last executing test programs: 21m3.420766877s ago: executing program 32 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c9000147ac"], 0xf) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) dup3(r0, r0, 0x80000) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f0000000180)={[{@grpquota}, {@delalloc}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f0000000a00), &(0x7f0000000a40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000000ac0)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16m13.628017733s ago: executing program 4 (id=1393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000ae054f04a3a9cf000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x3c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 16m13.453831011s ago: executing program 4 (id=1394): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f00000002c0)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[], 0x6, 0x22a, &(0x7f0000000340)="$eJzsmL9rFEEUx79vbm+9FRFtUthYGDCiucvtoaQ5NIJgJULir0oPs4aYS04uK5iAmGBjo52FkMbCf8AihZWFnf+AoIUKgoVXWNjYjMzO3N7k5s49l+t8n2L4zsybH+/tm1csGIb5b/n65dfnp+dnF04BOIBJ7DPj3wsAkda01bP/9OL+yef1CzuvP756t3bw4Zv+/dQSKfcOlP5yvgfg7VwBcdIT9urfSkyazgJEqq9A4ITR10AoG30LAleNjkC4YfRdS7eUfbl8Z7kZlW+3motKzKimqppQNbX++3W2CYumL6WUZM2vb2yuNJrNqG0Jz8wNmMol0sNWJpz4FeGjMydQt+6nonj9yeNt1e/GZsaKXxUCVeNEDYR5Mz6LnW5sdEgs/494vf0Ljv8DvCWTDECWkyUt6j/HEixbHJ7Ot3xKuXPOnTqEPNfA3lVF9KZUJIcuH5Ze/5Y6ifCyc/Gs+aA5zrrU74V8NPgBPAsAjP0ruyKXF10x0aH37tQ3LcTQfJaUfQSNnj+lUe/cfYj5IxYEyq90xBvTtwA+7Or6IV8Sjlv1ybPqRyVevVdZ39icXl5tLEVL0VoY1s4QsHU6rCSFSLdO3evV5yCpT/sRpPsXh9j6wseDRhy3q7r1yUeAOG6HST+0ns38buvHTbMsxkUAx3RHlTQ/3bHgnEG+thGJrVJTrhHDMAzDMAzDMAzDMAzDMEwujoKSv6AZhJcT6z8BAAD//zMwWZY=") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x80000, 0x40) write$P9_RGETLOCK(r3, 0x0, 0xffffff6a) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0x7, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000780), 0x0}, 0x20) 16m10.322692704s ago: executing program 4 (id=1403): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0x4dd49c4f, 0x1}, 0x0) 16m9.216195078s ago: executing program 4 (id=1405): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x200008, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRESDEC=r1], 0x2, 0x395, &(0x7f0000000300)="$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") socket$l2tp6(0xa, 0x2, 0x73) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8080, 0x83) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20040040) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0x1ffffff, 0xa1e}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x0, 0x0) mknod(&(0x7f0000000880)='./proc/net/ipt_hashlimit/lo\x00', 0x800, 0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0xb, 0x2}, {0x7, 0xc}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16m8.050343378s ago: executing program 4 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x9}}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x4, 0x6, 0x5, 0xd3e0, 0x9, 0x3, 0xa31, 0x6cc4, 0x6, 0x4a42, 0x6, 0x8, 0xae7, 0x5, 0x40, 0xfffff000, 0xfffffffb, 0x71d, 0x7fffffff, 0x5, 0x6, 0xc, 0xa, 0x4, 0xe9, 0x8, 0x5, 0x9, 0x4, 0xb, 0x2, 0x5, 0x7, 0x8001, 0x5, 0x6, 0x5, 0x8, 0x5, 0x1, 0x0, 0x23, 0xb, 0x100, 0xb2f, 0x1, 0x0, 0xfef, 0x3, 0x401, 0x44f5, 0x4, 0x0, 0x7, 0xc8, 0x69e9, 0x9, 0x2003, 0x10001, 0xff, 0x1ff, 0x2, 0x83, 0xe, 0xa, 0x80000000, 0x2, 0x9, 0x92e, 0x0, 0x88, 0xc8d5, 0x3, 0xf5b70000, 0x4258, 0x7fda2ac2, 0x4, 0xe, 0x4, 0x3, 0x8000, 0x8, 0xdaf, 0x9, 0x5, 0x0, 0x1, 0xff, 0x1, 0x7, 0x7, 0x8, 0x1, 0x3ff, 0x2a, 0x9, 0x0, 0x8000, 0x40, 0xffffff00, 0x609, 0x0, 0x9, 0x0, 0x2, 0x80000000, 0x44, 0x9, 0x5, 0xffffffff, 0x200, 0x717f7661, 0x10001, 0x9, 0x3, 0x3, 0x53f5, 0x80, 0xf9, 0xd5, 0x0, 0x5, 0x8, 0x7, 0x99800000, 0x4, 0x7, 0xeb3, 0x1, 0x7ff, 0x4, 0x7, 0xfffffffc, 0x80, 0xfffffffa, 0x6, 0xfffffbab, 0x1, 0xa0, 0x8, 0x2, 0x110, 0x5, 0x4, 0x3, 0x3, 0x11e5, 0x51cab4bf, 0x101, 0x6, 0xd, 0x0, 0x0, 0x10001, 0x7, 0x6, 0x8ff, 0xffffffff, 0x5, 0x2, 0x1, 0x5, 0x4, 0x5, 0x6, 0x2, 0xffff, 0xffff, 0x1, 0x3, 0x8000, 0x8, 0x0, 0x2, 0x7, 0xfffffff8, 0x80, 0x6, 0xc4, 0x7, 0x6, 0xb44, 0x0, 0x8, 0x6, 0xffffffff, 0x5, 0x8, 0x7, 0x81, 0x4, 0x86a, 0x6, 0x2, 0x1, 0x4, 0x2, 0x4a0, 0x200, 0x6, 0x1, 0xfffffeff, 0xffffff01, 0x7, 0x5, 0x2, 0x2, 0xffff, 0x7, 0x2, 0x2, 0x7, 0x7f, 0x9, 0x11f, 0x5, 0x40101, 0x2, 0xb, 0xfda, 0x6bdce7d2, 0x9, 0x8, 0x7, 0xffffffff, 0x0, 0x1, 0x401, 0x6, 0x0, 0x10000, 0xf, 0x8, 0x2, 0x9971f3d4, 0x8, 0x8, 0x6, 0x31d, 0x9, 0x101, 0x80, 0x9, 0xa6, 0x5, 0x7, 0x7, 0x400, 0x2, 0x8, 0x7, 0x80000001, 0x400, 0x6, 0x400]}]}}]}, 0x45c}}, 0x0) 16m6.818329325s ago: executing program 4 (id=1413): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x400102, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x5]}, {0x0, 0x200, 0xd, 0x100000001}}, 0x1ff, &(0x7f0000000200), &(0x7f0000000240)=0x3}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x2004c080) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd27, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}}, 0xc084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 16m6.469103271s ago: executing program 33 (id=1413): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x400102, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x5]}, {0x0, 0x200, 0xd, 0x100000001}}, 0x1ff, &(0x7f0000000200), &(0x7f0000000240)=0x3}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x2004c080) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd27, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}}, 0xc084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 13m39.838508717s ago: executing program 6 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 13m38.645410281s ago: executing program 6 (id=1849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8000) 13m38.361123399s ago: executing program 6 (id=1852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x1) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 13m37.271432612s ago: executing program 6 (id=1855): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x808b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f000001df80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f000001dfc0), &(0x7f000001e000)='./file0\x00', 0x0, &(0x7f000001e040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) 13m35.692314595s ago: executing program 6 (id=1859): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000002c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000340), 0x4) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000600)="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", 0x3f1}, {&(0x7f0000000a00)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 13m34.400796638s ago: executing program 6 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 13m33.761154094s ago: executing program 34 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 11m26.231744s ago: executing program 0 (id=2179): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe0000000073130000000000009c000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), 0xfffffffffffffd00}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket(0x10, 0x3, 0x0) 11m24.29916469s ago: executing program 0 (id=2184): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) accept4(r1, 0x0, 0x0, 0x800) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 11m20.682096723s ago: executing program 0 (id=2195): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001440), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001480), 0x100, 0x0) socket(0x2, 0x80805, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r0], 0x50) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r1], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) 11m19.561494289s ago: executing program 0 (id=2199): syz_io_uring_setup(0x3274, &(0x7f0000000400)={0x0, 0x597f, 0x8, 0xffffffff, 0x38c}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r3, r2, 0x0, 0x7ffff000) syz_io_uring_submit(r0, r1, 0x0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) stat(&(0x7f000002b280)='./tracing\x00', &(0x7f000002b2c0)) 11m16.379279548s ago: executing program 0 (id=2207): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 11m15.368583412s ago: executing program 0 (id=2208): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, 0x0) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x40000004, 0xfffffe5b) 10m59.439443766s ago: executing program 35 (id=2208): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, 0x0) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x40000004, 0xfffffe5b) 4m36.275782876s ago: executing program 2 (id=3097): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) syz_mount_image$erofs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x2800091, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000001780)='./file2\x00', 0x80000, 0x82) 4m31.936361824s ago: executing program 2 (id=3112): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000c40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000640)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000840)}) 4m30.191880684s ago: executing program 2 (id=3114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) getxattr(&(0x7f0000000080)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000780)=""/32, 0x20) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 4m25.663851862s ago: executing program 2 (id=3127): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x341488, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) 4m23.327710583s ago: executing program 2 (id=3136): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getrlimit(0x4, &(0x7f0000000280)) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) write$cgroup_pid(r4, &(0x7f0000000340), 0xb375) 4m21.910529509s ago: executing program 2 (id=3140): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r0, 0x0, &(0x7f0000000340)) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x500, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 4m6.556380014s ago: executing program 36 (id=3140): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r0, 0x0, &(0x7f0000000340)) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x500, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 3m7.528728279s ago: executing program 9 (id=3307): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x341488, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) 3m4.328320189s ago: executing program 9 (id=3313): r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x3, 0x65, 0x36, 0x31, 0x35, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000540)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x33]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x25}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x62, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x35]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x36, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233446366778899aabbccddeeff00112233445566eeff00112233445503000000aa91cc7b90e55b668fd3b900", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000c40), &(0x7f0000000c80)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x64, 0x34, 0x30, 0x0, 0x30, 0x30, 0x30, 0x0, 0x36, 0x30, 0x39]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000dc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000e40), &(0x7f0000000e80)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @desc3}, &(0x7f0000001040)={0x0, "8da9228b70f5e6364d9e890e965856b44a40b2f60b3369b072bbeee73dad803f0f2468e111054ba8f05f1032c983cd0f111f053b30941b0fcdc58905767c0cb5", 0x1c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc1}, &(0x7f0000001140)={0x0, "0011227b00f73d778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233eeff00", 0x2d}, 0x48, r0) add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @auto=[0x38, 0x61, 0x30, 0x32, 0x1, 0x65, 0x32, 0x66, 0x33, 0x64, 0x66, 0x39, 0x32, 0x7, 0x62, 0x37]}, &(0x7f00000012c0)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f1de80700", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001340), &(0x7f0000001380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f00000013c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 3m4.079256275s ago: executing program 9 (id=3315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) getxattr(&(0x7f0000000080)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000780)=""/32, 0x20) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 3m0.491963545s ago: executing program 9 (id=3324): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x341488, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) 2m58.899828369s ago: executing program 9 (id=3329): syncfs(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) socket(0x2, 0x2, 0x0) 2m57.794500724s ago: executing program 9 (id=3331): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioprio_set$uid(0x3, 0xee00, 0x0) setresuid(0xee01, 0x0, 0x0) 2m42.643744518s ago: executing program 37 (id=3331): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioprio_set$uid(0x3, 0xee00, 0x0) setresuid(0xee01, 0x0, 0x0) 2m22.641100633s ago: executing program 5 (id=3415): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x341488, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) 2m12.772991592s ago: executing program 5 (id=3432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x7, 0x450c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000300)=0x2) 2m8.274956586s ago: executing program 5 (id=3436): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x18020000}], 0x1, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.453547561s ago: executing program 5 (id=3426): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000019c00)=[{{0x0, 0x0, &(0x7f0000019c80)}}], 0x1, 0x20008000) 2m6.69194031s ago: executing program 5 (id=3429): syncfs(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) socket(0x2, 0x2, 0x0) 2m5.33516519s ago: executing program 5 (id=3435): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000300), &(0x7f0000000340)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c) 2m3.448449504s ago: executing program 1 (id=3441): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x18020000}], 0x1, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m2.791860702s ago: executing program 1 (id=3442): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r1, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x800000000f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r2], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 2m1.74309382s ago: executing program 1 (id=3443): openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) fanotify_init(0x4, 0x101000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000580)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8) unshare(0x22020600) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f000001a240)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f000001a280)=0xce, 0x4) sendmsg$inet(r1, &(0x7f000001a340)={0x0, 0x14, &(0x7f000001a380)=[{&(0x7f000001a3c0)=' ', 0x100120}], 0x1}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0xbac9, 0x1}}, @out_dx={0x6a, 0x28, {0x3a15, 0x5, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xa940, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @code={0xa, 0x50, {"0fc769240f01cb440f01ca66baa100b000ee440f56442f06b9d5080000b80a000000ba000000000f30f2416690420f015d56b8010000000f01d9c42230f31b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2400, 0x3, 0x7, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0xdf1d}}, @enable_nested={0x12c, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x0, @arbitrary=0xfffffffffffffff9}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xa7, 0x0, 0x1, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x201f, 0x8001, 0x400, 0x1}}, @uexit={0x0, 0x18, 0x9}, @nested_amd_vmsave={0x183, 0x18, 0x3}], 0x270}) 2m1.420517164s ago: executing program 1 (id=3445): r0 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x37, 0x65, 0x36, 0x31, 0x61, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000c00)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x30, 0x30, 0x6, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x64, 0x32, 0x30, 0x30]}, &(0x7f0000000d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334471ae332a99aabbccddeeff00112233445566778899aabbccddeeff", 0x29}, 0x48, r1) add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @desc2}, &(0x7f0000000e80)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x30, 0x63, 0x30, 0x31, 0x30, 0x37, 0x30, 0x65, 0x35, 0x30, 0x66, 0x30, 0x30, 0x0, 0x31, 0x33]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x63, 0x0, 0x30, 0x33, 0x65, 0x62, 0x61, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x37]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x80000014}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001240)={'fscrypt:', @auto=[0x35, 0x61, 0x66, 0x30, 0x32, 0x30, 0x37, 0x31, 0x62, 0x30, 0x61, 0x30, 0x30, 0x34, 0x0, 0x38]}, &(0x7f0000001280)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x31}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001300), &(0x7f0000001340)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x62, 0x36, 0x30, 0x39]}, &(0x7f0000001380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000001400), &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001480), &(0x7f00000014c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000001500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001580), &(0x7f00000015c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000001600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001680), &(0x7f00000016c0)={'fscrypt:', @desc1}, &(0x7f0000001700)={0x0, "0011227b00f73d778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233eeff00", 0x2d}, 0x48, r1) add_key$keyring(&(0x7f0000001780), &(0x7f00000017c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001800), &(0x7f0000001840)={'fscrypt:', @auto=[0x38, 0x32, 0x30, 0x32, 0x65, 0x65, 0x57, 0x66, 0x32, 0x39, 0x66, 0x39, 0x32, 0x38, 0x62, 0x57]}, &(0x7f0000001880)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001900), &(0x7f0000001940)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65, 0x35, 0x30]}, &(0x7f0000001980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001a00), &(0x7f0000001a40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 2m1.26074184s ago: executing program 1 (id=3447): syncfs(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) socket(0x2, 0x2, 0x0) 2m0.130210187s ago: executing program 1 (id=3449): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x5, 0x2) fcntl$dupfd(r3, 0x406, r3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240)='1', 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0xa7ff, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000003142b0c2bbd7000ffdbdf250900020073797a300000000008004100727865001400330076657468315f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 1m50.298857302s ago: executing program 38 (id=3435): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000300), &(0x7f0000000340)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c) 1m44.303418171s ago: executing program 39 (id=3449): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x5, 0x2) fcntl$dupfd(r3, 0x406, r3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240)='1', 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0xa7ff, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000003142b0c2bbd7000ffdbdf250900020073797a300000000008004100727865001400330076657468315f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 14.219267182s ago: executing program 3 (id=3644): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, 0x0, 0x4000020) readv(r1, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="3202020800000000ff020000000000000000e514ee1c5698"], 0x18) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f00000002c0)=""/43, 0x2b) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x808}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 12.420922687s ago: executing program 3 (id=3648): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000008c0), 0x80) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f0000001000)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") socket$inet(0x2, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000a80), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) readv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = gettid() tkill(r2, 0x21) 10.254580921s ago: executing program 7 (id=3650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r3, 0x1) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 9.164517633s ago: executing program 8 (id=3651): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x209, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40c4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000380)=0xa, 0x1959cc36) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643c4e8d41cdb7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6659f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac1223331f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed80000010000000000e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9f"], &(0x7f0000000f00)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000fc0)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) 8.942245857s ago: executing program 3 (id=3652): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0xfffffffffffffff3) 8.017473162s ago: executing program 8 (id=3653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r3) getxattr(&(0x7f0000000080)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000780)=""/32, 0x20) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 6.767441291s ago: executing program 3 (id=3654): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r1, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x800000000f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008", @ANYRES16=r2], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 6.758507372s ago: executing program 7 (id=3655): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000001c0)={0x9, "c3487e2db7de44791820ae674ffe3bb738d53ba3a7ae92d801f3f38ab694723b21a0ccb05026a5845338a432fef2bed45ef4b28b928fb3352aca7cf24f68852d4414d1687af86a0a674dcfe5cc62a595ce05134e65beeebdb35092e4ee5c88d4bacbec91781ecd37b89b84c3391ed5354edb066b226bcee14e02e413bac1b274393edf81cf9315acafa9907ca0b13025a6e0392694cb59de2771db29adfc2f1a3e1a0b164067dc7d34eadeea1d4f7cbf4befa585778356048ef2fd4082201c2dffbb4b7bd2b0515494badd1929e90fb59ba9b09b099bdda564074ae315f3aebdc660a54f358f3540e4539c23744c881b0103a9ef8a415ce2f9fd44f33db093eece62dc1aca3029c432972fda82c08b5c94e2939b2ee4e60d3e1d0937bb0ed3cc5e48f6cd68ba4df5c65d8d942740fc43dcee65ebd6fd1a951633d24034fbdb31ca31fa8abba5f062b422d5290484f1725cca8ee3a1af363ef38a0b79b6e0aa0efab51fae4f23dde743a1a8f0815c572c5fb8e309dbe855453ce3ffe3c46edc21031737eea675816a447b1b844b7b2decce024401abc4d567b21f005331cd0dc06db4b428686e13f5db1330cbe4ed9339e1894ca369892f298081caa90b7fd090cbf92bf6fbbe7c8390960242c9957b5efb4138666c33430ab981e665effec561a56a7c97c0844ec48b917fa6a3c116ee8ef782f911a09ba775f4185e79e02223"}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000940)=0x695d8e8, 0x4) setsockopt$sock_int(r4, 0x1, 0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x4000000) syz_mount_image$ext4(&(0x7f0000000d40)='ext4\x00', &(0x7f0000000d80)='./file1\x00', 0x21081e, &(0x7f0000000dc0)={[{@block_validity}, {@usrquota}, {@nobh}]}, 0x1, 0x526, &(0x7f0000000e00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000001340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001380)={0x4, 0x400000000, 0x3, 0x0, 0x6, 0x4000000008, 0xf, 0xee67, 0xfffffffa}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 6.719671596s ago: executing program 8 (id=3656): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$loop(0x0, 0x9, 0x734336fb4ea5ae85) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, 0x0) syz_emit_ethernet(0xf7, &(0x7f0000000400)={@empty, @random="6913bcca0dde", @void, {@llc_tr={0x11, {@snap={0xaa, 0x1aa, "9e", "70d9db", 0x888e, "e76696422beda136b6305467c3d9d6dcaec489916013e43c4e56821a86fbddd0bac6edc41fc9873e058172f48a4c009a52bd5bc8765494e335028f20dd756df1898ba3fe447507c12c76d5e9e42adc7af3e5316b8d8b4648173f19a12bc928c69684d8ec4bcbca13bad66f157a83d3cf29827bd7c5401f486486358e7a41d047d08a590d99418325f55e19e298896ed0479e65d519f893545e7d6111502c8c1ce27e9575129f787d1a6c5dcbca2c6aa0abf1cae0333ec51f4c55a658ce42ffcd01f58ae5ca26368434ac71e9b0c06826b642208b1622c5b9935827ed6c41274d1f"}}}}}, 0x0) unshare(0x22020400) copy_file_range(0xffffffffffffffff, &(0x7f0000000340)=0x8, 0xffffffffffffffff, 0x0, 0x4, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x2982, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x2000002388b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 6.540023714s ago: executing program 3 (id=3657): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x341488, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) 6.515078577s ago: executing program 7 (id=3658): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) fsopen(&(0x7f0000000800)='hfs\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001001000050000000500000001000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xb) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.591912892s ago: executing program 8 (id=3659): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@block_validity}, {@nodiscard}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}], [{@dont_measure}, {@audit}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000001640)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYRES16, @ANYRESOCT=r3, @ANYBLOB="621df7484119a8e68750f898534ead59a145fc2bc19cd14161f180c7b396b4f054cadc9d2bd2b29be1aaf704ed9a097bf210caa841e3cbe8070c7d0f5f9334e8d8f65079347fbc6584df22ac0d2aef0799facbe7f756499a6f18919e7bae05110f220ff27da11be12487372fae18d309cb104f347edb5c5ce96c644823c609581f70a06ae465aa4b924087d6ddc708fc9ec06e7687f96f018f6acaa5019a18f80db5e9ea409dfa08c1f1a1eee5197423b3b878d8c00dcc484ae3b190690b47ce4a8503d6f1488d17a28fe6", @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r5, @ANYRESDEC=r1], 0x2, 0x576, &(0x7f00000006c0)="$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") syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000680), 0x4) 4.379729228s ago: executing program 8 (id=3660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\n'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20) 3.085731271s ago: executing program 7 (id=3661): setpriority(0x0, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./tracing\x00', &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2800, 0x24) read$FUSE(r4, &(0x7f00000031c0)={0x2020}, 0x2020) 3.072096792s ago: executing program 3 (id=3662): socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000280)='./dev\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0xae6, &(0x7f0000000bc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$igmp(0x2, 0x3, 0x2) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_elf64(r1, 0x0, 0x120) lsetxattr$security_capability(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40), 0x0, 0x0, 0x0) execve(&(0x7f0000001a80)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000480)={[{@errors_remount}, {@usrquota}, {@bh}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0xae2}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {}]}, 0x1, 0x474, &(0x7f0000000740)="$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") r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 2.882828922s ago: executing program 8 (id=3663): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x8, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000380)={0x2, 0xfffa, @remote}, 0x10) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f000002d040)={0x0, 0x0, &(0x7f000002d080)={&(0x7f000002d0c0)={0x10, 0x3f5, 0x4, 0x0, 0x25dfdbfc}, 0x26}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) syz_emit_ethernet(0x44, &(0x7f00000003c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast2}, "00186371ae9b"}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x400, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000770000000500000095000000000000009500a50500ef33516984064785518250a884f5dc107326f06dbd5f1d0af2ea9c38892e68919764b07177ba1205563aa9069027bb5cf324a3e5a7dd96f3bdd4fa05abff1afef25f44ed4eee8e7165da619637c1bcaec3018ea46719f0adb19ab082878ef3e440c1b7ae708ddb211a906ba0455c315ee4b3e8d948df3cbe646fc5ca72632ca88e30546eff630aac600fd8f314f19b1c7c1b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.988935955s ago: executing program 7 (id=3664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x403, r3) getxattr(&(0x7f0000000080)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000780)=""/32, 0x20) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 0s ago: executing program 7 (id=3665): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r1, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x800000000f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008", @ANYRES16=r2], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) kernel console output (not intermixed with test programs): 788.574454][T13230] futex_wake_op: syz.5.2260 tries to shift op by 144; fix this program [ 789.249768][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 789.648417][ C1] net_ratelimit: 31 callbacks suppressed [ 790.347043][T13241] netlink: 'syz.7.2262': attribute type 11 has an invalid length. [ 791.328673][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 791.864919][T13195] chnl_net:caif_netlink_parms(): no params data found [ 792.931977][ T6076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.974809][ T26] audit: type=1326 audit(2000001201.858:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 793.023947][T13281] overlayfs: conflicting lowerdir path [ 793.036043][T13195] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.050588][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.113973][ T26] audit: type=1326 audit(2000001201.858:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 793.190977][T13195] device bridge_slave_0 entered promiscuous mode [ 793.268009][T13195] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.298356][ T26] audit: type=1326 audit(2000001201.858:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a5499f2c2 code=0x7ffc0000 [ 793.364225][ T26] audit: type=1326 audit(2000001201.888:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a5495fd8e code=0x7ffc0000 [ 793.420127][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 793.769481][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.950927][T13195] device bridge_slave_1 entered promiscuous mode [ 794.046737][ T26] audit: type=1326 audit(2000001201.888:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7a5499f387 code=0x7ffc0000 [ 794.208248][ T26] audit: type=1326 audit(2000001201.888:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a5495fd8e code=0x7ffc0000 [ 794.252356][ T26] audit: type=1326 audit(2000001201.888:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7a5495fd8e code=0x7ffc0000 [ 794.276593][ T26] audit: type=1326 audit(2000001201.888:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 794.302249][ T26] audit: type=1326 audit(2000001201.898:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 794.345858][ T26] audit: type=1326 audit(2000001201.898:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13279 comm="syz.3.2279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 794.447838][ T5643] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 794.563413][ T6076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.640065][ T5643] usb 6-1: not running at top speed; connect to a high speed hub [ 794.658566][ T5643] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.692538][ T5643] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 794.728543][T13195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.776631][ T5643] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 794.791051][T13195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.800529][T13295] netlink: 'syz.7.2274': attribute type 39 has an invalid length. [ 794.828240][T13295] net_ratelimit: 27 callbacks suppressed [ 794.867837][ T5643] usb 6-1: Product: syz [ 794.872432][ T5643] usb 6-1: Manufacturer: syz [ 794.903944][ T5643] usb 6-1: Found UVC 1.00 device syz (225a:e1d4) [ 794.987100][ T5643] usb 6-1: No streaming interface found for terminal 2. [ 795.528750][ T5643] usb 6-1: USB disconnect, device number 12 [ 796.589697][ T6076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.754966][T13195] team0: Port device team_slave_0 added [ 798.306399][T13317] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.375433][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 798.375450][ T26] audit: type=1800 audit(2000001207.259:722): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2277" name="bus" dev="ramfs" ino=67181 res=0 errno=0 [ 798.513928][ T6076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.609925][T13195] team0: Port device team_slave_1 added [ 798.739840][T13317] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.947132][ T6078] net_ratelimit: 8 callbacks suppressed [ 799.973064][T13317] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.164644][T13317] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.208442][T13195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.220586][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.313255][T13195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.333606][T13195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.340840][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.369117][T13195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.135241][T13317] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.156821][T13317] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.178475][T13317] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.200721][T13317] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.485347][T13195] device hsr_slave_0 entered promiscuous mode [ 801.653386][T13195] device hsr_slave_1 entered promiscuous mode [ 801.737962][T13195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.745596][T13195] Cannot create hsr debugfs directory [ 803.183463][T13362] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2291'. [ 805.008190][ T4533] net_ratelimit: 14 callbacks suppressed [ 806.886570][T13402] ip_tables: iptables: counters copy to user failed while replacing table [ 807.542444][ T6076] bond1: (slave gretap1): Releasing backup interface [ 808.188879][T13419] tipc: Started in network mode [ 808.207729][T13419] tipc: Node identity 5ec910338ec5, cluster identity 4711 [ 808.256986][T13419] tipc: Enabled bearer , priority 0 [ 808.314372][T13415] device syzkaller0 entered promiscuous mode [ 808.449093][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.455484][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.986586][T13195] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 809.257201][ T4349] tipc: Node number set to 3490451507 [ 809.818891][T13419] tipc: Resetting bearer [ 809.856454][T13413] tipc: Resetting bearer [ 809.940289][T13413] tipc: Disabling bearer [ 810.085083][T13195] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 810.318529][T13195] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 810.366420][ T59] net_ratelimit: 15 callbacks suppressed [ 810.417627][T13430] netlink: 'syz.2.2307': attribute type 39 has an invalid length. [ 811.240869][T13439] mmap: syz.5.2309 (13439): VmData 37523456 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 811.343769][T13195] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 813.067464][ T26] audit: type=1800 audit(2000001221.741:723): pid=13456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2314" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 815.176485][ T6076] bond6 (unregistering): (slave geneve2): Releasing active interface [ 815.489052][T10408] net_ratelimit: 11 callbacks suppressed [ 817.975527][ T6076] bond6 (unregistering): Released all slaves [ 820.604101][ T6076] bond5 (unregistering): Released all slaves [ 820.625344][ T4534] net_ratelimit: 8 callbacks suppressed [ 820.664101][ T6076] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 820.682587][ T6076] device bridge2 left promiscuous mode [ 822.142572][ T6076] bond4 (unregistering): Released all slaves [ 822.265270][ T6076] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 822.286296][ T6076] bond0 (unregistering): Released all slaves [ 822.393727][ T6076] bond3 (unregistering): (slave bridge1): Releasing active interface [ 822.466298][ T6076] bond3 (unregistering): (slave bridge0): Releasing active interface [ 823.056476][ T6076] bond3 (unregistering): Released all slaves [ 823.637526][ T6076] bond1 (unregistering): (slave bond2): Releasing backup interface [ 823.658686][ T6076] bond2 (unregistering): Released all slaves [ 823.715076][ T6076] bond1 (unregistering): Released all slaves [ 825.665009][ C0] net_ratelimit: 10 callbacks suppressed [ 826.563658][ T6076] team0 (unregistering): Port device team_slave_1 removed [ 826.652280][ T6076] team0 (unregistering): Port device team_slave_0 removed [ 826.743716][ T6076] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.829422][ T6076] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.401321][ T6076] .` (unregistering): Released all slaves [ 827.476022][T13467] rxe_eth0 speed is unknown, defaulting to 1000 [ 827.699563][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'. [ 828.017650][T13195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.232137][T13195] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.158412][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 829.176918][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.253570][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 829.311752][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.351516][T10408] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.358720][T10408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.369066][T13545] tipc: Enabling of bearer rejected, already enabled [ 829.398858][T13554] syzkaller0: Caught tx_queue_len zero misconfig [ 829.417332][T13554] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 829.448603][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 829.486003][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 829.554854][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 829.577107][T10408] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.584272][T10408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.656198][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 829.710349][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 829.850236][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 829.863413][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 829.881520][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 829.910512][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 830.608812][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 830.668528][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 831.254988][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 831.274764][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 831.329150][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 831.483529][ T59] net_ratelimit: 14 callbacks suppressed [ 831.641426][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2337'. [ 832.294867][T13195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 836.493799][ C1] net_ratelimit: 9 callbacks suppressed [ 836.570597][T13613] tipc: Enabling of bearer rejected, failed to enable media [ 836.841176][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 836.854611][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 836.889654][T13195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.722216][ C1] net_ratelimit: 11 callbacks suppressed [ 842.871544][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 842.883577][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 842.893135][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 842.902456][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 842.910950][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 842.919313][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 845.030134][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 845.051223][T13671] rxe_eth0 speed is unknown, defaulting to 1000 [ 846.841901][ C1] net_ratelimit: 8 callbacks suppressed [ 847.091671][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 848.718510][T13716] netlink: 'syz.2.2364': attribute type 10 has an invalid length. [ 848.759845][T13716] tipc: Resetting bearer [ 849.162202][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 849.390960][T13716] bond0: (slave team0): Releasing backup interface [ 849.716906][T13716] tipc: Resetting bearer [ 849.812296][T13716] tipc: Disabling bearer [ 850.217605][T13716] team0 (unregistering): Port device bridge0 removed [ 851.023691][T13725] netlink: 'syz.7.2366': attribute type 1 has an invalid length. [ 851.251462][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 851.971293][T13631] net_ratelimit: 15 callbacks suppressed [ 852.109772][ T4279] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 853.342862][T13752] syz.7.2371 (13752) used greatest stack depth: 16864 bytes left [ 854.875803][ T26] audit: type=1326 audit(2000001263.765:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 854.971600][ T26] audit: type=1326 audit(2000001263.795:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 855.063714][ T26] audit: type=1326 audit(2000001263.795:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 855.115815][ T26] audit: type=1326 audit(2000001263.795:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 855.139915][ T26] audit: type=1326 audit(2000001263.805:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 855.139958][ T26] audit: type=1326 audit(2000001263.805:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 855.139997][ T26] audit: type=1326 audit(2000001263.805:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 855.140034][ T26] audit: type=1326 audit(2000001263.805:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 855.140072][ T26] audit: type=1326 audit(2000001263.805:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 855.274178][ T26] audit: type=1326 audit(2000001263.815:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.2.2377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7530f9f559 code=0x7ffc0000 [ 855.375636][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2372'. [ 856.891784][T13796] loop5: detected capacity change from 0 to 2048 [ 856.917033][T13796] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 857.375623][ T4662] net_ratelimit: 7 callbacks suppressed [ 857.618571][T13671] chnl_net:caif_netlink_parms(): no params data found [ 860.304617][T13671] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.321531][T13671] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.330236][T13671] device bridge_slave_0 entered promiscuous mode [ 860.450441][T13671] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.461360][T13671] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.470139][T13671] device bridge_slave_1 entered promiscuous mode [ 860.726739][T13671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.750238][T13671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.975050][T13671] team0: Port device team_slave_0 added [ 860.994745][T13671] team0: Port device team_slave_1 added [ 861.142341][T13671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.149365][T13671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.226800][T13671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.273958][T13671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.287248][T13671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.329531][T13671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.512972][ T4359] device hsr_slave_0 left promiscuous mode [ 861.520269][ T4359] device hsr_slave_1 left promiscuous mode [ 861.530341][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.539067][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.547814][ T4359] device bridge_slave_1 left promiscuous mode [ 861.562119][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.580355][ T4359] device bridge_slave_0 left promiscuous mode [ 861.601668][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.441118][ T4662] net_ratelimit: 12 callbacks suppressed [ 862.743125][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 862.829275][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 862.917768][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.006002][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.612931][ T4359] bond0 (unregistering): Released all slaves [ 863.740517][T13671] device hsr_slave_0 entered promiscuous mode [ 863.756472][T13671] device hsr_slave_1 entered promiscuous mode [ 863.768276][T13671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.776017][T13671] Cannot create hsr debugfs directory [ 864.896626][T13671] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 864.919916][T13671] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 864.947640][T13671] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 864.971898][T13671] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 865.133157][T13671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.157869][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 865.171815][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 865.184870][T13671] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.208736][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 865.218418][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 865.227174][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.234370][ T5674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.245567][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 865.258098][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 865.268200][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 865.277229][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.284462][ T5674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.306358][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 865.323381][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 865.344161][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 865.360103][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 865.374699][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 865.392713][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 865.402656][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 865.412874][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 865.424724][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 865.439843][T13671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.458069][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 865.467797][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 865.484873][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.799024][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 865.807767][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 865.823098][T13671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.312715][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 866.323205][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 866.361158][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 866.369735][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 866.392530][T13671] device veth0_vlan entered promiscuous mode [ 866.403373][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 866.413302][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 866.427169][T13671] device veth1_vlan entered promiscuous mode [ 866.465132][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 866.474954][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 866.484924][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 866.495437][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 866.507120][T13671] device veth0_macvtap entered promiscuous mode [ 866.524685][T13671] device veth1_macvtap entered promiscuous mode [ 866.551329][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.562999][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.574761][T13671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.585427][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.596657][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.608381][T13671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.623728][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 866.634981][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 866.644123][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 866.653594][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 866.663289][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 866.673241][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 866.686073][T13671] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.698937][T13671] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.708831][T13671] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.718460][T13671] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.888638][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.901967][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.910168][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 867.008716][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.036955][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.050570][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 867.229535][T13908] loop5: detected capacity change from 0 to 256 [ 867.640984][ C0] net_ratelimit: 47 callbacks suppressed [ 870.211470][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.232746][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.677378][T13932] loop5: detected capacity change from 0 to 2048 [ 870.796167][T13932] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 870.840959][T13932] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 870.914913][T13932] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 870.977031][T13932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.543224][T13952] virtio-fs: tag not found [ 871.991679][T13947] loop8: detected capacity change from 0 to 2048 [ 872.000174][T13947] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 872.959873][ T5674] net_ratelimit: 16 callbacks suppressed [ 875.183662][T13984] loop8: detected capacity change from 0 to 256 [ 878.801388][ C0] net_ratelimit: 41 callbacks suppressed [ 882.732849][T14056] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 882.833506][ T4279] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 883.961702][T10584] net_ratelimit: 46 callbacks suppressed [ 884.028226][T14092] loop5: detected capacity change from 0 to 2048 [ 884.306511][T14092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 886.424705][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'. [ 887.568668][T14133] loop8: detected capacity change from 0 to 512 [ 889.081094][ C0] net_ratelimit: 19 callbacks suppressed [ 890.494323][T14164] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2440'. [ 894.317844][ C0] net_ratelimit: 20 callbacks suppressed [ 894.800240][T14189] rxe_eth0 speed is unknown, defaulting to 1000 [ 896.161258][T13559] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 896.358801][T13559] usb 6-1: Using ep0 maxpacket: 8 [ 896.371239][T13559] usb 6-1: config 0 has no interfaces? [ 896.387044][T13559] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 896.417390][T13559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.751456][T13559] usb 6-1: config 0 descriptor?? [ 897.573099][T13976] usb 6-1: USB disconnect, device number 13 [ 899.320868][ C1] net_ratelimit: 22 callbacks suppressed [ 900.072007][T14250] IPVS: set_ctl: invalid protocol: 137 172.30.0.6:20001 [ 900.799016][T14269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2461'. [ 903.011143][T14300] fuse: Invalid rootmode [ 903.029739][T14300] 9pnet_fd: Insufficient options for proto=fd [ 904.440878][ C0] net_ratelimit: 22 callbacks suppressed [ 908.271680][T14334] UBIFS error (pid: 14334): cannot open "./file0", error -22 [ 908.929356][T14345] device bridge1 entered promiscuous mode [ 909.481139][ C1] net_ratelimit: 25 callbacks suppressed [ 914.680962][ C1] net_ratelimit: 25 callbacks suppressed [ 919.985701][ T4664] net_ratelimit: 31 callbacks suppressed [ 920.305146][ T4279] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 924.877468][ T4279] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 924.886975][ T4279] Bluetooth: hci0: Injecting HCI hardware error event [ 924.897787][ T4283] Bluetooth: hci0: hardware error 0x00 [ 925.090272][ T6079] net_ratelimit: 23 callbacks suppressed [ 925.191837][T14505] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2512'. [ 925.231801][T14505] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2512'. [ 925.346282][T14505] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.353768][T14505] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.569064][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 926.569078][ T26] audit: type=1326 audit(2000001591.460:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b19f559 code=0x7ffc0000 [ 926.741761][ T26] audit: type=1326 audit(2000001591.500:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd5b1992d7 code=0x7ffc0000 [ 926.968029][ T26] audit: type=1326 audit(2000001591.500:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd5b1408d9 code=0x7ffc0000 [ 926.993322][ T26] audit: type=1326 audit(2000001591.500:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b19f559 code=0x7ffc0000 [ 927.021128][ T4283] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 927.084234][ T26] audit: type=1326 audit(2000001591.500:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7efd5b19f559 code=0x7ffc0000 [ 927.111942][ T26] audit: type=1326 audit(2000001591.860:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd5b1992d7 code=0x7ffc0000 [ 927.178304][ T26] audit: type=1326 audit(2000001591.860:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd5b1408d9 code=0x7ffc0000 [ 927.230179][ T26] audit: type=1326 audit(2000001591.860:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b19f559 code=0x7ffc0000 [ 927.340733][ T26] audit: type=1326 audit(2000001591.860:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b19f559 code=0x7ffc0000 [ 927.367719][ T26] audit: type=1326 audit(2000001591.890:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.5.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd5b1992d7 code=0x7ffc0000 [ 930.362026][ T6078] net_ratelimit: 21 callbacks suppressed [ 931.334883][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.341499][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.880860][ C0] net_ratelimit: 21 callbacks suppressed [ 936.235645][ T4283] Bluetooth: hci3: unexpected subevent 0x1a length: 66 > 6 [ 937.251774][T14631] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 940.920883][ C0] net_ratelimit: 35 callbacks suppressed [ 941.561508][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 941.740651][T14672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 942.327360][T14677] futex_wake_op: syz.3.2552 tries to shift op by 144; fix this program [ 945.960921][ C0] net_ratelimit: 37 callbacks suppressed [ 951.320908][ C0] net_ratelimit: 20 callbacks suppressed [ 956.377673][ C0] net_ratelimit: 26 callbacks suppressed [ 956.712778][T14814] device bridge4 entered promiscuous mode [ 956.833127][T14814] team0: Port device bridge4 added [ 956.843847][T14816] bridge0: port 1(team0) entered blocking state [ 956.875405][T14816] bridge0: port 1(team0) entered disabled state [ 958.328821][T14838] netlink: 'syz.7.2593': attribute type 11 has an invalid length. [ 958.912356][T14838] device wlan0 entered promiscuous mode [ 960.203546][T14859] overlayfs: failed to clone upperpath [ 961.400936][ C1] net_ratelimit: 25 callbacks suppressed [ 966.614880][ C0] net_ratelimit: 16 callbacks suppressed [ 969.801154][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 970.567570][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'. [ 971.640893][ C0] net_ratelimit: 27 callbacks suppressed [ 973.898034][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2628'. [ 974.656310][T14989] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 976.176265][T15017] loop5: detected capacity change from 0 to 16 [ 976.217370][T15017] erofs: (device loop5): mounted with root inode @ nid 36. [ 976.278889][T15017] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 976.297816][T15017] syz.5.2633: attempt to access beyond end of device [ 976.297816][T15017] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 976.466229][T15017] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 976.476266][T15017] syz.5.2633: attempt to access beyond end of device [ 976.476266][T15017] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 976.500714][T15017] syz.5.2633: attempt to access beyond end of device [ 976.500714][T15017] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 976.793580][ T26] kauditd_printk_skb: 109 callbacks suppressed [ 976.793603][ T26] audit: type=1800 audit(2000001641.410:867): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2633" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 976.821409][ C0] net_ratelimit: 15 callbacks suppressed [ 979.993622][ T4279] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 981.880865][ C1] net_ratelimit: 28 callbacks suppressed [ 982.974668][T15087] loop5: detected capacity change from 0 to 256 [ 983.290098][T15094] overlayfs: failed to clone lowerpath [ 983.304276][T15094] overlayfs: failed to clone lowerpath [ 983.775927][ T26] audit: type=1804 audit(2000001648.670:868): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2655" name="/newroot/231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop5" ino=1048765 res=1 errno=0 [ 984.803492][T15115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.926460][T15125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.010840][ C1] net_ratelimit: 18 callbacks suppressed [ 988.183094][T15156] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 988.183094][T15156] The task syz.5.2666 (15156) triggered the difference, watch for misbehavior. [ 989.868492][T15167] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 990.482525][T15169] overlayfs: failed to clone lowerpath [ 990.488893][T15170] overlayfs: failed to clone lowerpath [ 992.200857][ C1] net_ratelimit: 19 callbacks suppressed [ 992.764468][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.773413][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.422460][T15210] loop5: detected capacity change from 0 to 128 [ 994.456676][T15210] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 994.737479][T15210] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 997.443853][ T4359] net_ratelimit: 17 callbacks suppressed [ 1001.632542][T15269] loop5: detected capacity change from 0 to 8 [ 1002.681557][ C0] net_ratelimit: 34 callbacks suppressed [ 1005.812054][T15304] loop5: detected capacity change from 0 to 1024 [ 1005.823625][T15304] ext4: Unknown parameter 'subj_role' [ 1008.131248][ C1] net_ratelimit: 41 callbacks suppressed [ 1008.625445][T15273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1013.242522][ C0] net_ratelimit: 33 callbacks suppressed [ 1013.959023][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2730'. [ 1013.989742][T15364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2730'. [ 1014.062367][T15364] device geneve3 entered promiscuous mode [ 1014.564460][T15376] loop5: detected capacity change from 0 to 512 [ 1015.376628][T15376] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1015.404396][T15376] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 1015.414456][T15376] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1015.429453][T15376] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2732: bg 0: block 15: invalid block bitmap [ 1015.776952][T15376] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1016.634812][T15376] EXT4-fs (loop5): 1 truncate cleaned up [ 1017.462432][T15376] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1017.564585][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1018.361838][ C1] net_ratelimit: 28 callbacks suppressed [ 1021.029803][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2748'. [ 1021.039025][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 1021.094381][T15443] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.103894][T15443] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.112689][T15443] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.121449][T15443] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.600186][T15460] loop5: detected capacity change from 0 to 4096 [ 1021.675890][T15463] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1023.400903][ C1] net_ratelimit: 26 callbacks suppressed [ 1026.142185][T15495] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1027.053123][T15500] libceph: resolve '1' (ret=-3): failed [ 1028.440835][ C1] net_ratelimit: 21 callbacks suppressed [ 1030.844079][ T26] audit: type=1326 audit(2000001695.740:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15529 comm="syz.7.2775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1030.981061][ T26] audit: type=1326 audit(2000001695.740:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15529 comm="syz.7.2775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1031.006477][ T26] audit: type=1326 audit(2000001695.740:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15529 comm="syz.7.2775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1031.032151][ T26] audit: type=1326 audit(2000001695.740:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15529 comm="syz.7.2775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1031.057445][ T26] audit: type=1326 audit(2000001695.740:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15529 comm="syz.7.2775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1031.082387][ T26] audit: type=1326 audit(2000001695.740:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15529 comm="syz.7.2775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1031.127362][ T26] audit: type=1326 audit(2000001695.740:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15529 comm="syz.7.2775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1031.152430][ T26] audit: type=1326 audit(2000001695.740:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15529 comm="syz.7.2775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1031.821269][T15546] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1033.721182][ C1] net_ratelimit: 21 callbacks suppressed [ 1034.417761][T15582] xt_TCPMSS: Only works on TCP SYN packets [ 1035.815280][T15594] overlayfs: failed to clone upperpath [ 1036.762239][T15600] loop5: detected capacity change from 0 to 1024 [ 1036.823630][T15603] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1037.743470][T15600] EXT4-fs: quotafile must be on filesystem root [ 1038.107499][T15608] loop5: detected capacity change from 0 to 128 [ 1038.355295][T15608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1038.365837][T15608] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.841255][ C1] net_ratelimit: 26 callbacks suppressed [ 1039.154066][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1039.816179][T15624] loop5: detected capacity change from 0 to 16 [ 1039.851001][T15624] erofs: (device loop5): mounted with root inode @ nid 36. [ 1039.881566][T15624] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1039.892424][T15624] syz.5.2799: attempt to access beyond end of device [ 1039.892424][T15624] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1040.027540][T15624] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1040.036820][T15624] syz.5.2799: attempt to access beyond end of device [ 1040.036820][T15624] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1040.053521][T15624] syz.5.2799: attempt to access beyond end of device [ 1040.053521][T15624] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1040.070177][ T26] audit: type=1800 audit(2000001704.960:877): pid=15624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2799" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1040.603466][T15626] fuse: blksize only supported for fuseblk [ 1044.440830][ C0] net_ratelimit: 30 callbacks suppressed [ 1044.806516][T15666] loop5: detected capacity change from 0 to 256 [ 1044.974467][T15669] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1045.553553][T15676] loop5: detected capacity change from 0 to 512 [ 1045.577867][T15669] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1045.731226][T15676] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1045.917953][T15676] EXT4-fs (loop5): 1 truncate cleaned up [ 1045.985408][T15676] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1047.537319][ T9780] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 1047.758357][ T9780] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 1047.856802][ T9780] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 1048.217652][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1049.720821][ C1] net_ratelimit: 26 callbacks suppressed [ 1050.833790][ T4279] Bluetooth: hci1: unexpected event for opcode 0x041b [ 1051.641970][T15748] netlink: 'syz.7.2823': attribute type 11 has an invalid length. [ 1051.650011][T15748] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2823'. [ 1053.389479][T15770] loop5: detected capacity change from 0 to 512 [ 1053.569974][T15770] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1053.719854][T15770] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.422016][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.440419][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.841083][ T4279] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1054.855344][ T4279] Bluetooth: hci1: Injecting HCI hardware error event [ 1054.866207][ T4279] Bluetooth: hci1: hardware error 0x00 [ 1054.872653][ C1] net_ratelimit: 23 callbacks suppressed [ 1055.846602][T15793] netlink: 'syz.2.2837': attribute type 1 has an invalid length. [ 1056.224551][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1056.604800][T15793] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1056.728097][T15794] device gretap2 entered promiscuous mode [ 1056.823846][T15794] bond7: (slave gretap2): making interface the new active one [ 1056.866539][T15794] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 1056.927321][T15797] device macvlan3 entered promiscuous mode [ 1056.948432][T15797] device bond7 entered promiscuous mode [ 1057.030985][ T4279] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1057.235490][T15797] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1057.898073][T15797] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1057.994039][T15797] device bond7 left promiscuous mode [ 1058.121182][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 1059.791194][T15821] SET target dimension over the limit! [ 1060.440813][ C0] net_ratelimit: 24 callbacks suppressed [ 1061.249841][ T4279] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1061.261063][ T4279] Bluetooth: hci4: Injecting HCI hardware error event [ 1061.271618][ T4279] Bluetooth: hci4: hardware error 0x00 [ 1063.400953][ T4279] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1063.655794][T15850] overlayfs: failed to clone upperpath [ 1065.174869][T15865] fuse: Bad value for 'fd' [ 1066.304184][ C0] net_ratelimit: 24 callbacks suppressed [ 1071.326330][ C1] net_ratelimit: 27 callbacks suppressed [ 1074.749438][T15941] bond0 speed is unknown, defaulting to 1000 [ 1074.757531][T15941] bond0 speed is unknown, defaulting to 1000 [ 1074.774894][T15941] bond0 speed is unknown, defaulting to 1000 [ 1074.846212][T15941] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1074.891030][T15941] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1075.051369][T15941] bond0 speed is unknown, defaulting to 1000 [ 1075.067107][T15941] bond0 speed is unknown, defaulting to 1000 [ 1075.078243][T15941] bond0 speed is unknown, defaulting to 1000 [ 1075.091640][T15941] bond0 speed is unknown, defaulting to 1000 [ 1075.103197][T15941] bond0 speed is unknown, defaulting to 1000 [ 1075.116808][T15941] bond0 speed is unknown, defaulting to 1000 [ 1075.130229][T15941] bond0 speed is unknown, defaulting to 1000 [ 1076.520785][ C1] net_ratelimit: 21 callbacks suppressed [ 1078.544983][T15989] overlayfs: failed to clone upperpath [ 1079.273088][ T6078] rpcbind: server 127.0.0.1 not responding, timed out [ 1080.578701][T16004] loop5: detected capacity change from 0 to 4096 [ 1081.226254][T16004] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1081.560813][ C0] net_ratelimit: 36 callbacks suppressed [ 1082.843210][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1084.463037][T16049] overlayfs: failed to clone upperpath [ 1084.708800][T16047] loop5: detected capacity change from 0 to 512 [ 1085.079535][T16047] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1085.136513][T16047] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2897: invalid indirect mapped block 256 (level 1) [ 1085.200858][T16047] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2897: invalid indirect mapped block 2683928664 (level 1) [ 1085.229035][T16047] EXT4-fs (loop5): 1 truncate cleaned up [ 1085.246943][T16047] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1086.227162][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1087.320828][ C0] net_ratelimit: 28 callbacks suppressed [ 1087.609912][T16078] loop5: detected capacity change from 0 to 4096 [ 1088.644322][T16078] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1088.683254][T16080] sctp: [Deprecated]: syz.3.2907 (pid 16080) Use of int in max_burst socket option. [ 1088.683254][T16080] Use struct sctp_assoc_value instead [ 1089.379435][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1091.137453][T16129] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1091.146992][T16129] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1091.156271][T16129] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 1092.450843][ C1] net_ratelimit: 35 callbacks suppressed [ 1094.547639][T16153] loop5: detected capacity change from 0 to 1024 [ 1096.117526][T16176] SET target dimension over the limit! [ 1097.840702][ T5674] net_ratelimit: 26 callbacks suppressed [ 1102.852057][ C0] net_ratelimit: 17 callbacks suppressed [ 1103.333148][T16246] loop5: detected capacity change from 0 to 512 [ 1103.387831][T16246] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1103.405207][T16246] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2949: invalid indirect mapped block 256 (level 1) [ 1103.425318][T16246] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2949: invalid indirect mapped block 2683928664 (level 1) [ 1103.446482][T16246] EXT4-fs (loop5): 1 truncate cleaned up [ 1103.452591][T16246] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1104.315696][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1106.761031][T16277] loop5: detected capacity change from 0 to 128 [ 1107.961094][ T5674] net_ratelimit: 20 callbacks suppressed [ 1113.113939][ T4662] net_ratelimit: 19 callbacks suppressed [ 1113.526842][T16343] loop5: detected capacity change from 0 to 512 [ 1113.561496][T16343] FAT-fs (loop5): bogus logical sector size 0 [ 1113.567650][T16343] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1115.644998][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.651426][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.105886][T16372] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2976'. [ 1116.509401][T16356] loop5: detected capacity change from 0 to 32768 [ 1118.600814][ C0] net_ratelimit: 41 callbacks suppressed [ 1123.880932][ T6076] net_ratelimit: 32 callbacks suppressed [ 1125.080314][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2998'. [ 1125.099522][T16454] device hsr0 entered promiscuous mode [ 1127.381191][T16477] loop5: detected capacity change from 0 to 4096 [ 1127.430167][T16477] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1127.507786][T16482] sctp: [Deprecated]: syz.8.3003 (pid 16482) Use of int in max_burst socket option. [ 1127.507786][T16482] Use struct sctp_assoc_value instead [ 1128.854313][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1129.720893][T10408] net_ratelimit: 36 callbacks suppressed [ 1130.212041][T16495] overlayfs: './file0' not a directory [ 1131.844762][T16513] loop5: detected capacity change from 0 to 512 [ 1131.858361][T16513] EXT4-fs: Ignoring removed oldalloc option [ 1131.864442][T16513] EXT4-fs: Ignoring removed nobh option [ 1134.840905][ C1] net_ratelimit: 19 callbacks suppressed [ 1135.863732][T16513] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1135.873020][T16513] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.178720][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1136.458088][T16526] loop5: detected capacity change from 0 to 16 [ 1136.552011][T16526] erofs: (device loop5): mounted with root inode @ nid 36. [ 1136.574443][T16526] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1136.635338][T16526] syz.5.3019: attempt to access beyond end of device [ 1136.635338][T16526] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1136.728697][T16526] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1136.751833][T16526] syz.5.3019: attempt to access beyond end of device [ 1136.751833][T16526] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1136.783629][T16526] syz.5.3019: attempt to access beyond end of device [ 1136.783629][T16526] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1136.816206][ T26] audit: type=1800 audit(2000001801.710:878): pid=16526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3019" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1139.160995][T13976] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1139.418612][T13976] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1139.559775][T13976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.880766][ C0] net_ratelimit: 42 callbacks suppressed [ 1140.558471][T16540] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3024'. [ 1140.613104][T13976] usb 6-1: Firmware version (0.0) predates our first public release. [ 1140.634998][T13976] usb 6-1: Please update to version 0.2 or newer [ 1140.834015][T13976] usb 6-1: USB disconnect, device number 14 [ 1142.929599][T16581] overlayfs: failed to clone lowerpath [ 1145.000785][ C0] net_ratelimit: 22 callbacks suppressed [ 1146.117005][T16624] loop5: detected capacity change from 0 to 4096 [ 1146.870078][T16624] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1147.441096][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1148.681536][T16659] loop5: detected capacity change from 0 to 16 [ 1148.698697][T16659] erofs: (device loop5): mounted with root inode @ nid 36. [ 1148.708227][T16659] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1148.717798][T16659] syz.5.3054: attempt to access beyond end of device [ 1148.717798][T16659] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1148.739713][T16659] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1148.748954][T16659] syz.5.3054: attempt to access beyond end of device [ 1148.748954][T16659] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1148.765934][T16659] syz.5.3054: attempt to access beyond end of device [ 1148.765934][T16659] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1148.780527][ T26] audit: type=1800 audit(2000001813.680:879): pid=16659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3054" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1148.946073][T16661] trusted_key: encrypted_key: insufficient parameters specified [ 1148.956771][T16661] trusted_key: encrypted_key: insufficient parameters specified [ 1150.120763][ C0] net_ratelimit: 25 callbacks suppressed [ 1151.411959][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 2 < 9 [ 1151.420340][ T4279] Bluetooth: hci3: unexpected cc 0x1004 length: 7 < 11 [ 1151.456173][ T4279] Bluetooth: hci3: unexpected cc 0x2003 length: 6 < 9 [ 1154.868462][T13559] libceph: connect (1)[c::]:6789 error -113 [ 1154.929102][T13559] libceph: mon0 (1)[c::]:6789 connect error [ 1154.966270][T16719] ceph: No mds server is up or the cluster is laggy [ 1155.142843][ T7] libceph: connect (1)[c::]:6789 error -113 [ 1155.149036][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1155.156211][ C0] net_ratelimit: 20 callbacks suppressed [ 1155.476003][T13549] libceph: connect (1)[c::]:6789 error -113 [ 1155.482416][T13549] libceph: mon0 (1)[c::]:6789 connect error [ 1156.003777][T16738] fuse: Bad value for 'fd' [ 1157.792797][T16754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3081'. [ 1157.993596][T16754] device bridge2 entered promiscuous mode [ 1160.200763][ C0] net_ratelimit: 22 callbacks suppressed [ 1163.926225][T16821] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1165.002292][T16826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.571232][ T4306] net_ratelimit: 26 callbacks suppressed [ 1169.081217][T16876] syz.8.3119 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1171.117629][T16893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1171.245258][T16896] device bond_slave_0 entered promiscuous mode [ 1171.251651][T16896] device bond_slave_1 entered promiscuous mode [ 1171.320783][ C1] net_ratelimit: 20 callbacks suppressed [ 1172.336975][T16896] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1172.459839][T16896] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1172.504030][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1172.565440][T16893] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1172.769870][T16902] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3124'. [ 1172.804838][T16902] device bond_slave_0 left promiscuous mode [ 1172.823950][T16902] device bond_slave_1 left promiscuous mode [ 1173.835876][T16902] bond2: (slave macvlan2): Removing an active aggregator [ 1173.864590][T16902] bond2: (slave macvlan2): Releasing backup interface [ 1173.880888][T16902] bond2: (slave macvlan2): the permanent HWaddr of slave - 72:1e:f7:6c:bd:c6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1173.950337][T16902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.969257][T16902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.053390][T16902] bond0 (unregistering): Released all slaves [ 1174.329887][T16921] futex_wake_op: syz.7.3132 tries to shift op by 144; fix this program [ 1175.268851][T16930] loop5: detected capacity change from 0 to 512 [ 1175.414683][T16930] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1175.485055][T16930] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3135: invalid indirect mapped block 256 (level 1) [ 1176.654951][ C0] net_ratelimit: 27 callbacks suppressed [ 1176.661712][T16930] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3135: invalid indirect mapped block 2683928664 (level 1) [ 1176.755091][T16930] EXT4-fs (loop5): 1 truncate cleaned up [ 1176.760942][T16930] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1177.432823][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.447379][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.748683][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1182.280755][ C0] net_ratelimit: 23 callbacks suppressed [ 1186.956829][ T26] audit: type=1326 audit(2000001851.850:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1187.410923][ T26] audit: type=1326 audit(2000001851.880:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1187.640867][ C0] net_ratelimit: 22 callbacks suppressed [ 1188.978874][ T26] audit: type=1326 audit(2000001851.890:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1190.315069][ T26] audit: type=1326 audit(2000001851.890:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1190.435420][ T26] audit: type=1326 audit(2000001851.890:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1190.467649][T17123] netlink: 'syz.8.3168': attribute type 1 has an invalid length. [ 1190.575379][T17123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1190.676684][ T26] audit: type=1326 audit(2000001851.890:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1190.807509][T17126] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1190.832756][ T26] audit: type=1326 audit(2000001851.890:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1191.145069][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1191.178215][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3168'. [ 1191.306900][T17123] device bridge1 entered promiscuous mode [ 1191.485093][T17123] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1191.872032][ T26] audit: type=1326 audit(2000001851.890:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.037574][ T26] audit: type=1326 audit(2000001851.890:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.176479][ T26] audit: type=1326 audit(2000001851.890:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.293246][ T26] audit: type=1326 audit(2000001851.890:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.319292][ T26] audit: type=1326 audit(2000001851.900:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.537539][ T26] audit: type=1326 audit(2000001851.900:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.695336][ T26] audit: type=1326 audit(2000001851.910:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.811250][ T26] audit: type=1326 audit(2000001851.910:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.840757][ C0] net_ratelimit: 22 callbacks suppressed [ 1192.929223][ T26] audit: type=1326 audit(2000001851.910:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.954063][ T26] audit: type=1326 audit(2000001851.910:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1192.978436][ T26] audit: type=1326 audit(2000001851.910:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17092 comm="syz.3.3162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f7a5499f559 code=0x7ffc0000 [ 1193.262892][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1193.275495][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1193.285044][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1193.326274][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1193.335396][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1193.343315][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1194.943115][T17144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1195.071933][T17146] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1195.133285][T17146] bond3: (slave macvlan3): Enslaving as a backup interface with a down link [ 1195.221753][T17147] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3174'. [ 1195.442903][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 1196.605347][T17147] bond3: (slave macvlan3): Releasing backup interface [ 1196.722421][T17147] bond0 (unregistering): Released all slaves [ 1197.078331][T17148] rxe_eth0 speed is unknown, defaulting to 1000 [ 1197.218658][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 1197.218674][ T26] audit: type=1800 audit(2000001862.110:922): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3180" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1197.482018][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 1197.960757][ C1] net_ratelimit: 24 callbacks suppressed [ 1197.988412][T17148] bond0 speed is unknown, defaulting to 1000 [ 1199.732583][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 1200.209744][T17198] kAFS: No cell specified [ 1201.860327][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 1202.252572][T17215] loop5: detected capacity change from 0 to 2048 [ 1202.292460][T17215] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 1202.508375][T17148] chnl_net:caif_netlink_parms(): no params data found [ 1203.247112][ C0] net_ratelimit: 16 callbacks suppressed [ 1204.985554][T17148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.035591][T17148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.092719][T17148] device bridge_slave_0 entered promiscuous mode [ 1205.121698][T17148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.151877][T17148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.196263][T17148] device bridge_slave_1 entered promiscuous mode [ 1205.418384][T17148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.479312][T17148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.752095][T17148] team0: Port device team_slave_0 added [ 1205.797188][T17148] team0: Port device team_slave_1 added [ 1206.005306][T17148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.034749][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.200982][T17148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.244615][T17148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.258111][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.512933][T17148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.230447][T17148] device hsr_slave_0 entered promiscuous mode [ 1207.241439][T17148] device hsr_slave_1 entered promiscuous mode [ 1207.255073][T17148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1207.276200][T17148] Cannot create hsr debugfs directory [ 1208.553240][ C1] net_ratelimit: 37 callbacks suppressed [ 1209.085164][T17148] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1209.178448][T17148] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1209.238958][T17148] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1209.273887][T17257] loop5: detected capacity change from 0 to 512 [ 1209.295080][T17148] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1209.365808][T17257] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1209.390593][T17257] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3204: invalid indirect mapped block 256 (level 1) [ 1209.461787][T17257] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3204: invalid indirect mapped block 2683928664 (level 1) [ 1209.549003][T17257] EXT4-fs (loop5): 1 truncate cleaned up [ 1209.578195][T17257] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1209.723868][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1209.992567][T17148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.209849][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1210.231574][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1210.274472][T17148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.386700][T17094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1210.403019][T17094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1210.432743][T17094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.439910][T17094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.492895][T17094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1210.532046][T17094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1210.540861][T17094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.548006][T17094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.558092][T17094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1210.569369][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1210.604351][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1210.614416][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1210.634505][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1210.659483][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1210.668493][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1210.678637][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1210.688569][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1210.698574][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1210.707903][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1210.718970][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1210.736619][T17148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1214.591231][ C0] net_ratelimit: 30 callbacks suppressed [ 1214.705203][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1214.721931][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1214.761325][T17148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.496116][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1219.115163][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1219.295327][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1219.315523][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1219.342753][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1219.366808][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1219.414154][T17148] device veth0_vlan entered promiscuous mode [ 1219.459990][T17148] device veth1_vlan entered promiscuous mode [ 1219.512939][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1219.600792][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1219.618211][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1219.663128][ T4664] net_ratelimit: 52 callbacks suppressed [ 1219.777972][T17148] device veth0_macvtap entered promiscuous mode [ 1219.883154][T17148] device veth1_macvtap entered promiscuous mode [ 1220.409145][T17148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.530720][T17148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.626081][T17148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.113252][T17148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.293703][T17148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.367297][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1221.385260][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1221.713010][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1221.855695][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1222.048309][T17148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1222.207703][T17148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.346537][T17148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1222.500118][T17148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.392357][T17148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.437812][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1223.447793][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1223.486487][T17148] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.512870][T17148] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.550734][T17148] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.570151][T17148] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.082278][ T4306] net_ratelimit: 55 callbacks suppressed [ 1225.621078][T17097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.639216][T17097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.794921][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1226.761768][T17097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.770291][T17097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.785012][T17094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1228.103603][T17410] loop9: detected capacity change from 0 to 4096 [ 1230.726581][ C1] net_ratelimit: 20 callbacks suppressed [ 1230.791875][T17410] EXT4-fs: error -4 creating inode table initialization thread [ 1230.831614][T17410] EXT4-fs (loop9): mount failed [ 1234.019765][T17471] kAFS: No cell specified [ 1236.109828][T10011] net_ratelimit: 57 callbacks suppressed [ 1238.751443][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.757794][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.148524][T17550] loop5: detected capacity change from 0 to 1024 [ 1241.160848][ C0] net_ratelimit: 35 callbacks suppressed [ 1241.176439][T17550] ext4: Unknown parameter 'pcr' [ 1243.017232][T17581] loop5: detected capacity change from 0 to 16 [ 1243.049828][T17581] erofs: (device loop5): mounted with root inode @ nid 36. [ 1243.656390][T17581] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1243.665944][T17581] syz.5.3294: attempt to access beyond end of device [ 1243.665944][T17581] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1243.688577][T17581] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1243.697733][T17581] syz.5.3294: attempt to access beyond end of device [ 1243.697733][T17581] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1243.712086][T17581] syz.5.3294: attempt to access beyond end of device [ 1243.712086][T17581] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1243.730790][ T26] audit: type=1800 audit(2000000012.370:923): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3294" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1246.266291][T17614] loop9: detected capacity change from 0 to 1024 [ 1246.313036][T17614] ext4: Unknown parameter 'pcr' [ 1246.680745][ C0] net_ratelimit: 41 callbacks suppressed [ 1247.164649][T17623] loop5: detected capacity change from 0 to 512 [ 1252.040759][ C0] net_ratelimit: 42 callbacks suppressed [ 1256.786622][T17714] siw: device registration error -23 [ 1257.081669][T17089] net_ratelimit: 36 callbacks suppressed [ 1257.235095][ C1] hrtimer: interrupt took 66716 ns [ 1262.120729][ C0] net_ratelimit: 35 callbacks suppressed [ 1266.007690][T17790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3346'. [ 1266.017292][T17790] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3346'. [ 1266.586227][T17794] loop5: detected capacity change from 0 to 512 [ 1266.919635][T17794] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1267.336707][ C1] net_ratelimit: 50 callbacks suppressed [ 1267.373404][T17794] EXT4-fs (loop5): 1 truncate cleaned up [ 1267.379081][T17794] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1268.417364][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1272.146266][T17842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3360'. [ 1272.440711][ C1] net_ratelimit: 42 callbacks suppressed [ 1273.645962][T17859] loop5: detected capacity change from 0 to 1024 [ 1273.746144][T17094] rpcbind: server 127.0.0.1 not responding, timed out [ 1277.148825][T17888] device syzkaller0 entered promiscuous mode [ 1277.485401][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1277.497456][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1277.506528][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1277.559765][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1277.622138][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1277.633930][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1277.880705][ C1] net_ratelimit: 38 callbacks suppressed [ 1278.840233][T17911] loop5: detected capacity change from 0 to 512 [ 1278.917015][T17896] rxe_eth0 speed is unknown, defaulting to 1000 [ 1278.943474][T17911] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1278.955031][T17911] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3379: invalid indirect mapped block 256 (level 1) [ 1278.974090][T17911] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3379: invalid indirect mapped block 2683928664 (level 1) [ 1279.037469][T17911] EXT4-fs (loop5): 1 truncate cleaned up [ 1279.050525][T17911] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1279.949007][T13631] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.364557][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 1281.384965][T17917] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1282.690594][T13631] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.069592][T17896] bond0 speed is unknown, defaulting to 1000 [ 1283.080772][ C1] net_ratelimit: 32 callbacks suppressed [ 1283.327700][T13631] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.408359][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 1284.273272][T13631] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.481197][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 1285.719426][T17896] chnl_net:caif_netlink_parms(): no params data found [ 1286.284472][ T9780] EXT4-fs (loop5): unmounting filesystem. [ 1287.561094][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 1288.503787][T10584] net_ratelimit: 33 callbacks suppressed [ 1288.731683][T17896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.739055][T17896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.748068][T17896] device bridge_slave_0 entered promiscuous mode [ 1288.757529][T17896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.770972][T17896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.779628][T17896] device bridge_slave_1 entered promiscuous mode [ 1288.888504][T18051] overlayfs: failed to clone upperpath [ 1289.371169][T17896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.056231][T17896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.293093][T17896] team0: Port device team_slave_0 added [ 1291.346147][T17896] team0: Port device team_slave_1 added [ 1292.971917][T17896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.983636][T17896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.148549][T17896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.276704][T18105] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3411'. [ 1293.285852][T18105] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3411'. [ 1293.295157][T18105] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 1293.560899][ T47] net_ratelimit: 41 callbacks suppressed [ 1293.806737][T17896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.858821][T17896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.993738][T17896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.035613][T18104] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1294.044622][T18104] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1294.055953][T18104] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1294.063319][T18104] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1294.072921][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.081979][T18104] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1294.089620][T18104] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1294.098457][T18104] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1294.106221][T18104] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1294.114030][T18104] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1294.765804][T17896] device hsr_slave_0 entered promiscuous mode [ 1294.793654][T17896] device hsr_slave_1 entered promiscuous mode [ 1294.815245][T17896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1294.847482][T17896] Cannot create hsr debugfs directory [ 1295.020032][T13631] device hsr_slave_0 left promiscuous mode [ 1295.047045][T13631] device hsr_slave_1 left promiscuous mode [ 1295.074156][T13631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.094729][T13631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.125100][T13631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.146013][T13631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.175912][T13631] device bridge_slave_1 left promiscuous mode [ 1295.200836][T13631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.228574][T13631] device bridge_slave_0 left promiscuous mode [ 1295.247427][T13631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.649996][T13631] device veth1_macvtap left promiscuous mode [ 1295.699737][T13631] device veth0_macvtap left promiscuous mode [ 1295.769018][T13631] device veth1_vlan left promiscuous mode [ 1295.818618][T13631] device veth0_vlan left promiscuous mode [ 1298.668781][ C1] net_ratelimit: 47 callbacks suppressed [ 1299.966512][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.973295][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.651539][T13631] team0 (unregistering): Port device team_slave_1 removed [ 1300.727228][T13631] team0 (unregistering): Port device team_slave_0 removed [ 1300.814421][T13631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.908847][T13631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.608750][T13631] bond0 (unregistering): Released all slaves [ 1301.765232][T18141] netlink: 'syz.8.3419': attribute type 3 has an invalid length. [ 1301.776458][T18139] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1301.786151][T18139] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1301.795916][T18139] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1301.928027][T18150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.935195][T18150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.942794][T18150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.949947][T18150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.962421][T18150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1301.970003][T18150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1302.772420][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1303.632545][T17896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1303.670422][T17896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1303.687511][T17896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1303.712122][T17896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1303.720719][ C0] net_ratelimit: 43 callbacks suppressed [ 1303.908024][T17896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.925336][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1303.958601][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1303.981546][T17896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.009671][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1304.033757][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1304.065662][T10584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.072908][T10584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.089383][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1304.103586][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1304.114094][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1304.125298][T13631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.132539][T13631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.155147][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1304.166958][T13631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1304.189439][T17105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1304.227554][T17105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1304.239614][T17105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1304.258345][T17105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1304.275716][T17105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1304.288387][T17105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1304.304585][T17105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1304.329288][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1304.344560][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1304.357016][T17896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1304.776875][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1304.791848][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1304.807316][T17896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.848863][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1304.865643][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1304.904614][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1304.917179][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1304.930021][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1304.947941][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1304.962896][T17896] device veth0_vlan entered promiscuous mode [ 1304.978978][T17896] device veth1_vlan entered promiscuous mode [ 1305.050189][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1305.067263][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1305.079820][T17896] device veth0_macvtap entered promiscuous mode [ 1305.117398][T17896] device veth1_macvtap entered promiscuous mode [ 1305.150617][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.165390][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.176291][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.188386][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.200495][T17896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.212423][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1305.222156][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1305.230604][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1305.242549][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1305.254935][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1305.266077][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.276389][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1305.288369][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.300127][T17896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1305.314532][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1305.326407][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1305.348232][T17896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.360532][T17896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.378433][T17896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.387541][T17896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.539027][T10584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.565292][T10584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.587366][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1305.657091][T17105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.670349][T17105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.698591][T10584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1308.949581][T17105] net_ratelimit: 51 callbacks suppressed [ 1310.416206][T18246] loop1: detected capacity change from 0 to 512 [ 1313.961170][ C1] net_ratelimit: 47 callbacks suppressed [ 1316.952471][T18317] netlink: 'syz.1.3443': attribute type 1 has an invalid length. [ 1319.320728][ C0] net_ratelimit: 28 callbacks suppressed [ 1325.000694][ C1] net_ratelimit: 55 callbacks suppressed [ 1325.127645][T18409] lo: Caught tx_queue_len zero misconfig [ 1325.157969][T18409] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1330.040687][ C1] net_ratelimit: 47 callbacks suppressed [ 1330.223644][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1330.246926][T18463] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3472'. [ 1330.330477][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1330.363821][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1330.382522][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1330.401896][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1330.422722][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1331.213687][T10011] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.297406][T18461] rxe_eth0 speed is unknown, defaulting to 1000 [ 1331.363226][T10011] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.468317][T10011] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.743869][T10011] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.827534][T18461] bond0 speed is unknown, defaulting to 1000 [ 1332.784198][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 1333.141778][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3477'. [ 1334.358196][T10011] tipc: Left network mode [ 1334.856879][T18507] overlayfs: missing 'lowerdir' [ 1335.594890][ C1] net_ratelimit: 28 callbacks suppressed [ 1335.829755][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 1336.824426][T18461] chnl_net:caif_netlink_parms(): no params data found [ 1337.345707][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1337.360699][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1337.370566][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1337.387301][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1337.398179][ T4276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1337.451306][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1337.881283][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 1339.276439][T18541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3489'. [ 1339.481098][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 1339.961283][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 1340.351716][T18461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.370889][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.425818][T18461] device bridge_slave_0 entered promiscuous mode [ 1340.499107][T18525] rxe_eth0 speed is unknown, defaulting to 1000 [ 1340.638010][T18461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.649903][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.675807][T18461] device bridge_slave_1 entered promiscuous mode [ 1340.905958][T10011] bond2: (slave gretap1): Releasing active interface [ 1340.942623][ T9] net_ratelimit: 40 callbacks suppressed [ 1341.643422][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 1341.695642][T18525] bond0 speed is unknown, defaulting to 1000 [ 1341.952758][T18461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.750357][T18461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.245352][T18461] team0: Port device team_slave_0 added [ 1343.269020][T18461] team0: Port device team_slave_1 added [ 1343.847282][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 1343.942142][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3498'. [ 1344.312538][T18461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.319543][T18461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1345.214954][T18461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.273332][T18461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.293443][T18461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1345.438806][T18461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.040681][ C1] net_ratelimit: 36 callbacks suppressed [ 1346.154934][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 1346.430273][T18461] device hsr_slave_0 entered promiscuous mode [ 1346.490488][T18461] device hsr_slave_1 entered promiscuous mode [ 1346.582664][T18461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1346.590316][T18461] Cannot create hsr debugfs directory [ 1346.665980][T18608] netlink: 'syz.3.3506': attribute type 21 has an invalid length. [ 1346.680793][T18608] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3506'. [ 1348.249978][T10011] device veth1_macvtap left promiscuous mode [ 1348.274797][T10011] device veth0_macvtap left promiscuous mode [ 1348.288487][T10011] device veth1_vlan left promiscuous mode [ 1348.304846][T10011] device veth0_vlan left promiscuous mode [ 1349.628791][T10011] bond3 (unregistering): Released all slaves [ 1349.822552][T10011] bond2 (unregistering): Released all slaves [ 1351.590050][ C1] net_ratelimit: 42 callbacks suppressed [ 1352.419652][T10011] bond1 (unregistering): Released all slaves [ 1354.328835][T18657] o2cb: This node has not been configured. [ 1354.335387][T18657] o2cb: Cluster check failed. Fix errors before retrying. [ 1354.342754][T18657] (syz.7.3516,18657,1):user_dlm_register:674 ERROR: status = -22 [ 1354.350489][T18657] (syz.7.3516,18657,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1356.600869][ C0] net_ratelimit: 25 callbacks suppressed [ 1358.204747][T18662] : renamed from bond_slave_0 [ 1358.751466][T18525] chnl_net:caif_netlink_parms(): no params data found [ 1360.312140][T18525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.319455][T18525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.406162][T18525] device bridge_slave_0 entered promiscuous mode [ 1361.440808][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.447187][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.814712][T18461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.960720][ C0] net_ratelimit: 29 callbacks suppressed [ 1362.266219][T18525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.298369][T18525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.344042][T18525] device bridge_slave_1 entered promiscuous mode [ 1363.546624][T18461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.837129][T18525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.965700][ T6079] rpcbind: server 127.0.0.1 not responding, timed out [ 1365.575513][T18461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.077973][T18525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.796216][T18461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.560695][ C1] net_ratelimit: 26 callbacks suppressed [ 1367.782480][T18764] netlink: 'syz.3.3539': attribute type 5 has an invalid length. [ 1367.816518][T18525] team0: Port device team_slave_0 added [ 1367.894268][T18525] team0: Port device team_slave_1 added [ 1368.133169][T18525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.151165][T18525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.210010][T18525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.464803][T10011] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.574181][T18525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.600882][T18525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.733620][T18525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.208271][T10011] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.456615][T10011] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.656959][ T26] audit: type=1326 audit(2000000140.300:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.3.3546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a5499f559 code=0x0 [ 1371.723342][T10011] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.778747][T18461] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1371.886623][T18461] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1371.946281][T18525] device hsr_slave_0 entered promiscuous mode [ 1371.992494][T18525] device hsr_slave_1 entered promiscuous mode [ 1372.010948][T18525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1372.018574][T18525] Cannot create hsr debugfs directory [ 1372.056036][T18461] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1372.138210][T18461] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1373.250666][ C1] net_ratelimit: 26 callbacks suppressed [ 1376.996352][T18461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.360734][ C0] net_ratelimit: 28 callbacks suppressed [ 1379.985061][ T6083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1379.993409][ T6083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1380.011866][T18461] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.058546][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1380.101371][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1380.119416][ T4662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.126702][ T4662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.318385][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1381.350901][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1382.305248][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1382.314223][ T4662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.321420][ T4662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.331230][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1382.358687][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1382.372214][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1382.385661][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1382.401530][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1383.237110][T18461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1383.403431][T18461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1383.640689][ C1] net_ratelimit: 21 callbacks suppressed [ 1383.803151][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1383.826278][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1383.859769][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1383.879023][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1383.948040][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1383.976915][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1386.364965][T18926] tipc: Started in network mode [ 1386.369964][T18926] tipc: Node identity 4, cluster identity 4711 [ 1386.376257][T18926] tipc: Node number set to 4 [ 1386.433645][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1387.361305][ T22] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1387.390023][ T26] audit: type=1326 audit(2000000156.040:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1387.718577][ T26] audit: type=1326 audit(2000000156.040:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1387.850142][ T26] audit: type=1326 audit(2000000156.070:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff41555fd8e code=0x7ffc0000 [ 1387.961590][ T26] audit: type=1326 audit(2000000156.070:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1388.058285][ T26] audit: type=1326 audit(2000000156.070:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1388.100129][ T26] audit: type=1326 audit(2000000156.070:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1388.210761][ T26] audit: type=1326 audit(2000000156.070:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1388.237757][ T26] audit: type=1326 audit(2000000156.070:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1388.263621][ T26] audit: type=1326 audit(2000000156.070:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1388.296485][ T26] audit: type=1326 audit(2000000156.070:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.7.3578" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41559f559 code=0x7ffc0000 [ 1388.940045][ T6078] net_ratelimit: 26 callbacks suppressed [ 1389.826238][T18971] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[18971] [ 1389.841297][T18971] nft_compat: unsupported protocol 1 [ 1390.680301][ T5644] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1390.816796][T18525] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1390.902306][T18525] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1391.994976][T18525] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1392.042793][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1392.056520][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1392.070482][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1392.080206][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1392.095021][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1392.105148][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1393.065649][T10011] device hsr_slave_0 left promiscuous mode [ 1393.106514][T10011] device hsr_slave_1 left promiscuous mode [ 1393.121965][T10011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.129687][T10011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.178955][T10011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.235911][T10011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.289765][T10011] device bridge_slave_1 left promiscuous mode [ 1393.305245][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.316605][T10011] device bridge_slave_0 left promiscuous mode [ 1393.329850][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.045744][ T6079] net_ratelimit: 22 callbacks suppressed [ 1394.073204][T10011] device veth1_macvtap left promiscuous mode [ 1394.103148][T10011] device veth0_macvtap left promiscuous mode [ 1394.109360][T10011] device veth1_vlan left promiscuous mode [ 1394.210939][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 1394.225753][T10011] device veth0_vlan left promiscuous mode [ 1396.136470][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1396.151043][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1396.160549][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1396.172732][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1396.182094][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1396.189903][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1396.314770][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 1396.533510][T19012] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3593'. [ 1396.542599][T19012] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3593'. [ 1396.551631][T19012] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 1396.611029][T18885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.154383][T18885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.169320][T16944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1398.569531][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 1398.578213][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 1399.163582][ T4306] net_ratelimit: 30 callbacks suppressed [ 1400.814540][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 1400.821028][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 1402.568578][T10011] team0 (unregistering): Port device team_slave_1 removed [ 1402.750443][T10011] team0 (unregistering): Port device team_slave_0 removed [ 1402.841176][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 1402.923983][T10011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.001492][T14390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1403.065375][T10011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.281528][T17089] net_ratelimit: 14 callbacks suppressed [ 1405.605296][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 1406.043626][T10011] bond0 (unregistering): Released all slaves [ 1406.202110][T10408] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1406.539126][T18525] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1406.583376][T19011] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1406.593118][T19011] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1406.602018][T19011] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1406.609498][T19011] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1407.508433][T18986] rxe_eth0 speed is unknown, defaulting to 1000 [ 1408.784524][T10408] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1409.097029][T19007] rxe_eth0 speed is unknown, defaulting to 1000 [ 1409.141456][T18986] bond0 speed is unknown, defaulting to 1000 [ 1409.960666][ C0] net_ratelimit: 17 callbacks suppressed [ 1410.132556][T17167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1410.559633][T19007] bond0 speed is unknown, defaulting to 1000 [ 1412.232809][T17094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1414.141646][T19148] futex_wake_op: syz.8.3628 tries to shift op by 144; fix this program [ 1414.233348][T18986] chnl_net:caif_netlink_parms(): no params data found [ 1414.521324][T17089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1414.828511][T19007] chnl_net:caif_netlink_parms(): no params data found [ 1415.250664][ C1] net_ratelimit: 15 callbacks suppressed [ 1415.801756][T18986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.809475][T18986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.818362][T18986] device bridge_slave_0 entered promiscuous mode [ 1415.833470][T18986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.846979][T18986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.053480][T18986] device bridge_slave_1 entered promiscuous mode [ 1417.437518][T18986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.461369][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1418.550322][T19007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.567615][T19007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.682360][T19007] device bridge_slave_0 entered promiscuous mode [ 1418.717172][T18986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.054416][T19007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.081008][T19007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.145131][T19007] device bridge_slave_1 entered promiscuous mode [ 1419.759273][T18986] team0: Port device team_slave_0 added [ 1419.838022][T19007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.996426][T18986] team0: Port device team_slave_1 added [ 1420.011991][T19007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.281390][T17105] net_ratelimit: 14 callbacks suppressed [ 1420.287448][T17105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1420.592453][T18986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.599476][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.726239][T18986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.793330][T19007] team0: Port device team_slave_0 added [ 1420.826561][T18986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.837331][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.947017][T18986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.997733][T19007] team0: Port device team_slave_1 added [ 1421.432262][T19007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.439255][T19007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.546036][T19007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.640426][T18986] device hsr_slave_0 entered promiscuous mode [ 1421.702462][T18986] device hsr_slave_1 entered promiscuous mode [ 1421.719483][T18986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1421.734583][T18986] Cannot create hsr debugfs directory [ 1421.751704][T19007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.758702][T19007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.889008][T19007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.277218][T19007] device hsr_slave_0 entered promiscuous mode [ 1422.479690][T19007] device hsr_slave_1 entered promiscuous mode [ 1422.509644][T19007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1422.534049][T19007] Cannot create hsr debugfs directory [ 1422.844663][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.851472][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.562650][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1425.224885][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1425.240338][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1425.285009][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x721c instead [ 1425.296875][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8fcd instead [ 1425.315417][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1425.326297][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1425.357395][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1425.383830][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1425.402700][ T4664] net_ratelimit: 26 callbacks suppressed [ 1425.437650][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1425.493262][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1425.529090][T19253] jffs2: Further such events for this erase block will not be printed [ 1425.588079][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1425.607885][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1425.634808][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x721c instead [ 1425.681394][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8fcd instead [ 1425.716411][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1425.743662][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1425.794199][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1425.826360][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1425.861278][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1425.895432][T19253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1425.958937][T19253] jffs2: Further such events for this erase block will not be printed [ 1426.032467][T19253] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1426.042712][T19253] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1426.061466][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1428.591243][T10011] device hsr_slave_0 left promiscuous mode [ 1428.667922][T10011] device hsr_slave_1 left promiscuous mode [ 1428.687320][T10011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.733779][T10011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.778112][T10011] device bridge_slave_1 left promiscuous mode [ 1428.801699][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.871546][T10011] device bridge_slave_0 left promiscuous mode [ 1428.877890][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.990516][T10011] device hsr_slave_0 left promiscuous mode [ 1429.020315][T10011] device hsr_slave_1 left promiscuous mode [ 1429.049120][T10011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.110508][T10011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.123117][T10011] device bridge_slave_1 left promiscuous mode [ 1429.152459][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.190650][T10011] device bridge_slave_0 left promiscuous mode [ 1429.196947][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.242089][T14390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1430.333056][ T22] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1430.501497][ C1] net_ratelimit: 11 callbacks suppressed [ 1431.801072][T10015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1431.886137][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3654'. [ 1434.190795][T10011] team0 (unregistering): Port device team_slave_1 removed [ 1434.319031][T10011] team0 (unregistering): Port device team_slave_0 removed [ 1434.468364][T10011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.391527][T13631] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1435.695371][T10011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.471200][ T4662] net_ratelimit: 17 callbacks suppressed [ 1437.667015][T17107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.851925][ T4359] ------------[ cut here ]------------ [ 1438.858398][ T4359] WARNING: CPU: 0 PID: 4359 at io_uring/io_uring.c:2892 io_ring_exit_work+0x329/0x760 [ 1438.868240][ T4359] Modules linked in: [ 1438.872190][ T4359] CPU: 0 PID: 4359 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1438.879777][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1438.889973][ T4359] Workqueue: events_unbound io_ring_exit_work [ 1438.896156][ T4359] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 1438.901984][ T4359] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 0e 47 11 00 48 85 c0 75 40 e8 64 d4 4f f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 d4 4f f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 1438.921750][ T4359] RSP: 0018:ffffc900048d7ac0 EFLAGS: 00010293 [ 1438.927874][ T4359] RAX: ffffffff8a32722b RBX: 1ffff1100c41d403 RCX: ffff88801cf81e00 [ 1438.927895][ T4359] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1438.944424][ T4359] RBP: ffffc900048d7c30 R08: ffffc900048d7a47 R09: 1ffff9200091af48 [ 1438.952467][ T4359] R10: dffffc0000000000 R11: fffff5200091af49 R12: dffffc0000000000 [ 1438.960482][ T4359] R13: 000000010001bc40 R14: 000000010001bc41 R15: ffff8880620ea018 [ 1438.968523][ T4359] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1438.977523][ T4359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1438.984188][ T4359] CR2: 00007f1a551fee40 CR3: 000000005f076000 CR4: 00000000003506f0 [ 1438.992234][ T4359] Call Trace: [ 1438.995561][ T4359] [ 1438.998535][ T4359] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 1439.004482][ T4359] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1439.009739][ T4359] ? process_one_work+0x7b4/0x1160 [ 1439.015107][ T4359] process_one_work+0x8ab/0x1160 [ 1439.020117][ T4359] ? worker_detach_from_pool+0x240/0x240 [ 1439.025831][ T4359] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1439.030935][ T4359] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1439.036620][ T4359] ? wq_worker_running+0x97/0x190 [ 1439.041739][ T4359] worker_thread+0xaf5/0x12a0 [ 1439.046495][ T4359] kthread+0x29d/0x330 [ 1439.050664][ T4359] ? worker_clr_flags+0x1a0/0x1a0 [ 1439.055735][ T4359] ? kthread_blkcg+0xd0/0xd0 [ 1439.060395][ T4359] ret_from_fork+0x1f/0x30 [ 1439.064948][ T4359] [ 1439.068018][ T4359] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1439.075324][ T4359] CPU: 0 PID: 4359 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1439.082912][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1439.083162][ T22] nf_conntrack: clean_from_lists(ffff888078ffe000) [ 1439.083206][ T22] nf_conntrack: nf_ct_destroy(ffff888078ffe000) [ 1439.083245][ T22] nf_conntrack: nf_ct_destroy: returning ct=ffff888078ffe000 to slab [ 1439.113837][ T4359] Workqueue: events_unbound io_ring_exit_work [ 1439.119946][ T4359] Call Trace: [ 1439.123257][ T4359] [ 1439.126212][ T4359] dump_stack_lvl+0x188/0x24e [ 1439.130914][ T4359] ? memcpy+0x3c/0x60 [ 1439.134918][ T4359] ? show_regs_print_info+0x12/0x12 [ 1439.140133][ T4359] ? load_image+0x410/0x410 [ 1439.144770][ T4359] panic+0x2d3/0x710 [ 1439.148703][ T4359] ? bpf_jit_dump+0xd0/0xd0 [ 1439.153234][ T4359] ? ret_from_fork+0x1f/0x30 [ 1439.157878][ T4359] __warn+0x2f8/0x4f0 [ 1439.161888][ T4359] ? io_ring_exit_work+0x329/0x760 [ 1439.167037][ T4359] ? io_ring_exit_work+0x329/0x760 [ 1439.172174][ T4359] report_bug+0x2ba/0x4f0 [ 1439.176530][ T4359] ? io_ring_exit_work+0x329/0x760 [ 1439.181675][ T4359] handle_bug+0x3a/0x70 [ 1439.185855][ T4359] exc_invalid_op+0x16/0x40 [ 1439.190379][ T4359] asm_exc_invalid_op+0x16/0x20 [ 1439.195256][ T4359] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 1439.201002][ T4359] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 0e 47 11 00 48 85 c0 75 40 e8 64 d4 4f f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 d4 4f f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 1439.220662][ T4359] RSP: 0018:ffffc900048d7ac0 EFLAGS: 00010293 [ 1439.226772][ T4359] RAX: ffffffff8a32722b RBX: 1ffff1100c41d403 RCX: ffff88801cf81e00 [ 1439.234778][ T4359] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1439.242785][ T4359] RBP: ffffc900048d7c30 R08: ffffc900048d7a47 R09: 1ffff9200091af48 [ 1439.250777][ T4359] R10: dffffc0000000000 R11: fffff5200091af49 R12: dffffc0000000000 [ 1439.258769][ T4359] R13: 000000010001bc40 R14: 000000010001bc41 R15: ffff8880620ea018 [ 1439.266771][ T4359] ? io_ring_exit_work+0x329/0x760 [ 1439.271926][ T4359] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 1439.277776][ T4359] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1439.283006][ T4359] ? process_one_work+0x7b4/0x1160 [ 1439.288149][ T4359] process_one_work+0x8ab/0x1160 [ 1439.293128][ T4359] ? worker_detach_from_pool+0x240/0x240 [ 1439.298806][ T4359] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1439.303856][ T4359] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1439.309437][ T4359] ? wq_worker_running+0x97/0x190 [ 1439.314488][ T4359] worker_thread+0xaf5/0x12a0 [ 1439.319226][ T4359] kthread+0x29d/0x330 [ 1439.323311][ T4359] ? worker_clr_flags+0x1a0/0x1a0 [ 1439.328370][ T4359] ? kthread_blkcg+0xd0/0xd0 [ 1439.332979][ T4359] ret_from_fork+0x1f/0x30 [ 1439.337437][ T4359] [ 1439.341069][ T4359] Kernel Offset: disabled [ 1439.345537][ T4359] Rebooting in 86400 seconds..