.932131][T15399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.932313][T15399] bridge_slave_1: entered allmulticast mode [ 1182.934368][T15399] bridge_slave_1: entered promiscuous mode [ 1188.903769][T15399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.008171][T15399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.311535][T15399] team0: Port device team_slave_0 added [ 1189.399899][T15399] team0: Port device team_slave_1 added [ 1189.975561][T15399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.975590][T15399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.975689][T15399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.041458][T15399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.041486][T15399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.041612][T15399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.802112][ T6585] hsr_slave_0: left promiscuous mode [ 1190.856065][ T6585] hsr_slave_1: left promiscuous mode [ 1190.857406][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.857492][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.858647][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.858677][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.910353][ T6585] veth1_macvtap: left promiscuous mode [ 1190.910448][ T6585] veth0_macvtap: left promiscuous mode [ 1190.910589][ T6585] veth1_vlan: left promiscuous mode [ 1190.910777][ T6585] veth0_vlan: left promiscuous mode [ 1195.279375][ T6585] team0 (unregistering): Port device team_slave_1 removed [ 1195.347246][ T6585] team0 (unregistering): Port device team_slave_0 removed [ 1195.954056][T15629] syzkaller0: entered promiscuous mode [ 1195.954095][T15629] syzkaller0: entered allmulticast mode [ 1196.339175][T15670] No such timeout policy "syz1" [ 1197.249872][T15399] hsr_slave_0: entered promiscuous mode [ 1197.251467][T15399] hsr_slave_1: entered promiscuous mode [ 1197.252388][T15399] debugfs: 'hsr0' already exists in 'hsr' [ 1197.252427][T15399] Cannot create hsr debugfs directory [ 1198.335732][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 1201.613524][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 1201.613561][ T31] audit: type=1400 audit(1792507725.418:778): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=15703 comm="syz.7.2286" name="p" offset=58 [ 1201.736712][T15707] loop7: detected capacity change from 0 to 32768 [ 1201.852079][T15707] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1201.989284][T15444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.989520][T15444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.989760][T15444] bridge_slave_0: entered allmulticast mode [ 1202.011921][T15444] bridge_slave_0: entered promiscuous mode [ 1202.066434][T15707] XFS (loop7): Ending clean mount [ 1202.123367][T15444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.123647][T15444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.123823][T15444] bridge_slave_1: entered allmulticast mode [ 1202.140515][T15444] bridge_slave_1: entered promiscuous mode [ 1202.424213][T15444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.433205][T12184] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1202.525315][T15444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.691698][T15444] team0: Port device team_slave_0 added [ 1202.695901][T15444] team0: Port device team_slave_1 added [ 1203.394638][ T6585] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.531013][T15444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.531045][T15444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.531095][T15444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.533703][T15444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.533729][T15444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.533778][T15444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.811168][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1207.819666][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1207.821856][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1207.824986][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1207.830068][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1210.049826][ T5631] Bluetooth: hci6: command tx timeout [ 1210.528156][ T6585] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.891356][T15444] hsr_slave_0: entered promiscuous mode [ 1210.907469][T15444] hsr_slave_1: entered promiscuous mode [ 1210.932911][T15444] debugfs: 'hsr0' already exists in 'hsr' [ 1210.932939][T15444] Cannot create hsr debugfs directory [ 1211.980952][T15798] overlayfs: failed to clone upperpath [ 1212.376473][ T5631] Bluetooth: hci6: command tx timeout [ 1214.396867][ T5631] Bluetooth: hci6: command tx timeout [ 1215.754610][ T6585] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.467708][ T5631] Bluetooth: hci6: command tx timeout [ 1216.520230][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1216.545188][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1216.574807][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1216.646251][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1216.662047][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1216.751040][ T6585] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.883710][ T5279] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1219.550398][ T5635] Bluetooth: hci7: command tx timeout [ 1220.741806][T15766] rxe_eth0 speed is unknown, defaulting to 1000 [ 1221.448167][ T6585] bridge_slave_1: left allmulticast mode [ 1221.448210][ T6585] bridge_slave_1: left promiscuous mode [ 1221.448530][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.521104][T15885] loop7: detected capacity change from 0 to 512 [ 1221.596019][ T5631] Bluetooth: hci7: command tx timeout [ 1221.632799][ T6585] bridge_slave_0: left allmulticast mode [ 1221.632848][ T6585] bridge_slave_0: left promiscuous mode [ 1221.633138][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.210619][T15885] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1223.211317][T15885] EXT4-fs error (device loop7) in ext4_process_orphan:346: Out of memory [ 1223.211362][T15885] loop7: lost filesystem error report for type 5 error -12 [ 1223.212540][T15885] EXT4-fs (loop7): 1 truncate cleaned up [ 1223.292896][T15885] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1223.659726][ T5631] Bluetooth: hci7: command tx timeout [ 1226.232282][ T5631] Bluetooth: hci7: command tx timeout [ 1226.827421][T15899] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1226.850105][T15899] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:486: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1226.919177][T12184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.844209][ T6585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.862556][ T6585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.865527][ T6585] bond0 (unregistering): Released all slaves [ 1227.975873][T15766] lo speed is unknown, defaulting to 1000 [ 1228.187655][T15766] lo speed is unknown, defaulting to 1000 [ 1228.261891][T15834] rxe_eth0 speed is unknown, defaulting to 1000 [ 1230.367422][T15834] lo speed is unknown, defaulting to 1000 [ 1230.375728][T15834] lo speed is unknown, defaulting to 1000 [ 1234.424980][T15970] [ 1234.427381][T15970] ====================================================== [ 1234.434537][T15970] WARNING: possible circular locking dependency detected [ 1234.441582][T15970] syzkaller #0 Tainted: G L [ 1234.448615][T15970] ------------------------------------------------------ [ 1234.455749][T15970] syz.1.2331/15970 is trying to acquire lock: [ 1234.461825][T15970] ffffffff91404be8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_ba_source_id_store+0xdb/0x430 [ 1234.473535][T15970] [ 1234.473535][T15970] but task is already holding lock: [ 1234.480908][T15970] ffff88802d6a9270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1234.490403][T15970] [ 1234.490403][T15970] which lock already depends on the new lock. [ 1234.490403][T15970] [ 1234.500822][T15970] [ 1234.500822][T15970] the existing dependency chain (in reverse order) is: [ 1234.509864][T15970] [ 1234.509864][T15970] -> #4 (&p->frag_sem){++++}-{4:4}: [ 1234.517393][T15970] lock_acquire+0x1d1/0x380 [ 1234.522473][T15970] down_write_killable+0x93/0x240 [ 1234.528064][T15970] configfs_rmdir+0x3fa/0x950 [ 1234.533385][T15970] vfs_rmdir+0x328/0x8a0 [ 1234.538264][T15970] filename_rmdir+0x31a/0x5c0 [ 1234.543512][T15970] __x64_sys_unlinkat+0xf5/0x130 [ 1234.549016][T15970] do_syscall_64+0x123/0x790 [ 1234.554157][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.560609][T15970] [ 1234.560609][T15970] -> #3 (&sb->s_type->i_mutex_key#34){++++}-{4:4}: [ 1234.569481][T15970] lock_acquire+0x1d1/0x380 [ 1234.574547][T15970] down_write+0x8b/0x1f0 [ 1234.579353][T15970] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1234.585801][T15970] usbg_make_tpg+0x251/0x610 [ 1234.591022][T15970] target_fabric_make_tpg+0xab/0x8c0 [ 1234.597040][T15970] configfs_mkdir+0x525/0xd40 [ 1234.602289][T15970] vfs_mkdir+0x364/0x850 [ 1234.607114][T15970] filename_mkdirat+0x48b/0x5e0 [ 1234.612536][T15970] __x64_sys_mkdirat+0x89/0xc0 [ 1234.617865][T15970] do_syscall_64+0x123/0x790 [ 1234.623006][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.629450][T15970] [ 1234.629450][T15970] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 1234.637404][T15970] lock_acquire+0x1d1/0x380 [ 1234.642464][T15970] __mutex_lock+0x1a4/0x1c20 [ 1234.647608][T15970] tcm_alloc_inst+0x5f/0x1e0 [ 1234.652754][T15970] try_get_usb_function_instance+0x136/0x1f0 [ 1234.659367][T15970] usb_get_function_instance+0x16/0x70 [ 1234.665364][T15970] function_make+0x18c/0x3f0 [ 1234.670613][T15970] configfs_mkdir+0x525/0xd40 [ 1234.675856][T15970] vfs_mkdir+0x364/0x850 [ 1234.680662][T15970] filename_mkdirat+0x48b/0x5e0 [ 1234.686058][T15970] __x64_sys_mkdirat+0x89/0xc0 [ 1234.691364][T15970] do_syscall_64+0x123/0x790 [ 1234.696566][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.702994][T15970] [ 1234.702994][T15970] -> #1 (func_lock){+.+.}-{4:4}: [ 1234.710291][T15970] lock_acquire+0x1d1/0x380 [ 1234.715338][T15970] __mutex_lock+0x1a4/0x1c20 [ 1234.720464][T15970] try_get_usb_function_instance+0x26/0x1f0 [ 1234.726934][T15970] usb_get_function_instance+0x16/0x70 [ 1234.732992][T15970] function_make+0x18c/0x3f0 [ 1234.738148][T15970] configfs_mkdir+0x525/0xd40 [ 1234.743376][T15970] vfs_mkdir+0x364/0x850 [ 1234.748194][T15970] filename_mkdirat+0x48b/0x5e0 [ 1234.753599][T15970] __x64_sys_mkdirat+0x89/0xc0 [ 1234.758916][T15970] do_syscall_64+0x123/0x790 [ 1234.764064][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.770512][T15970] [ 1234.770512][T15970] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1234.778830][T15970] check_prev_add+0xeb/0xe60 [ 1234.783997][T15970] __lock_acquire+0x1528/0x1f40 [ 1234.789404][T15970] lock_acquire+0x1d1/0x380 [ 1234.794460][T15970] __mutex_lock+0x1a4/0x1c20 [ 1234.799618][T15970] uvcg_extension_ba_source_id_store+0xdb/0x430 [ 1234.806485][T15970] configfs_write_iter+0x302/0x4e0 [ 1234.812167][T15970] vfs_write+0x6af/0x1050 [ 1234.817140][T15970] ksys_write+0x12a/0x250 [ 1234.822022][T15970] do_syscall_64+0x123/0x790 [ 1234.827180][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.833645][T15970] [ 1234.833645][T15970] other info that might help us debug this: [ 1234.833645][T15970] [ 1234.843898][T15970] Chain exists of: [ 1234.843898][T15970] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#34 --> &p->frag_sem [ 1234.843898][T15970] [ 1234.858410][T15970] Possible unsafe locking scenario: [ 1234.858410][T15970] [ 1234.865877][T15970] CPU0 CPU1 [ 1234.871249][T15970] ---- ---- [ 1234.876625][T15970] rlock(&p->frag_sem); [ 1234.880902][T15970] lock(&sb->s_type->i_mutex_key#34); [ 1234.888942][T15970] lock(&p->frag_sem); [ 1234.895651][T15970] lock(gadget_subsys.su_mutex); [ 1234.900716][T15970] [ 1234.900716][T15970] *** DEADLOCK *** [ 1234.900716][T15970] [ 1234.908869][T15970] locks held by syz.1.2331/15970: 4, last CPU#0: [ 1234.915378][T15970] #0: ffff88807b9d5eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1234.924560][T15970] #1: ffff88801f77c460 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1234.933725][T15970] #2: ffff888069e5de80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1234.943688][T15970] #3: ffff88802d6a9270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1234.953669][T15970] [ 1234.953669][T15970] stack backtrace: [ 1234.959601][T15970] CPU: 0 UID: 0 PID: 15970 Comm: syz.1.2331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.970589][T15970] Tainted: [L]=SOFTLOCKUP [ 1234.974925][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1234.984998][T15970] Call Trace: [ 1234.988290][T15970] [ 1234.991230][T15970] dump_stack_lvl+0x100/0x190 [ 1234.995952][T15970] print_circular_bug.cold+0x178/0x1be [ 1235.001570][T15970] check_noncircular+0x146/0x160 [ 1235.006546][T15970] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1235.012284][T15970] check_prev_add+0xeb/0xe60 [ 1235.016930][T15970] __lock_acquire+0x1528/0x1f40 [ 1235.021826][T15970] ? __pfx_stack_trace_save+0x10/0x10 [ 1235.027328][T15970] lock_acquire+0x1d1/0x380 [ 1235.031861][T15970] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 1235.038376][T15970] ? __pfx___might_resched+0x10/0x10 [ 1235.043724][T15970] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1235.049484][T15970] ? __lock_acquire+0x5c0/0x1f40 [ 1235.054498][T15970] __mutex_lock+0x1a4/0x1c20 [ 1235.059311][T15970] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 1235.065798][T15970] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 1235.072272][T15970] ? __pfx___mutex_lock+0x10/0x10 [ 1235.077326][T15970] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1235.083000][T15970] ? find_held_lock+0x2b/0x80 [ 1235.087731][T15970] ? __might_fault+0xc5/0x140 [ 1235.092467][T15970] ? __might_fault+0xc5/0x140 [ 1235.097187][T15970] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1235.102914][T15970] ? lock_acquire+0x1d1/0x380 [ 1235.107630][T15970] ? configfs_write_iter+0x218/0x4e0 [ 1235.112990][T15970] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1235.118700][T15970] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 1235.125203][T15970] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1235.130884][T15970] uvcg_extension_ba_source_id_store+0xdb/0x430 [ 1235.137205][T15970] ? __pfx_uvcg_extension_ba_source_id_store+0x10/0x10 [ 1235.144106][T15970] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1235.149718][T15970] ? configfs_write_iter+0x388/0x4e0 [ 1235.155063][T15970] configfs_write_iter+0x302/0x4e0 [ 1235.160293][T15970] vfs_write+0x6af/0x1050 [ 1235.164796][T15970] ? __pfx_configfs_write_iter+0x10/0x10 [ 1235.170508][T15970] ? __pfx_vfs_write+0x10/0x10 [ 1235.175327][T15970] ? find_held_lock+0x2b/0x80 [ 1235.180074][T15970] ksys_write+0x12a/0x250 [ 1235.184433][T15970] ? __pfx_ksys_write+0x10/0x10 [ 1235.189325][T15970] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1235.195023][T15970] do_syscall_64+0x123/0x790 [ 1235.199653][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.205583][T15970] RIP: 0033:0x7f38c179f559 [ 1235.210025][T15970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.229765][T15970] RSP: 002b:00007f38c2738028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1235.238222][T15970] RAX: ffffffffffffffda RBX: 00007f38c1a25fa0 RCX: 00007f38c179f559 [ 1235.246220][T15970] RDX: 0000000000000032 RSI: 0000200000000bc0 RDI: 0000000000000006 [ 1235.254217][T15970] RBP: 00007f38c1836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1235.262220][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.270225][T15970] R13: 00007f38c1a26038 R14: 00007f38c1a25fa0 R15: 00007ffcaf7cf188 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1235.278232][T15970] [ 1235.464898][T15766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.465059][T15766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.465269][T15766] bridge_slave_0: entered allmulticast mode [ 1235.471069][T15766] bridge_slave_0: entered promiscuous mode [ 1235.856436][ T6585] hsr_slave_0: left promiscuous mode [ 1235.891958][ T6585] hsr_slave_1: left promiscuous mode [ 1235.892912][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1235.892944][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.947467][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1235.947501][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.231177][ T6585] veth1_macvtap: left promiscuous mode [ 1236.231242][ T6585] veth0_macvtap: left promiscuous mode [ 1236.231336][ T6585] veth1_vlan: left promiscuous mode [ 1236.231408][ T6585] veth0_vlan: left promiscuous mode [ 1237.091289][ T6585] team0 (unregistering): Port device team_slave_1 removed [ 1237.129974][ T6585] team0 (unregistering): Port device team_slave_0 removed [ 1238.418477][ T6585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.555011][ T6585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.733360][ T6585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.816160][ T6585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.073262][ T6585] bridge_slave_0: left allmulticast mode [ 1239.073323][ T6585] bridge_slave_0: left promiscuous mode [ 1239.073877][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.107136][ T6585] bridge_slave_1: left allmulticast mode [ 1239.107212][ T6585] bridge_slave_1: left promiscuous mode [ 1239.107841][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.133742][ T6585] bridge_slave_0: left allmulticast mode [ 1239.133779][ T6585] bridge_slave_0: left promiscuous mode [ 1239.133963][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.158912][ T6585] bridge_slave_1: left allmulticast mode [ 1239.159022][ T6585] bridge_slave_1: left promiscuous mode [ 1239.162223][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.203060][ T6585] bridge_slave_0: left allmulticast mode [ 1239.203189][ T6585] bridge_slave_0: left promiscuous mode [ 1239.203646][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.232975][ T6585] bridge_slave_1: left allmulticast mode [ 1239.233108][ T6585] bridge_slave_1: left promiscuous mode [ 1239.233656][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.254373][ T6585] bridge_slave_0: left allmulticast mode [ 1239.254408][ T6585] bridge_slave_0: left promiscuous mode [ 1239.254589][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.468473][ T6585] bond0 (unregistering): Released all slaves [ 1239.545649][ T6585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.548127][ T6585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.572955][ T6585] bond0 (unregistering): Released all slaves [ 1239.629131][ T6585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.651955][ T6585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.653175][ T6585] bond0 (unregistering): Released all slaves [ 1239.709280][ T6585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.729784][ T6585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.731422][ T6585] bond0 (unregistering): Released all slaves [ 1241.436858][ T6585] hsr_slave_0: left promiscuous mode [ 1241.437542][ T6585] hsr_slave_1: left promiscuous mode [ 1241.438292][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.438320][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.441763][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.441804][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.487642][ T6585] hsr_slave_0: left promiscuous mode [ 1241.494829][ T6585] hsr_slave_1: left promiscuous mode [ 1241.497115][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.499121][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.516843][ T6585] hsr_slave_0: left promiscuous mode [ 1241.530577][ T6585] hsr_slave_1: left promiscuous mode [ 1241.533450][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.537622][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.561282][ T6585] veth1_macvtap: left promiscuous mode [ 1241.561335][ T6585] veth0_macvtap: left promiscuous mode [ 1241.561440][ T6585] veth1_vlan: left promiscuous mode [ 1241.561512][ T6585] veth0_vlan: left promiscuous mode [ 1241.957822][ T6585] team0 (unregistering): Port device team_slave_1 removed [ 1241.973053][ T6585] team0 (unregistering): Port device team_slave_0 removed [ 1242.176032][ T6585] team0 (unregistering): Port device team_slave_1 removed [ 1242.190996][ T6585] team0 (unregistering): Port device team_slave_0 removed [ 1242.316802][ T6585] team0 (unregistering): Port device team_slave_1 removed [ 1242.331637][ T6585] team0 (unregistering): Port device team_slave_0 removed [ 1243.448256][ T6585] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.448452][ T6585] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.493827][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.493996][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.529345][ T6585] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.531108][ T6585] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.619249][ T6585] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.626720][ T6585] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.740248][ T6585] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.740424][ T6585] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.069595][ T6585] bridge_slave_1: left allmulticast mode [ 1244.069639][ T6585] bridge_slave_1: left promiscuous mode [ 1244.069977][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.075908][ T6585] bridge_slave_0: left allmulticast mode [ 1244.075946][ T6585] bridge_slave_0: left promiscuous mode [ 1244.076151][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.325224][ T6585] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1244.384159][ T6585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.386761][ T6585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.390090][ T6585] bond0 (unregistering): Released all slaves [ 1244.407202][ T6585] bond1 (unregistering): Released all slaves