last executing test programs: 20m47.784938166s ago: executing program 32 (id=72): socket(0x10, 0x3, 0xfffffffd) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) listen(r0, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20m19.652187613s ago: executing program 33 (id=130): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x122) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 20m7.725173856s ago: executing program 3 (id=255): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8002, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xfffffffd, 0x8, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x6, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0x6, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x3, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000005c0)='.\x00', 0x2000690) write$binfmt_elf32(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4680400400050000000000000002000600c42f75405f000000380000004600000008000000010020000100050009000000000000000300000004"], 0xb0) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20m7.443127369s ago: executing program 3 (id=258): socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0xa, 0x300) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="408e073e9d65acf13a4ba9dfb080", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20m6.351752341s ago: executing program 3 (id=263): futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) fanotify_init(0x1200, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, 0x0) 20m5.31376139s ago: executing program 3 (id=269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xe, &(0x7f0000002900)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xec}}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000000, 0x7, 0x0, &(0x7f0000000c40)="63eced8e46dc3f", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 20m3.897857306s ago: executing program 3 (id=273): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(r1) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000001a40)={0x0, 0xea60}, 0x10) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 20m3.300090445s ago: executing program 3 (id=277): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dfa2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 20m2.330407s ago: executing program 34 (id=277): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dfa2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 18m59.903221176s ago: executing program 4 (id=573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) 18m59.894944296s ago: executing program 6 (id=575): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18m58.699717013s ago: executing program 4 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 18m57.976846527s ago: executing program 6 (id=579): mount(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvfrom(r1, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) 18m57.739366108s ago: executing program 4 (id=580): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000690000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x635}, 0x94) rseq(0x0, 0x0, 0x20000000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x6b3b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) io_uring_enter(r2, 0x2219, 0xb9ac, 0x16, 0x0, 0x0) 18m57.174950045s ago: executing program 5 (id=582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 18m56.83611931s ago: executing program 6 (id=583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) userfaultfd(0x80001) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711841000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00001f2000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x951af000) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000100000000000008001f0001000000", 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 18m55.952172172s ago: executing program 0 (id=585): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@nested_load_syzos={0x136, 0x38, {0x2, 0x0, [@nested_vmlaunch={0x12f, 0x18}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0x3f5c, 0x4}}, @in_dx={0x69, 0x20, {0xf712, 0x7}}, @rdmsr={0x66, 0x18, {0xaae}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xc3f1}}, @wrmsr={0x65, 0x20, {0xa49, 0x8}}, @wr_crn={0x67, 0x20, {0x8, 0x15a08}}, @out_dx={0x6a, 0x28, {0xc846, 0x3, 0x73b2}}, @uexit={0x0, 0x18, 0x9}, @wr_crn={0x67, 0x20, {0x0, 0x2}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x41e9, 0x1}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x2d9, 0x4}}], 0x230}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m55.923152464s ago: executing program 5 (id=586): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='limits\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newrule={0x48, 0x20, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x14, 0x4, 0x0, 0x0, 0x0, 0x6, 0x3}, [@FRA_DST={0x8, 0x1, @multicast1}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_FLOW={0x8}]}, 0x48}}, 0x40010) 18m55.688155525s ago: executing program 0 (id=587): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x2, 0x3, 0x6) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r3, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 18m54.119999389s ago: executing program 5 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) 18m53.209227522s ago: executing program 6 (id=589): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x354a, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) unshare(0x2a060400) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x3, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 18m53.207973682s ago: executing program 0 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 18m52.912355006s ago: executing program 0 (id=590): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x21002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) recvfrom(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) 18m52.912029586s ago: executing program 5 (id=591): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xd, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3fd1}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x59a}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 18m52.911859346s ago: executing program 4 (id=592): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 18m50.884613591s ago: executing program 4 (id=593): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0xa5, 0x5, 0xfb, 0x9, 0x1, 0xff, 0x8, 0x84, 0xc, 0x7}, 0xe) sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) 18m50.857337643s ago: executing program 0 (id=594): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000201050000000000000000000200000853e54f24f208b2c00ed9d9dea6fd48e200ccd38ecae5477ca405a85fc78f1ee9c1857be11b6bc55df0816856d923964cb2bbbbface52b5596d83390d8501f4b6632ae61f71b79c3137375230e21857b0646e86babf90661901a56c40c89b63d2ed1af7e973f7cb243be28974"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 18m50.716701039s ago: executing program 5 (id=595): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xb2) fcntl$notify(r2, 0x402, 0x80000005) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5f, 0x3}) 18m50.665808201s ago: executing program 6 (id=596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000100)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x5000000}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c0003bd37864aff02a257fc5ad90200bb6a88000056c9db0000db0059100ac45761547a681f009cee4a5a479200001fb700673751adfcb87d00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff2c3f6c421ace486dee362eba", 0x8a) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x0, &(0x7f0000004540)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x3}, @register_looper, @request_death, @release], 0x0, 0x0, 0x0}) 18m50.596139255s ago: executing program 4 (id=598): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) syz_usbip_server_init(0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 18m50.548531457s ago: executing program 0 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8205, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x101}}, {@data_err_ignore}, {@i_version}, {@minixdf}, {@orlov}]}, 0x1, 0x616, &(0x7f0000001140)="$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") ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 18m50.49609802s ago: executing program 5 (id=600): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x100000000, 0xa, 0x7f, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x40100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m50.432145513s ago: executing program 6 (id=601): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r0, &(0x7f0000000000)='\"', 0xfdef) 18m8.915769982s ago: executing program 35 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8205, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x101}}, {@data_err_ignore}, {@i_version}, {@minixdf}, {@orlov}]}, 0x1, 0x616, &(0x7f0000001140)="$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") ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 18m8.795825927s ago: executing program 36 (id=600): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x100000000, 0xa, 0x7f, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x40100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m8.590264677s ago: executing program 37 (id=598): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) syz_usbip_server_init(0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 18m8.410203786s ago: executing program 38 (id=601): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r0, &(0x7f0000000000)='\"', 0xfdef) 3m21.242753228s ago: executing program 9 (id=2540): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000440)) r3 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x20b, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000780)=0x3) ioctl$TIOCSSOFTCAR(r3, 0x5434, 0x0) 3m18.048357289s ago: executing program 9 (id=2544): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0xf0, 0x160, 0x160, 0x0, 0x0, 0x1c0, 0x280, 0x280, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xa4}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1}, {0x4, 0x6, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, r0, 0x2f, 0x28, 0x4}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m14.84709238s ago: executing program 9 (id=2550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x2, 0x1000, 0xc, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m12.122397938s ago: executing program 9 (id=2557): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x2, 0x1, {}, 0xfc}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r2, &(0x7f0000005400)=[{&(0x7f0000005440)="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", 0x140}], 0x1) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x4c020) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc17882d00a137af9}, 0x804c080) write$sndseq(r3, &(0x7f00000000c0), 0xe) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) 3m9.12217308s ago: executing program 9 (id=2563): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') acct(0x0) socket(0x15, 0x80005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2", 0x1c7, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=ANY=[], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) 3m8.27246332s ago: executing program 9 (id=2566): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={r2, &(0x7f0000000140)='$\x00', 0x80, &(0x7f0000000180)={@align=0x8, {0x4, 0xa10, 0x6, 0x1}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)}) write$cgroup_devices(r3, 0x0, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 2m53.110920994s ago: executing program 39 (id=2566): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={r2, &(0x7f0000000140)='$\x00', 0x80, &(0x7f0000000180)={@align=0x8, {0x4, 0xa10, 0x6, 0x1}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)}) write$cgroup_devices(r3, 0x0, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 59.088503913s ago: executing program 2 (id=2772): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x65, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "28ceb3e0791d62b8b62265e3c05d5c87b67e89baf42aa931804784f51d5b21c321f0b462bf6a5adcb2da779a473e0ea0db0dcf964c5b49e3f733a518c74d2d7a", 0x40}, 0x48, r0) 58.654106063s ago: executing program 2 (id=2774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 58.523966699s ago: executing program 2 (id=2775): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40006) ioperm(0x4, 0x8, 0x5) userfaultfd(0x80001) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) timer_create(0x2, 0x0, &(0x7f0000000600)=0x0) timer_gettime(r4, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, 0x0, 0x181) 57.591480364s ago: executing program 2 (id=2777): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000680)={&(0x7f00000000c0)=@tipc, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f00000004c0)=""/204, 0xcc}], 0x3, &(0x7f0000000600)=""/119, 0x77}, 0x102) write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r0, &(0x7f0000000280)='1', 0x1) 55.399480377s ago: executing program 2 (id=2783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, 0x0) r5 = socket(0xa, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) socket(0x2, 0x805, 0x0) 53.591409112s ago: executing program 2 (id=2786): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) 37.52928847s ago: executing program 40 (id=2786): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) 24.440875167s ago: executing program 8 (id=2825): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, 0x0) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x20000, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d8, 0x4], 0x1, 0x400}) 22.086016938s ago: executing program 8 (id=2828): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 20.267017964s ago: executing program 8 (id=2831): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.773973389s ago: executing program 8 (id=2837): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x44040) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usbip_server_init(0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) 8.995933816s ago: executing program 1 (id=2849): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x65, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "28ceb3e0791d62b8b62265e3c05d5c87b67e89baf42aa931804784f51d5b21c321f0b462bf6a5adcb2da779a473e0ea0db0dcf964c5b49e3f733a518c74d2d7a", 0x40}, 0x48, r0) 8.976853807s ago: executing program 1 (id=2850): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) fsopen(&(0x7f0000000100)='vfat\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) 7.858618389s ago: executing program 7 (id=2851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$vcsu(&(0x7f00000003c0), 0x4, 0x8000) dup2(r1, r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1, 0x18, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x50) 7.196062691s ago: executing program 8 (id=2852): mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) open(0x0, 0x1c9800, 0x0) io_setup(0x1, 0x0) setns(0xc9, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 4.731401847s ago: executing program 1 (id=2853): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x65, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "28ceb3e0791d62b8b62265e3c05d5c87b67e89baf42aa931804784f51d5b21c321f0b462bf6a5adcb2da779a473e0ea0db0dcf964c5b49e3f733a518c74d2d7a", 0x40}, 0x48, r0) 4.604842413s ago: executing program 7 (id=2854): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f00000012c0)={0x5, 0xb4a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) ptrace$poke(0x4, 0x0, &(0x7f00000010c0), 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 4.390486733s ago: executing program 1 (id=2855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0xc, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_key={0x1, 0x8}]}, 0x60}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf34f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c6f63"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.389996223s ago: executing program 7 (id=2856): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000340301000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='127.0.0.1', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='77', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/node/node1/num\x00', 0x2, 0x0) write(r4, &(0x7f0000000800)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0) write(r5, &(0x7f0000000a00)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./config/cluster/ocfs2/heartbeat/region1\x00', 0x1ff) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r7) 3.927806215s ago: executing program 7 (id=2857): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x65, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "28ceb3e0791d62b8b62265e3c05d5c87b67e89baf42aa931804784f51d5b21c321f0b462bf6a5adcb2da779a473e0ea0db0dcf964c5b49e3f733a518c74d2d7a", 0x40}, 0x48, r0) 1.447978672s ago: executing program 8 (id=2858): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init() syz_emit_vhci(0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.446259522s ago: executing program 7 (id=2865): r0 = fanotify_init(0x10, 0x8000) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x408c4) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000004a0001002dbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0600000014000100"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) fanotify_mark(r0, 0x200, 0x8001032, r1, 0x0) syz_read_part_table(0x5f6, &(0x7f0000000000)="$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") 1.030069122s ago: executing program 1 (id=2859): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}], 0x18}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x4, 0x2, 0x0, 'queue1\x00', 0xffff0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 195.275301ms ago: executing program 7 (id=2860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f5, 0x200, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=2861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$vcsu(&(0x7f00000003c0), 0x4, 0x8000) dup2(r1, r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) fallocate(0xffffffffffffffff, 0x10, 0x63db, 0x1007fff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1, 0x18, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x50) kernel console output (not intermixed with test programs): 9] [ 450.200243][T10809] EXT4-fs (loop8): Total free blocks count 0 [ 450.214293][T10809] EXT4-fs (loop8): Free/Dirty block details [ 450.234174][T10809] EXT4-fs (loop8): free_blocks=4096 [ 450.260135][T10809] EXT4-fs (loop8): dirty_blocks=64 [ 450.277154][T10804] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 450.347277][T10809] EXT4-fs (loop8): Block reservation details [ 450.379969][T10804] EXT4-fs (loop8): This should not happen!! Data will be lost [ 450.379969][T10804] [ 451.631483][ T49] net_ratelimit: 40 callbacks suppressed [ 453.830595][T10874] loop8: detected capacity change from 0 to 16384 [ 454.450421][T10878] loop8: detected capacity change from 16384 to 16383 [ 454.911674][T10883] loop7: detected capacity change from 0 to 512 [ 455.059583][T10883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.035478][ T8299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.743843][ T8808] net_ratelimit: 28 callbacks suppressed [ 457.800483][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1089'. [ 461.029698][T10941] loop8: detected capacity change from 0 to 16384 [ 461.779970][ C1] net_ratelimit: 23 callbacks suppressed [ 462.304624][T10959] loop2: detected capacity change from 0 to 512 [ 462.321376][T10959] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: comm syz.2.1102: inode #2147418112: comm syz.2.1102: iget: illegal inode # [ 462.370586][T10959] EXT4-fs (loop2): no journal found [ 462.375871][T10959] EXT4-fs (loop2): can't get journal size [ 462.396811][T10959] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 462.470079][T10959] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 462.489288][T10959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.200080][T10965] loop8: detected capacity change from 16384 to 16383 [ 463.625252][T10974] EXT4-fs error (device loop2): ext4_lookup:1860: inode #15: comm syz.2.1102: inode has both inline data and extents flags [ 464.180537][T10962] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 465.010631][T10986] netlink: 'syz.9.1106': attribute type 1 has an invalid length. [ 465.427267][ T8304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.446043][T10992] bond7: (slave veth3): Enslaving as an active interface with a down link [ 465.491904][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1106'. [ 465.540549][T10986] 8021q: adding VLAN 0 to HW filter on device bond7 [ 465.612108][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1104'. [ 466.899953][ C0] net_ratelimit: 22 callbacks suppressed [ 467.691087][T11035] loop8: detected capacity change from 0 to 16384 [ 467.818143][T11036] loop7: detected capacity change from 0 to 512 [ 467.950530][T11036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 468.119993][T11036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.198930][T11036] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.292252][T11041] loop8: detected capacity change from 16384 to 16383 [ 468.348101][T11027] syzkaller0: entered promiscuous mode [ 468.471008][T11027] syzkaller0: entered allmulticast mode [ 468.687867][T11036] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 469.072203][T11036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.100747][ T1138] net_ratelimit: 24 callbacks suppressed [ 472.748256][T11103] loop2: detected capacity change from 0 to 256 [ 474.396935][T11121] loop2: detected capacity change from 0 to 1024 [ 474.456882][T11121] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 474.580065][T11121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.220190][ C0] net_ratelimit: 18 callbacks suppressed [ 478.196963][ T8304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.471781][T11169] warning: `syz.2.1135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 479.878294][T11180] futex_wake_op: syz.7.1138 tries to shift op by 144; fix this program [ 482.339969][ C0] net_ratelimit: 15 callbacks suppressed [ 487.054622][ T5815] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 487.243399][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.257480][ T5815] usb 3-1: string descriptor 0 read error: -22 [ 487.263886][ T5815] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 487.273126][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.619973][ C1] net_ratelimit: 26 callbacks suppressed [ 492.105344][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1157'. [ 492.117642][T11244] overlayfs: failed to resolve './file0': -2 [ 492.370107][ T5815] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 492.580092][ T5815] usb 9-1: Using ep0 maxpacket: 32 [ 492.602815][ T5815] usb 9-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 492.739962][ C1] net_ratelimit: 20 callbacks suppressed [ 492.825499][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.852128][ T5815] usb 9-1: Product: syz [ 492.856365][ T5815] usb 9-1: Manufacturer: syz [ 492.869168][ T5815] usb 9-1: SerialNumber: syz [ 492.876379][T11257] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1160'. [ 493.594151][ T5815] usb 9-1: failed waiting for Axe-Fx III to boot: -71 [ 493.608561][ T5815] snd-usb-audio: probe of 9-1:1.0 failed with error -71 [ 493.644030][ T5815] usb 9-1: USB disconnect, device number 2 [ 496.279470][ T5832] usb 3-1: USB disconnect, device number 3 [ 496.608531][T11285] xfrm0: entered allmulticast mode [ 496.648839][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1167'. [ 497.322851][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1178'. [ 497.602791][T11301] ip_vti0: left promiscuous mode [ 497.644371][T11301] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 497.789747][T11301] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 497.869957][ C0] net_ratelimit: 24 callbacks suppressed [ 498.099806][T11311] netlink: 'syz.7.1174': attribute type 4 has an invalid length. [ 498.124846][T11311] netlink: 'syz.7.1174': attribute type 4 has an invalid length. [ 498.133414][ T5778] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 498.330230][ T5778] usb 9-1: Using ep0 maxpacket: 16 [ 498.339274][ T5778] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.378935][ T5778] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.450118][ T5778] usb 9-1: config 0 interface 0 has no altsetting 0 [ 498.469708][ T5778] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 498.531187][ T5778] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.689139][ T5778] usb 9-1: config 0 descriptor?? [ 499.330948][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.399991][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.417595][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.446823][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.497909][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.617037][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.743061][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.770072][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.798611][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.820462][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.848176][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.870364][ T5778] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 499.897772][ T5778] magicmouse 0003:05AC:0269.0002: unbalanced collection at end of report description [ 499.918912][ T5778] magicmouse 0003:05AC:0269.0002: magicmouse hid parse failed [ 499.947738][ T5778] magicmouse: probe of 0003:05AC:0269.0002 failed with error -22 [ 500.010272][ T5778] usb 9-1: USB disconnect, device number 3 [ 500.190167][ T28] audit: type=1326 audit(1798120230.608:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.9.1176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f3679e159 code=0x0 [ 500.845155][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1182'. [ 501.557745][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.564345][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.586784][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1188'. [ 503.126065][T11365] overlayfs: missing 'lowerdir' [ 503.459950][ C1] net_ratelimit: 27 callbacks suppressed [ 504.087035][T11372] netlink: 'syz.7.1194': attribute type 1 has an invalid length. [ 504.629563][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1197'. [ 504.872458][T11377] bond1: (slave veth3): Enslaving as an active interface with a down link [ 504.926962][T11372] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1194'. [ 504.944610][T11388] loop8: detected capacity change from 0 to 256 [ 504.982530][T11372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.025324][T11388] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 505.570758][ T28] audit: type=1800 audit(1798120235.958:413): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1199" name="file1" dev="loop8" ino=1048616 res=0 errno=0 [ 505.843958][T11393] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1201'. [ 506.110101][ T28] audit: type=1800 audit(1798120235.988:414): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1199" name="file1" dev="loop8" ino=1048616 res=0 errno=0 [ 506.160417][T11393] netlink: 'syz.2.1201': attribute type 4 has an invalid length. [ 506.168223][T11393] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1201'. [ 507.142907][T11400] loop8: detected capacity change from 0 to 512 [ 507.295403][T11400] EXT4-fs (loop8): Test dummy encryption mode enabled [ 507.342557][T11400] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 507.429223][T11400] EXT4-fs (loop8): 1 truncate cleaned up [ 507.455581][T11400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.258003][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.664399][ T1149] net_ratelimit: 23 callbacks suppressed [ 510.127737][T11427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.301643][T11427] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.567377][T11427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.783469][T11451] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1216'. [ 512.983795][T11453] nftables ruleset with unbound set [ 514.419962][ C1] net_ratelimit: 16 callbacks suppressed [ 518.029187][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1226'. [ 518.107604][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1226'. [ 518.292801][T11489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.311532][T11489] bond2: (slave bond0): making interface the new active one [ 518.328783][T11489] bond2: (slave bond0): Enslaving as an active interface with an up link [ 518.350420][T11485] netlink: 'syz.8.1226': attribute type 4 has an invalid length. [ 518.367413][T11485] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1226'. [ 518.967942][T11485] .`: renamed from bond0 (while UP) [ 519.798475][T11510] loop8: detected capacity change from 0 to 128 [ 520.021019][T11510] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 520.045606][T11510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.100344][ C1] net_ratelimit: 22 callbacks suppressed [ 520.836353][T11516] tipc: Failed to remove unknown binding: 66,0,0/0:184101194/184101196 [ 522.413295][T11516] tipc: Failed to remove unknown binding: 66,0,0/0:184101194/184101195 [ 522.480795][T11516] tipc: Failed to remove unknown binding: 66,0,0/0:184101194/184101196 [ 522.540211][T11516] tipc: Failed to remove unknown binding: 66,0,0/0:184101194/184101195 [ 523.519466][T11540] fuse: Bad value for 'fd' [ 524.892435][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 525.219934][ C0] net_ratelimit: 35 callbacks suppressed [ 526.383426][T11575] loop8: detected capacity change from 0 to 512 [ 526.413619][T11575] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 526.480788][T11575] EXT4-fs (loop8): 1 truncate cleaned up [ 526.520688][T11575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.548579][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.010168][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 528.078314][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 528.199023][T11598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.225404][T11598] bond2: (slave bond0): Enslaving as an active interface with a down link [ 528.235533][T11596] netlink: 'syz.2.1252': attribute type 4 has an invalid length. [ 528.244111][T11596] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1252'. [ 528.257349][T11596] .`: renamed from bond0 (while UP) [ 528.409121][T11600] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 530.211750][T11627] mmap: syz.2.1260 (11627) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 530.288628][T11629] loop8: detected capacity change from 0 to 512 [ 530.340536][ T6463] net_ratelimit: 35 callbacks suppressed [ 530.505285][T11629] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 532.519691][T11648] netlink: 'syz.8.1268': attribute type 4 has an invalid length. [ 532.680608][T11648] netlink: 'syz.8.1268': attribute type 4 has an invalid length. [ 533.301309][T11657] netlink: 'syz.2.1270': attribute type 4 has an invalid length. [ 534.361174][T11658] 8021q: adding VLAN 0 to HW filter on device .` [ 535.380033][ C0] net_ratelimit: 24 callbacks suppressed [ 535.862209][T11681] netlink: 'syz.2.1275': attribute type 1 has an invalid length. [ 536.541776][T11681] netlink: 'syz.2.1275': attribute type 2 has an invalid length. [ 536.863983][T11672] bond0: Removing last arp target with arp_interval on [ 537.182237][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 537.858487][T11700] veth3: entered allmulticast mode [ 537.869513][T11700] bond3: (slave veth3): Enslaving as an active interface with an up link [ 540.415245][ C0] net_ratelimit: 18 callbacks suppressed [ 540.976454][T11730] bond0: Removing last arp target with arp_interval on [ 541.110732][T11732] netlink: 'syz.8.1289': attribute type 1 has an invalid length. [ 541.130528][T11732] netlink: 'syz.8.1289': attribute type 2 has an invalid length. [ 543.452525][T11753] loop8: detected capacity change from 0 to 512 [ 543.692359][T11753] EXT4-fs: Ignoring removed mblk_io_submit option [ 543.848903][T11756] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1285'. [ 545.225053][T11670] udevd[11670]: symlink '../../loop8' '/dev/disk/by-diskseq/213.tmp-b7:8' failed: Read-only file system [ 545.279751][T11670] udevd[11670]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 545.355276][T11753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.470195][T11753] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.491087][T11670] udevd[11670]: symlink '../../loop8' '/dev/disk/by-diskseq/213.tmp-b7:8' failed: Read-only file system [ 546.260189][ C1] net_ratelimit: 23 callbacks suppressed [ 546.382747][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.625097][T11775] bridge0: port 3(macvlan2) entered blocking state [ 546.650089][T11775] bridge0: port 3(macvlan2) entered disabled state [ 546.676701][T11775] macvlan2: entered allmulticast mode [ 546.700011][T11775] ip6gretap0: entered allmulticast mode [ 546.728142][T11775] macvlan2: entered promiscuous mode [ 546.751900][T11775] bridge0: port 3(macvlan2) entered blocking state [ 546.758628][T11775] bridge0: port 3(macvlan2) entered forwarding state [ 551.362213][ C0] net_ratelimit: 13 callbacks suppressed [ 551.420882][T11801] netlink: 'syz.9.1305': attribute type 4 has an invalid length. [ 551.973170][T11813] loop8: detected capacity change from 0 to 128 [ 552.326485][T11816] netlink: 'syz.2.1312': attribute type 8 has an invalid length. [ 556.431301][ T34] net_ratelimit: 20 callbacks suppressed [ 558.863008][T11880] loop8: detected capacity change from 0 to 1024 [ 558.881214][T11880] EXT4-fs: inline encryption not supported [ 558.889068][T11880] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 558.974391][T11880] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #3: block 1: comm syz.8.1329: lblock 1 mapped to illegal pblock 1 (length 1) [ 559.049360][T11880] EXT4-fs (loop8): Remounting filesystem read-only [ 559.057419][T11880] Quota error (device loop8): write_blk: dquota write failed [ 559.065367][T11880] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 559.075633][T11880] EXT4-fs (loop8): 1 orphan inode deleted [ 559.083401][T11880] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.217011][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.468447][T11892] futex_wake_op: syz.8.1332 tries to shift op by 32; fix this program [ 560.642372][T11916] loop8: detected capacity change from 0 to 128 [ 560.780898][T11916] loop8: detected capacity change from 128 to 1 [ 560.825422][T11916] syz.8.1337: attempt to access beyond end of device [ 560.825422][T11916] loop8: rw=2049, sector=28, nr_sectors = 4 limit=1 [ 560.874246][T11916] Buffer I/O error on dev loop8, logical block 7, lost sync page write [ 561.451416][T11934] netlink: 'syz.9.1342': attribute type 29 has an invalid length. [ 561.459350][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1342'. [ 561.473284][T11934] netlink: 'syz.9.1342': attribute type 29 has an invalid length. [ 561.481234][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1342'. [ 561.619926][ C1] net_ratelimit: 22 callbacks suppressed [ 562.989374][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.000614][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.528147][T11956] netlink: 'syz.9.1346': attribute type 4 has an invalid length. [ 563.677549][T11962] loop8: detected capacity change from 0 to 128 [ 564.073381][T11966] syz.8.1348 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 564.114139][T11965] netlink: 'syz.9.1346': attribute type 4 has an invalid length. [ 564.909272][T11968] netlink: 'syz.7.1349': attribute type 322 has an invalid length. [ 567.069905][ C1] net_ratelimit: 19 callbacks suppressed [ 567.963732][ T5778] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 568.167677][T12006] wg1: entered promiscuous mode [ 568.195788][T12006] wg1: entered allmulticast mode [ 568.218084][ T5778] usb 9-1: config 0 has no interfaces? [ 568.250520][ T5778] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.259639][ T5778] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.390701][ T5778] usb 9-1: Product: syz [ 568.395035][ T5778] usb 9-1: Manufacturer: syz [ 568.400908][ T5778] usb 9-1: SerialNumber: syz [ 568.432161][ T5778] usb 9-1: config 0 descriptor?? [ 568.827508][ T5778] usb 9-1: USB disconnect, device number 4 [ 569.050001][T12012] netlink: 'syz.7.1361': attribute type 4 has an invalid length. [ 569.138492][T12014] bridge2: entered promiscuous mode [ 569.150265][T12014] bridge2: entered allmulticast mode [ 569.162186][T12014] team0: Port device bridge2 added [ 569.178312][T12015] bridge0: port 4(team0) entered blocking state [ 569.209506][T12015] bridge0: port 4(team0) entered disabled state [ 569.218598][T12015] team0: entered allmulticast mode [ 569.229888][T12015] team_slave_0: entered allmulticast mode [ 569.257143][T12015] team_slave_1: entered allmulticast mode [ 569.286789][T12015] team0: entered promiscuous mode [ 569.294518][T12015] team_slave_0: entered promiscuous mode [ 569.312264][T12015] team_slave_1: entered promiscuous mode [ 569.356861][T12018] netlink: 'syz.7.1361': attribute type 4 has an invalid length. [ 572.173902][ C1] net_ratelimit: 24 callbacks suppressed [ 572.812691][T12045] loop0: detected capacity change from 0 to 32768 [ 573.749365][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1376'. [ 575.709691][T12070] loop8: detected capacity change from 0 to 2048 [ 577.343943][T12070] EXT4-fs warning (device loop8): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop8. [ 577.700158][ C1] net_ratelimit: 23 callbacks suppressed [ 577.793515][T12078] syzkaller0: entered promiscuous mode [ 577.816486][T12078] syzkaller0: entered allmulticast mode [ 577.835587][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1382'. [ 577.880812][T12078] tipc: Enabled bearer , priority 0 [ 577.896095][T12076] tipc: Resetting bearer [ 578.282741][T12076] tipc: Disabling bearer [ 580.390362][T12112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1391'. [ 580.778976][T12116] syz.8.1393: attempt to access beyond end of device [ 580.778976][T12116] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 581.685336][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1396'. [ 581.933224][T12134] loop8: detected capacity change from 0 to 512 [ 581.981304][T12134] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 582.029162][T12134] EXT4-fs (loop8): 1 truncate cleaned up [ 582.072308][T12134] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.137298][T12134] EXT4-fs error (device loop8): ext4_get_parent:1912: comm syz.8.1397: inode #2: comm syz.8.1397: iget: illegal inode # [ 582.357908][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.831126][ T6463] net_ratelimit: 15 callbacks suppressed [ 583.531991][ T28] audit: type=1326 audit(1798120319.964:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3679e159 code=0x7ffc0000 [ 583.666862][ T28] audit: type=1326 audit(1798120319.964:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3679e159 code=0x7ffc0000 [ 583.915645][ T28] audit: type=1326 audit(1798120319.964:417): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6f3679df87 code=0x7ffc0000 [ 584.250265][ T28] audit: type=1326 audit(1798120319.964:418): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f3675e98e code=0x7ffc0000 [ 584.367219][ T28] audit: type=1326 audit(1798120319.964:419): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6f3675e98e code=0x7ffc0000 [ 584.493992][ T28] audit: type=1326 audit(1798120319.964:420): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3679e159 code=0x7ffc0000 [ 584.594994][ T28] audit: type=1326 audit(1798120320.054:421): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3679e159 code=0x7ffc0000 [ 584.626125][T12179] netlink: 'syz.7.1408': attribute type 1 has an invalid length. [ 584.671314][ T28] audit: type=1326 audit(1798120320.104:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3679e159 code=0x7ffc0000 [ 584.697276][ T28] audit: type=1326 audit(1798120320.104:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6f3679e159 code=0x7ffc0000 [ 584.721756][ T28] audit: type=1326 audit(1798120320.104:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.9.1407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f3679dec2 code=0x7ffc0000 [ 584.914965][T12186] veth5: entered allmulticast mode [ 584.937554][T12186] bond2: (slave veth5): Enslaving as an active interface with a down link [ 584.980363][T12179] veth0_to_bond: left promiscuous mode [ 584.998457][T12179] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 588.467747][T12210] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 588.500043][ C1] net_ratelimit: 17 callbacks suppressed [ 589.726844][T12218] netlink: 'syz.8.1419': attribute type 1 has an invalid length. [ 589.818639][T12220] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.827786][T12220] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.836997][T12220] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.845974][T12220] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.857599][T12220] bond3: (slave geneve2): making interface the new active one [ 589.867491][T12220] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 590.067329][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1419'. [ 590.087273][T12218] 8021q: adding VLAN 0 to HW filter on device bond3 [ 591.174224][T12230] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.186987][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.233606][T12232] netlink: 'syz.8.1421': attribute type 16 has an invalid length. [ 591.271552][T12232] netlink: 'syz.8.1421': attribute type 17 has an invalid length. [ 591.314374][T12232] erspan0: left promiscuous mode [ 591.332281][T12232] 8021q: adding VLAN 0 to HW filter on device .` [ 592.783900][T12248] vlan2: entered promiscuous mode [ 593.621637][ T49] net_ratelimit: 18 callbacks suppressed [ 597.006345][T12286] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 597.026123][T12286] syzkaller0: entered promiscuous mode [ 597.241287][T12286] syzkaller0: entered allmulticast mode [ 597.752722][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 598.661291][ C1] net_ratelimit: 13 callbacks suppressed [ 601.833640][T12301] IPVS: Error connecting to the multicast addr [ 603.968329][T11194] net_ratelimit: 12 callbacks suppressed [ 607.848081][T12380] fuse: Bad value for 'fd' [ 607.892728][T12385] syzkaller0: entered promiscuous mode [ 607.898275][T12385] syzkaller0: entered allmulticast mode [ 607.933889][T12386] tipc: Enabled bearer , priority 0 [ 607.970945][T12382] tipc: Resetting bearer [ 608.053267][T12382] tipc: Disabling bearer [ 608.672900][T12403] loop8: detected capacity change from 0 to 512 [ 608.718089][T12403] ext4: Unknown parameter 'fsname' [ 609.062541][ C1] net_ratelimit: 14 callbacks suppressed [ 610.288048][T12418] geneve3: entered promiscuous mode [ 610.294140][T12418] geneve3: entered allmulticast mode [ 610.836225][T12424] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1473'. [ 610.855410][ T5778] IPVS: starting estimator thread 0... [ 610.879455][T12424] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 610.896619][T12424] bridge1: entered promiscuous mode [ 610.953036][T12425] IPVS: using max 20 ests per chain, 48000 per kthread [ 611.034743][T12429] pimreg: entered allmulticast mode [ 611.040221][T12424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 611.048899][T12424] IPv6: NLM_F_CREATE should be set when creating new route [ 611.198223][T12424] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1473'. [ 611.700145][T12424] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 611.742446][T12424] bridge2: entered promiscuous mode [ 611.773201][T12431] pimreg: left allmulticast mode [ 614.187075][T10541] net_ratelimit: 20 callbacks suppressed [ 614.570456][T12468] netlink: 550 bytes leftover after parsing attributes in process `syz.7.1487'. [ 617.814369][T12491] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8304] was attempted by " [ 618.383942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 619.306571][ C0] net_ratelimit: 9 callbacks suppressed [ 620.114093][ T8384] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 620.324953][ T8384] usb 9-1: unable to get BOS descriptor or descriptor too short [ 620.340198][ T8384] usb 9-1: no configurations [ 620.346563][ T8384] usb 9-1: can't read configurations, error -22 [ 621.099922][T12527] ceph: No mds server is up or the cluster is laggy [ 622.929748][T12552] (null): rxe_set_mtu: Set mtu to 1024 [ 622.950142][T12552] wg1 speed is unknown, defaulting to 1000 [ 622.987548][T12552] wg1 speed is unknown, defaulting to 1000 [ 623.023301][T12552] wg1 speed is unknown, defaulting to 1000 [ 623.645711][T12552] infiniband syz2: set down [ 623.651047][T12552] infiniband syz2: added wg1 [ 623.660805][ T5763] wg1 speed is unknown, defaulting to 1000 [ 623.669502][T12552] syz2: rxe_create_cq: returned err = -12 [ 623.676467][T12552] infiniband syz2: Couldn't create ib_mad CQ [ 623.682857][T12552] infiniband syz2: Couldn't open port 1 [ 623.739860][T12552] RDS/IB: syz2: added [ 623.745473][T12552] smc: adding ib device syz2 with port count 1 [ 623.752015][T12552] smc: ib device syz2 port 1 has pnetid [ 623.768944][T12552] wg1 speed is unknown, defaulting to 1000 [ 623.803153][ T8384] wg1 speed is unknown, defaulting to 1000 [ 624.014019][T12552] wg1 speed is unknown, defaulting to 1000 [ 624.200521][T12552] wg1 speed is unknown, defaulting to 1000 [ 624.754416][ C1] net_ratelimit: 15 callbacks suppressed [ 624.824705][T12552] wg1 speed is unknown, defaulting to 1000 [ 624.999426][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.005901][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.151499][T12552] wg1 speed is unknown, defaulting to 1000 [ 625.325378][T12552] wg1 speed is unknown, defaulting to 1000 [ 625.463994][T12552] wg1 speed is unknown, defaulting to 1000 [ 628.154094][T12583] syz_tun: entered allmulticast mode [ 630.025089][ C0] net_ratelimit: 13 callbacks suppressed [ 632.925237][T12620] loop8: detected capacity change from 0 to 8 [ 633.011922][T12620] SQUASHFS error: lzo decompression failed, data probably corrupt [ 633.041702][T12620] SQUASHFS error: Failed to read block 0x91: -5 [ 633.065544][T12620] SQUASHFS error: Unable to read metadata cache entry [8f] [ 633.072964][T12620] SQUASHFS error: Unable to read inode 0x11f [ 635.105030][T12631] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 635.376913][ T1138] net_ratelimit: 18 callbacks suppressed [ 635.951388][T12641] (null): rxe_set_mtu: Set mtu to 1024 [ 635.972556][T12641] rdma_rxe: rxe_newlink: failed to add wg1 [ 636.435936][ T5785] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 636.446467][ T5785] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 640.427123][ T996] net_ratelimit: 10 callbacks suppressed [ 640.517199][ T5785] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 640.531297][ T5785] Bluetooth: hci1: Injecting HCI hardware error event [ 640.543849][ T51] Bluetooth: hci1: hardware error 0x00 [ 641.051230][T12687] __vm_enough_memory: pid: 12687, comm: syz.2.1547, not enough memory for the allocation [ 642.667297][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 645.553788][ T996] net_ratelimit: 9 callbacks suppressed [ 649.207105][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1563'. [ 650.667542][ C1] net_ratelimit: 24 callbacks suppressed [ 654.145565][T12778] wg1 speed is unknown, defaulting to 1000 [ 654.809690][T12783] wg1 speed is unknown, defaulting to 1000 [ 655.790309][ T996] net_ratelimit: 11 callbacks suppressed [ 659.994030][ T51] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 660.004551][ T51] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 660.909584][ T987] net_ratelimit: 10 callbacks suppressed [ 661.932193][T12870] loop8: detected capacity change from 0 to 256 [ 661.956091][T12870] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 661.995291][T12870] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 662.055647][T12870] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 662.095892][T12870] exFAT-fs (loop8): failed to load alloc-bitmap [ 662.131603][T12870] exFAT-fs (loop8): failed to recognize exfat type [ 664.048333][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 664.057905][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 664.072692][ T51] Bluetooth: hci4: hardware error 0x00 [ 665.972658][ T987] net_ratelimit: 8 callbacks suppressed [ 666.200811][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 666.499536][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'. [ 671.276128][ T1149] net_ratelimit: 6 callbacks suppressed [ 673.702610][T12973] netlink: 'syz.2.1622': attribute type 4 has an invalid length. [ 673.712225][T12973] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1622'. [ 674.578150][T12983] netlink: 'syz.8.1618': attribute type 10 has an invalid length. [ 674.606452][T12975] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1623'. [ 676.257817][T12983] team0 (unregistering): Port device team_slave_0 removed [ 676.351757][ T1138] net_ratelimit: 16 callbacks suppressed [ 677.569274][T12983] team0 (unregistering): Port device team_slave_1 removed [ 678.083445][T13013] wg1 speed is unknown, defaulting to 1000 [ 679.350508][T13029] No such timeout policy "syz1" [ 680.670610][T13040] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 682.031486][ T1138] net_ratelimit: 15 callbacks suppressed [ 686.151764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 686.169068][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.175859][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.843314][T10541] net_ratelimit: 12 callbacks suppressed [ 688.956465][T13130] tipc: Enabling of bearer rejected, failed to enable media [ 690.072509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 690.417861][T13142] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.923569][ T1149] net_ratelimit: 12 callbacks suppressed [ 697.054153][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1673'. [ 697.192763][T13177] bond4: entered promiscuous mode [ 697.208917][T13177] bond4: entered allmulticast mode [ 698.033191][ C0] net_ratelimit: 11 callbacks suppressed [ 700.833275][T13197] atomic_op ffff888030fdb998 conn xmit_atomic 0000000000000000 [ 701.917651][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 701.917718][ T28] audit: type=1800 audit(1798120951.348:475): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1680" name="bus" dev="ramfs" ino=30964 res=0 errno=0 [ 702.263880][ T28] audit: type=1326 audit(1798120951.638:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.7.1691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9376b9e159 code=0x0 [ 703.183965][T11194] net_ratelimit: 12 callbacks suppressed [ 703.643418][T13232] unsupported nlmsg_type 40 [ 708.676821][ T1149] net_ratelimit: 9 callbacks suppressed [ 709.914330][T13298] syzkaller0: entered promiscuous mode [ 709.928467][T13298] syzkaller0: entered allmulticast mode [ 710.289274][T13303] loop8: detected capacity change from 0 to 128 [ 710.672215][T13303] EXT4-fs (loop8): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 711.444200][T13008] udevd[13008]: incorrect ext4 checksum on /dev/loop8 [ 713.821613][T10541] net_ratelimit: 25 callbacks suppressed [ 715.509801][T13338] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1717'. [ 715.554508][T13338] .`: entered allmulticast mode [ 715.580268][T13338] bond_slave_0: entered allmulticast mode [ 715.610812][T13338] bond_slave_1: entered allmulticast mode [ 715.698876][T13340] bond3: option use_carrier: invalid value (5) [ 715.708992][T13340] bond3 (unregistering): Released all slaves [ 717.643229][T13357] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 718.201749][T13360] 8021q: adding VLAN 0 to HW filter on device .` [ 719.157604][ T987] net_ratelimit: 16 callbacks suppressed [ 724.030079][T11194] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.197130][ T1138] net_ratelimit: 13 callbacks suppressed [ 725.372894][T11194] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.722302][T13397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.215097][T11194] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.085977][T11194] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.151959][T13430] syzkaller0: entered promiscuous mode [ 729.172886][T13430] syzkaller0: entered allmulticast mode [ 729.316969][ T8808] net_ratelimit: 12 callbacks suppressed [ 729.847433][T13443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 730.099104][T13449] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.157479][T13449] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.166395][T13449] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.177037][T13449] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.211920][T13449] bond3: (slave geneve2): making interface the new active one [ 730.234597][T13449] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 730.758304][ T28] audit: type=1326 audit(1798120980.195:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.2.1743" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52cc19e159 code=0x0 [ 730.842631][T13468] atomic_op ffff88801efb3998 conn xmit_atomic 0000000000000000 [ 732.252992][T13478] loop8: detected capacity change from 0 to 512 [ 732.295899][T13478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 732.323700][T13478] System zones: 1-12 [ 732.941680][T13478] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1745: corrupted in-inode xattr: e_value size too large [ 733.358443][T13478] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1745: couldn't read orphan inode 15 (err -117) [ 733.411353][T13478] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.829806][T13496] dns_resolver: Unsupported server list version (6) [ 734.260237][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.538686][ T12] net_ratelimit: 10 callbacks suppressed [ 737.137600][ T28] audit: type=1800 audit(1798120986.564:478): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1755" name="memory_backed" dev="configfs" ino=31543 res=0 errno=0 [ 737.186399][ T28] audit: type=1800 audit(1798120986.604:479): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1755" name="zone_nr_conv" dev="configfs" ino=31545 res=0 errno=0 [ 737.250493][T11194] hsr_slave_0: left promiscuous mode [ 737.282431][ T28] audit: type=1800 audit(1798120986.604:480): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1755" name="power" dev="configfs" ino=31546 res=0 errno=0 [ 737.340693][T11194] hsr_slave_1: left promiscuous mode [ 737.397277][T11194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.404908][T11194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.464390][T11194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.472458][T11194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.486569][T11194] bridge_slave_1: left allmulticast mode [ 737.493074][T11194] bridge_slave_1: left promiscuous mode [ 737.499861][T11194] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.517449][T13531] null_blk: disk nullb1 created [ 737.530166][T11194] bridge_slave_0: left allmulticast mode [ 737.535894][T11194] bridge_slave_0: left promiscuous mode [ 737.543623][T11194] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.627842][T11194] veth1_macvtap: left promiscuous mode [ 737.633535][T11194] veth0_macvtap: left promiscuous mode [ 737.656077][T11194] veth1_vlan: left promiscuous mode [ 737.686773][T11194] veth0_vlan: left promiscuous mode [ 738.314937][T11194] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 738.490093][T11194] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 738.571499][T11194] bond2 (unregistering): Released all slaves [ 738.686495][T11194] bond1 (unregistering): Released all slaves [ 739.899897][ T11] net_ratelimit: 9 callbacks suppressed [ 741.946575][T11194] team0 (unregistering): Port device team_slave_1 removed [ 742.012527][T11194] team0 (unregistering): Port device team_slave_0 removed [ 742.127298][T11194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.901640][T11194] bond0 (unregistering): Released all slaves [ 745.053668][T13551] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 746.045509][ T1149] net_ratelimit: 8 callbacks suppressed [ 747.325089][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.333174][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.516801][T13612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 750.641487][T13637] syzkaller0: entered promiscuous mode [ 750.659928][T13637] syzkaller0: entered allmulticast mode [ 751.479240][T13644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.800135][ C1] net_ratelimit: 8 callbacks suppressed [ 755.194447][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 756.856639][T11194] net_ratelimit: 11 callbacks suppressed [ 758.852779][ T28] audit: type=1800 audit(1798121008.242:481): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1797" name="memory_backed" dev="configfs" ino=32865 res=0 errno=0 [ 759.000635][ T28] audit: type=1800 audit(1798121008.262:482): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1797" name="zone_nr_conv" dev="configfs" ino=32866 res=0 errno=0 [ 759.336921][ T28] audit: type=1800 audit(1798121008.262:483): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1797" name="power" dev="configfs" ino=32867 res=0 errno=0 [ 761.974021][ T12] net_ratelimit: 2 callbacks suppressed [ 762.597481][T13754] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1802'. [ 763.981520][T13766] tipc: Enabling of bearer rejected, failed to enable media [ 767.493417][ T996] net_ratelimit: 7 callbacks suppressed [ 768.241218][ T28] audit: type=1326 audit(1798121016.671:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13809 comm="syz.9.1812" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f3679e159 code=0x0 [ 768.554733][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1816'. [ 769.217457][T13821] netdevsim netdevsim2: loading .// failed with error -22 [ 769.280643][T13821] netdevsim netdevsim2: loading /lib/firmware// failed with error -22 [ 769.289587][T13821] netdevsim netdevsim2: Direct firmware load for / failed with error -22 [ 769.298486][T13821] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 769.761918][T13819] bridge3: port 1(veth7) entered blocking state [ 769.768404][T13819] bridge3: port 1(veth7) entered disabled state [ 769.828063][T13819] veth7: entered allmulticast mode [ 769.848675][T13819] veth7: entered promiscuous mode [ 770.026061][T13826] bond2: (slave veth0_to_bond): Releasing active interface [ 770.320182][T13826] bridge3: port 2(veth0_to_bond) entered blocking state [ 770.477995][T13826] bridge3: port 2(veth0_to_bond) entered disabled state [ 770.625765][T13826] veth0_to_bond: entered allmulticast mode [ 770.664208][T13826] veth0_to_bond: entered promiscuous mode [ 770.878300][T13834] bridge3: port 3(veth9) entered blocking state [ 770.892220][T13834] bridge3: port 3(veth9) entered disabled state [ 770.910568][T13834] veth9: entered allmulticast mode [ 770.930693][T13834] veth9: entered promiscuous mode [ 773.471778][ T996] net_ratelimit: 6 callbacks suppressed [ 778.907244][ T11] net_ratelimit: 8 callbacks suppressed [ 778.965066][ T28] audit: type=1326 audit(1798121028.389:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.2.1837" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52cc19e159 code=0x0 [ 780.883245][T13966] netlink: 'syz.7.1842': attribute type 3 has an invalid length. [ 783.260859][ T28] audit: type=1326 audit(1798121032.679:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.8.1848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8e2b9e159 code=0x0 [ 784.940516][ T996] net_ratelimit: 7 callbacks suppressed [ 785.002092][T14007] loop8: detected capacity change from 0 to 1024 [ 785.043896][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1845'. [ 785.143675][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.152027][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.195800][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.223128][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.310116][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.333551][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.384315][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.400207][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.432209][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.440524][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.494689][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.502197][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.525224][T14022] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.532654][T14022] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.582632][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.600285][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.637690][T14022] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.650155][T14022] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.681018][T14011] bridge3: port 1(veth5) entered blocking state [ 785.687635][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.703909][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.730630][T14022] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.757725][T14022] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.783816][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.800053][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.800511][T14011] bridge3: port 1(veth5) entered disabled state [ 785.830023][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.852474][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.872384][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.885846][T14007] hfsplus: request for non-existent node 33423360 in B*Tree [ 785.950493][T14011] veth5: entered allmulticast mode [ 786.103046][T14011] veth5: entered promiscuous mode [ 786.152340][T14012] bridge3: port 2(veth0_to_bond) entered blocking state [ 786.221892][T14012] bridge3: port 2(veth0_to_bond) entered disabled state [ 786.276221][T14012] veth0_to_bond: entered allmulticast mode [ 786.334599][T14012] veth0_to_bond: entered promiscuous mode [ 786.702721][T14019] bridge3: port 3(veth7) entered blocking state [ 786.712056][T14019] bridge3: port 3(veth7) entered disabled state [ 786.726081][T14019] veth7: entered allmulticast mode [ 786.737984][T14019] veth7: entered promiscuous mode [ 787.423840][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1853'. [ 787.443444][T14033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.705921][T14033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.127985][ T6463] net_ratelimit: 8 callbacks suppressed [ 792.507101][T14106] futex_wake_op: syz.9.1863 tries to shift op by 144; fix this program [ 793.273484][T14109] syzkaller0: entered promiscuous mode [ 793.291051][T14109] syzkaller0: entered allmulticast mode [ 793.863979][T14118] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1868'. [ 794.331551][T14118] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1868'. [ 795.326009][ T1149] net_ratelimit: 8 callbacks suppressed [ 797.487740][T14156] loop8: detected capacity change from 0 to 4096 [ 797.698635][T14166] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 798.654497][T14181] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1877'. [ 801.086675][T11194] net_ratelimit: 8 callbacks suppressed [ 804.133680][T14241] netlink: 'syz.9.1885': attribute type 3 has an invalid length. [ 806.205838][ C0] net_ratelimit: 6 callbacks suppressed [ 809.256751][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.263148][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.877934][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 814.618719][ T12] net_ratelimit: 6 callbacks suppressed [ 818.877861][T14386] syzkaller0: entered promiscuous mode [ 818.886628][T14386] syzkaller0: entered allmulticast mode [ 818.925336][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1911'. [ 820.213248][ T987] net_ratelimit: 20 callbacks suppressed [ 826.048106][ C0] net_ratelimit: 5 callbacks suppressed [ 826.447373][T14447] syzkaller0: entered promiscuous mode [ 826.454500][T14447] syzkaller0: entered allmulticast mode [ 827.140989][T14450] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8299] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14450] [ 827.347435][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'. [ 827.357510][T14458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.451792][T14458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.510860][T14457] tipc: Enabling of bearer rejected, already enabled [ 827.857229][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 833.322890][ T987] net_ratelimit: 8 callbacks suppressed [ 833.391955][T14502] tipc: Started in network mode [ 833.396893][T14502] tipc: Node identity 7f000001, cluster identity 4711 [ 833.405044][T14502] tipc: Enabled bearer , priority 10 [ 833.491576][T14504] lo: entered allmulticast mode [ 833.508664][T14503] lo: left allmulticast mode [ 834.661608][ T5815] tipc: Node number set to 2130706433 [ 838.450879][ T6231] net_ratelimit: 17 callbacks suppressed [ 841.301914][T14560] syzkaller0: entered promiscuous mode [ 841.307529][T14560] syzkaller0: entered allmulticast mode [ 843.981308][ T34] net_ratelimit: 7 callbacks suppressed [ 849.672296][ T34] net_ratelimit: 7 callbacks suppressed [ 850.103360][T14633] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 852.823600][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1975'. [ 853.225956][T14661] loop8: detected capacity change from 0 to 128 [ 853.318120][T14661] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 853.628219][T14659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 854.907509][ T6231] net_ratelimit: 6 callbacks suppressed [ 856.997989][ T11] kworker/u4:0: attempt to access beyond end of device [ 856.997989][ T11] loop8: rw=1, sector=156, nr_sectors = 1 limit=128 [ 857.087167][ T11] Buffer I/O error on dev loop8, logical block 156, lost async page write [ 857.167299][ T11] kworker/u4:0: attempt to access beyond end of device [ 857.167299][ T11] loop8: rw=1, sector=157, nr_sectors = 1 limit=128 [ 857.235110][ T11] Buffer I/O error on dev loop8, logical block 157, lost async page write [ 857.243805][ T11] kworker/u4:0: attempt to access beyond end of device [ 857.243805][ T11] loop8: rw=1, sector=158, nr_sectors = 1 limit=128 [ 857.257270][ T11] Buffer I/O error on dev loop8, logical block 158, lost async page write [ 857.265905][ T11] kworker/u4:0: attempt to access beyond end of device [ 857.265905][ T11] loop8: rw=1, sector=159, nr_sectors = 1 limit=128 [ 857.279262][ T11] Buffer I/O error on dev loop8, logical block 159, lost async page write [ 857.287900][ T11] kworker/u4:0: attempt to access beyond end of device [ 857.287900][ T11] loop8: rw=1, sector=160, nr_sectors = 1 limit=128 [ 857.301329][ T11] Buffer I/O error on dev loop8, logical block 160, lost async page write [ 857.331030][ T11] kworker/u4:0: attempt to access beyond end of device [ 857.331030][ T11] loop8: rw=1, sector=161, nr_sectors = 1 limit=128 [ 857.991796][ T11] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 858.021210][ T11] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 858.371157][ T28] audit: type=1326 audit(1798121107.780:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.8.1987" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8e2b9e159 code=0x0 [ 859.481496][T14710] netlink: 'syz.9.1990': attribute type 1 has an invalid length. [ 860.544612][ T34] net_ratelimit: 9 callbacks suppressed [ 860.657046][T14710] 8021q: adding VLAN 0 to HW filter on device bond8 [ 860.738832][T14717] veth0_to_bond: left allmulticast mode [ 860.795050][T14717] veth0_to_bond: left promiscuous mode [ 860.811275][T14717] bridge3: port 2(veth0_to_bond) entered disabled state [ 860.850207][T14733] md: array md0 already initialised! [ 860.887742][T14717] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 862.254346][T14733] md: pers->run() failed ... [ 862.420750][ T6231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.472382][ T6231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.891135][ T28] audit: type=1326 audit(1798121112.300:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14743 comm="syz.8.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8e2b9e159 code=0x0 [ 864.569343][ T6231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.581278][ T6231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.993577][ T34] net_ratelimit: 7 callbacks suppressed [ 866.097957][ T28] audit: type=1326 audit(1798121115.499:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.7.2004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9376b9e159 code=0x0 [ 866.306103][ T6231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.352690][ T6231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.448353][ T6231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.767907][ T6231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.796046][ T28] audit: type=1326 audit(1798121118.209:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.2.2010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52cc19e159 code=0x0 [ 870.218971][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.225615][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.237813][ T28] audit: type=1326 audit(1798121119.649:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.8.2016" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8e2b9e159 code=0x0 [ 871.294786][ T5763] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 871.503353][ T5763] usb 9-1: Using ep0 maxpacket: 32 [ 871.518036][ T5763] usb 9-1: config 164 has an invalid interface number: 195 but max is 0 [ 873.471069][ T6463] net_ratelimit: 7 callbacks suppressed [ 873.481741][ T5763] usb 9-1: config 164 has no interface number 0 [ 873.493579][ T5763] usb 9-1: config 164 interface 195 has no altsetting 0 [ 873.621726][ T5763] usb 9-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 873.640253][ T5763] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.662283][ T5763] usb 9-1: Product: syz [ 873.666970][ T5763] usb 9-1: Manufacturer: syz [ 873.671709][ T5763] usb 9-1: SerialNumber: syz [ 874.647853][ T5763] usb 9-1: USB disconnect, device number 7 [ 876.729433][ T6231] hsr_slave_0: left promiscuous mode [ 877.470230][ T6231] hsr_slave_1: left promiscuous mode [ 877.570259][ T6231] bond2: left allmulticast mode [ 877.581615][ T6231] bond2: left promiscuous mode [ 877.589297][ T6231] veth1_macvtap: left promiscuous mode [ 877.604121][ T6231] veth0_macvtap: left promiscuous mode [ 877.626759][ T6231] veth1_vlan: left promiscuous mode [ 877.639318][ T6231] veth0_vlan: left promiscuous mode [ 878.256743][ T6231] team0 (unregistering): Port device macvlan2 removed [ 878.597238][ T987] net_ratelimit: 6 callbacks suppressed [ 879.465742][ T6231] bond2 (unregistering): Released all slaves [ 879.531152][ T6231] bond1 (unregistering): (slave bridge1): Releasing active interface [ 879.787157][ T6231] bond1 (unregistering): Released all slaves [ 883.847279][T14923] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2032'. [ 883.939557][T14923] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2032'. [ 884.057089][ T6463] net_ratelimit: 2 callbacks suppressed [ 884.081853][T14923] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2032'. [ 884.128734][ T6231] bond0 (unregistering): Released all slaves [ 884.439988][T14885] lo: Caught tx_queue_len zero misconfig [ 885.270742][T14891] netlink: 'syz.2.2024': attribute type 10 has an invalid length. [ 885.452596][T14891] team0 (unregistering): Port device team_slave_0 removed [ 885.506704][T14891] team0 (unregistering): Port device team_slave_1 removed [ 885.595053][T14911] netlink: 'syz.7.2027': attribute type 14 has an invalid length. [ 885.602993][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2027'. [ 885.635243][T14911] bond0: option xmit_hash_policy: invalid value (183) [ 886.295443][ T5763] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 886.663708][ T5763] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 886.727093][ T5763] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 886.751534][ T5763] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.805969][ T5763] usb 9-1: Product: syz [ 886.851054][ T5763] usb 9-1: Manufacturer: syz [ 886.903197][ T5763] usb 9-1: SerialNumber: syz [ 888.674412][ T5763] usb 9-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 888.685929][ T5763] usb 9-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 888.693302][ T5763] usb 9-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 888.710721][ T5763] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 888.912671][ T6231] IPVS: stop unused estimator thread 0... [ 889.015738][ T5763] usb 9-1: USB disconnect, device number 8 [ 889.133835][T14701] udevd[14701]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.237202][T14983] loop8: detected capacity change from 0 to 512 [ 889.259667][ T34] net_ratelimit: 3 callbacks suppressed [ 889.281529][T14983] EXT4-fs: Ignoring removed nomblk_io_submit option [ 889.343194][T14983] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 889.423209][T14983] EXT4-fs (loop8): 1 truncate cleaned up [ 889.510595][T14983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.200341][T14983] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.017430][T15028] ipvlan2: entered allmulticast mode [ 893.022770][T15028] macvlan1: entered allmulticast mode [ 893.029843][T15028] batman_adv: batadv0: Adding interface: ipvlan2 [ 893.036286][T15028] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.038567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 893.062209][T15028] batman_adv: batadv0: Interface activated: ipvlan2 [ 894.535913][ C0] net_ratelimit: 3 callbacks suppressed [ 895.161029][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2052'. [ 895.705600][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2052'. [ 896.041729][T15046] netlink: set zone limit has 8 unknown bytes [ 897.390345][T15062] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2066'. [ 899.880041][ T34] net_ratelimit: 2 callbacks suppressed [ 905.434947][ T6463] net_ratelimit: 3 callbacks suppressed [ 905.875728][T15115] loop8: detected capacity change from 0 to 64 [ 909.304094][T15139] loop8: detected capacity change from 0 to 1024 [ 909.409527][T15139] EXT4-fs: Ignoring removed oldalloc option [ 909.416155][T15139] EXT4-fs: Ignoring removed orlov option [ 909.586012][T15139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.640895][T15139] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.539550][ T8808] net_ratelimit: 2 callbacks suppressed [ 911.571056][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 915.669619][ T1149] net_ratelimit: 3 callbacks suppressed [ 920.716210][ T28] audit: type=1326 audit(1798121170.123:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.9.2092" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f3679e159 code=0x0 [ 921.210804][T15248] tipc: Started in network mode [ 921.215806][T15248] tipc: Node identity ac1414aa, cluster identity 4711 [ 921.259393][T15248] tipc: New replicast peer: 172.20.20.187 [ 921.281905][T15248] tipc: Enabled bearer , priority 10 [ 922.269224][ T5778] tipc: Node number set to 2886997162 [ 924.206568][T15282] zram0: detected capacity change from 0 to 8 [ 925.909899][ T12] net_ratelimit: 4 callbacks suppressed [ 926.059198][T15323] netlink: 'syz.8.2102': attribute type 1 has an invalid length. [ 926.080502][T15323] loop8: detected capacity change from 0 to 8 [ 926.179707][T15323] SQUASHFS error: lzo decompression failed, data probably corrupt [ 926.187844][T15323] SQUASHFS error: Failed to read block 0x91: -5 [ 926.194374][T15323] SQUASHFS error: Unable to read metadata cache entry [8f] [ 926.216548][T15323] SQUASHFS error: Unable to read inode 0x11f [ 931.666724][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.673242][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.818759][T15387] loop8: detected capacity change from 0 to 32768 [ 933.112036][T15387] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 933.187590][T15387] XFS (loop8): Ending clean mount [ 933.203402][T15387] XFS (loop8): Quotacheck needed: Please wait. [ 933.360006][T15387] XFS (loop8): Quotacheck: Done. [ 934.082715][ T28] audit: type=1800 audit(1798121183.491:493): pid=15407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2119" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=4429 res=0 errno=0 [ 936.610738][ T1149] net_ratelimit: 2 callbacks suppressed [ 936.640678][T15254] IPVS: starting estimator thread 0... [ 936.675751][ T8296] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 936.730847][T15418] IPVS: using max 21 ests per chain, 50400 per kthread [ 937.508914][T15431] loop8: detected capacity change from 0 to 2048 [ 937.698174][T15431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.766549][T15431] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.655569][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.245598][T15466] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8299] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15466] [ 941.133349][T15480] xt_policy: output policy not valid in PREROUTING and INPUT [ 941.911209][ T12] net_ratelimit: 3 callbacks suppressed [ 942.211578][ T5814] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 942.581371][ T5814] usb 9-1: Using ep0 maxpacket: 32 [ 943.377930][ T5814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.394233][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 943.422743][ T5814] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 943.446745][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.454951][ T5814] usb 9-1: Product: syz [ 943.459130][ T5814] usb 9-1: Manufacturer: syz [ 943.459151][ T5814] usb 9-1: SerialNumber: syz [ 943.492046][ T5814] usb 9-1: config 0 descriptor?? [ 943.506669][ T5814] gs_usb 9-1:0.0: Required endpoints not found [ 945.855641][ T5814] usb 9-1: USB disconnect, device number 9 [ 946.530565][T15539] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8304] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15539] [ 946.945443][ T8808] net_ratelimit: 2 callbacks suppressed [ 947.032271][ T28] audit: type=1326 audit(1798121196.400:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.7.2150" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9376b9e159 code=0x0 [ 949.002575][T15557] bridge0: port 3(wlan1) entered blocking state [ 949.021445][T15557] bridge0: port 3(wlan1) entered disabled state [ 949.042362][T15557] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 949.069907][T15557] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 949.098515][T15557] bridge0: port 3(wlan1) entered blocking state [ 949.105656][T15557] bridge0: port 3(wlan1) entered forwarding state [ 953.583610][ T28] audit: type=1326 audit(1798121202.989:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15614 comm="syz.7.2156" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9376b9e159 code=0x0 [ 957.615213][ T6463] net_ratelimit: 4 callbacks suppressed [ 959.470372][T15668] tipc: Enabling of bearer rejected, failed to enable media [ 960.813520][ T28] audit: type=1326 audit(1798121210.169:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.7.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9376b9e159 code=0x0 [ 961.604909][T15698] bond_slave_0: entered promiscuous mode [ 961.610696][T15698] bond_slave_1: entered promiscuous mode [ 961.679126][T15698] vlan3: entered promiscuous mode [ 961.718157][T15698] .`: entered promiscuous mode [ 962.836370][ C0] net_ratelimit: 2 callbacks suppressed [ 965.808581][ T51] Bluetooth: hci5: Invalid handle: 0x20c9 > 0x0eff [ 966.378518][T15757] __vm_enough_memory: pid: 15757, comm: syz.7.2183, not enough memory for the allocation [ 967.119994][T15760] loop8: detected capacity change from 0 to 512 [ 967.127735][T15760] EXT4-fs: Ignoring removed nobh option [ 967.168462][T15760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.238366][T15760] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.441996][T15769] netlink: 'syz.2.2185': attribute type 10 has an invalid length. [ 967.709802][T15774] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2186'. [ 967.723156][T15774] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2186'. [ 967.890464][T15776] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8296] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15776] [ 968.144156][ C0] net_ratelimit: 8 callbacks suppressed [ 968.238953][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.603399][T15787] tipc: Enabling of bearer rejected, failed to enable media [ 968.990182][T15798] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8299] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15798] [ 971.296343][T15792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 973.266497][ T11] net_ratelimit: 5 callbacks suppressed [ 973.354979][T15826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.850874][T15857] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8302] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15857] [ 979.099190][ T11] net_ratelimit: 2 callbacks suppressed [ 980.021186][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2209'. [ 983.323648][T15898] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8304] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15898] [ 984.596494][T15913] __vm_enough_memory: pid: 15913, comm: syz.2.2218, not enough memory for the allocation [ 984.653174][ T5785] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 984.811343][ T1149] net_ratelimit: 15 callbacks suppressed [ 986.860805][T15936] x86/PAT: syz.8.2224:15936 freeing invalid memtype [mem 0xfe004000-0xfe008fff] [ 987.130636][T15941] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 987.203886][T15933] x86/PAT: syz.8.2224:15933 freeing invalid memtype [mem 0xfe000000-0xfe003fff] [ 987.687549][T15942] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8304] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15942] [ 988.310449][T15948] netlink: 'syz.8.2228': attribute type 10 has an invalid length. [ 989.634821][T15948] .`: (slave bridge0): Enslaving as an active interface with an up link [ 990.917060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 991.298088][ T987] net_ratelimit: 2 callbacks suppressed [ 991.828875][T15968] __vm_enough_memory: pid: 15968, comm: syz.9.2229, not enough memory for the allocation [ 993.213652][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.223450][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.578096][T15558] Process accounting resumed [ 994.369848][T15989] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8304] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15989] [ 996.975773][ T12] net_ratelimit: 4 callbacks suppressed [ 997.133127][T16016] netlink: 'syz.2.2247': attribute type 1 has an invalid length. [ 1000.510994][T16047] loop8: detected capacity change from 0 to 512 [ 1000.592628][T16047] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 1001.188663][T16053] __vm_enough_memory: pid: 16053, comm: syz.8.2254, not enough memory for the allocation [ 1002.712333][ T11] net_ratelimit: 5 callbacks suppressed [ 1005.111158][ T28] audit: type=1326 audit(1798121254.504:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.2.2261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52cc19e159 code=0x0 [ 1005.192819][T16084] oxu210hp-hcd serial8250: error -ENXIO: IRQ index 0 not found [ 1005.517815][T16096] __vm_enough_memory: pid: 16096, comm: syz.7.2265, not enough memory for the allocation [ 1008.286567][T16102] syzkaller0: entered promiscuous mode [ 1008.309074][T16102] syzkaller0: entered allmulticast mode [ 1008.403730][T16102] tipc: Enabled bearer , priority 0 [ 1008.437331][T16102] tipc: Resetting bearer [ 1008.489225][T16101] tipc: Resetting bearer [ 1008.922286][T16101] tipc: Disabling bearer [ 1013.220326][ T34] net_ratelimit: 5 callbacks suppressed [ 1013.282091][ T28] audit: type=1326 audit(1798121262.683:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.9.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f3679e159 code=0x0 [ 1013.945489][T16143] netlink: 'syz.7.2282': attribute type 1 has an invalid length. [ 1016.036232][T16167] loop8: detected capacity change from 0 to 64 [ 1016.051327][T16167] hfs: unable to parse mount options [ 1019.236712][ T34] net_ratelimit: 2 callbacks suppressed [ 1022.477744][T16202] tipc: Enabling of bearer rejected, failed to enable media [ 1022.955089][T16207] overlayfs: failed to clone upperpath [ 1024.076173][T16216] loop8: detected capacity change from 0 to 16384 [ 1024.169225][T16217] UBIFS error (pid: 16217): cannot open "(null)", error -22 [ 1024.437015][ T11] net_ratelimit: 4 callbacks suppressed [ 1025.108592][T16227] vlan0: entered allmulticast mode [ 1025.140457][T16227] bond0: entered allmulticast mode [ 1028.398063][T16265] tipc: Enabling of bearer rejected, failed to enable media [ 1029.542965][T16277] net_ratelimit: 2 callbacks suppressed [ 1030.001266][T15558] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1030.854075][T16289] jffs2: notice: (16289) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1030.933683][T15558] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.125906][T15558] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1031.135090][T15558] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1031.152509][T15558] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1031.181083][T15558] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.189129][T15558] usb 9-1: Product: syz [ 1031.189148][T15558] usb 9-1: Manufacturer: syz [ 1031.189164][T15558] usb 9-1: SerialNumber: syz [ 1032.123919][T16299] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1034.285280][T16311] tipc: Started in network mode [ 1034.363627][T16311] tipc: Node identity 4, cluster identity 4711 [ 1034.961946][T15558] usb 9-1: Found UVC 0.00 device syz (8086:0b07) [ 1035.035565][T11194] net_ratelimit: 2 callbacks suppressed [ 1035.534321][T16311] tipc: Node number set to 4 [ 1035.598929][T15558] usb 9-1: No valid video chain found. [ 1035.617445][T15558] usb 9-1: USB disconnect, device number 10 [ 1036.601956][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2328'. [ 1036.959771][T16344] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1037.823349][T16356] jffs2: notice: (16356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1038.104935][T16356] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1038.222948][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2324'. [ 1038.243218][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2324'. [ 1038.252606][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2324'. [ 1038.262058][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2324'. [ 1038.271096][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2324'. [ 1038.765568][T16372] loop8: detected capacity change from 0 to 256 [ 1040.791802][T16381] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2331'. [ 1043.821164][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2336'. [ 1043.861108][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2336'. [ 1043.870808][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2336'. [ 1043.880225][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2336'. [ 1043.889343][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2336'. [ 1045.027172][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.027172][T16418] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1045.040942][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.040942][T16418] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1045.054387][T16418] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1045.064452][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.064452][T16418] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1045.078161][T16418] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1045.088162][T16418] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1045.102911][T16418] UDF-fs: Scanning with blocksize 512 failed [ 1045.111624][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.111624][T16418] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1045.132954][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.132954][T16418] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1045.146246][T16418] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1045.163240][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.163240][T16418] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1045.192840][T16418] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1045.207690][T16418] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1045.215668][T16418] UDF-fs: Scanning with blocksize 1024 failed [ 1045.231481][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.231481][T16418] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1045.274145][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.274145][T16418] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1045.291116][ T6463] net_ratelimit: 2 callbacks suppressed [ 1045.313066][T16418] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1045.330517][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.330517][T16418] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1045.346267][T16418] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1045.355858][T16418] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1045.612342][T16418] UDF-fs: Scanning with blocksize 2048 failed [ 1045.623702][T16418] syz.8.2338: attempt to access beyond end of device [ 1045.623702][T16418] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1045.637466][T16418] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1045.647286][T16418] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1045.657138][T16418] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1045.665123][T16418] UDF-fs: Scanning with blocksize 4096 failed [ 1045.671277][T16418] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1046.392789][T16433] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1046.989588][T16439] xt_CONNSECMARK: invalid mode: 0 [ 1048.257504][T16447] loop8: detected capacity change from 0 to 164 [ 1049.765882][T16455] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1050.085218][T16457] rock: directory entry would overflow storage [ 1050.092949][T16457] rock: sig=0x4f50, size=4, remaining=3 [ 1050.098750][T16457] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1050.402567][ T12] net_ratelimit: 1 callbacks suppressed [ 1050.418095][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 1050.453429][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 1050.462739][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 1050.472674][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 1050.482157][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 1054.614499][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.620992][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.306493][T16511] loop8: detected capacity change from 0 to 164 [ 1056.296345][T16521] rock: directory entry would overflow storage [ 1056.302747][T16521] rock: sig=0x4f50, size=4, remaining=3 [ 1056.308395][T16521] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1056.322663][T11194] net_ratelimit: 4 callbacks suppressed [ 1061.601499][ T996] net_ratelimit: 2 callbacks suppressed [ 1067.311690][T16375] net_ratelimit: 4 callbacks suppressed [ 1072.678370][T16375] net_ratelimit: 5 callbacks suppressed [ 1073.797466][T16641] ceph: No mds server is up or the cluster is laggy [ 1074.721094][T16663] wlan0 speed is unknown, defaulting to 1000 [ 1074.727354][T16663] wlan0 speed is unknown, defaulting to 1000 [ 1074.735915][T16663] wlan0 speed is unknown, defaulting to 1000 [ 1074.750022][T16663] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1074.771324][T16663] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1074.808429][T16663] wlan0 speed is unknown, defaulting to 1000 [ 1074.817095][T16663] wlan0 speed is unknown, defaulting to 1000 [ 1074.825030][T16663] wlan0 speed is unknown, defaulting to 1000 [ 1074.832687][T16652] Set syz1 is full, maxelem 6117 reached [ 1074.839979][T16663] wlan0 speed is unknown, defaulting to 1000 [ 1074.849453][T16663] wlan0 speed is unknown, defaulting to 1000 [ 1074.871866][T16664] smc: removing ib device syz2 [ 1077.231521][T16688] loop8: detected capacity change from 0 to 128 [ 1077.514525][T16688] EXT4-fs (loop8): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1077.831486][T11194] net_ratelimit: 2 callbacks suppressed [ 1077.899792][T16656] udevd[16656]: incorrect ext4 checksum on /dev/loop8 [ 1083.350451][ T6463] net_ratelimit: 5 callbacks suppressed [ 1083.837936][T16743] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1084.936975][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 41 (since boot) is 1026 jiffies old. [ 1085.007256][T16747] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2418'. [ 1085.304985][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2416'. [ 1086.611421][T16768] loop8: detected capacity change from 0 to 32768 [ 1086.742349][T16768] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1087.773049][T16768] XFS (loop8): Ending clean mount [ 1087.786192][T16768] XFS (loop8): Quotacheck needed: Please wait. [ 1088.960061][ T12] net_ratelimit: 1 callbacks suppressed [ 1089.053281][T16768] XFS (loop8): Quotacheck: Done. [ 1090.087764][ T8296] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1090.410219][T16798] overlayfs: failed to clone lowerpath [ 1090.470713][T16799] overlayfs: failed to clone lowerpath [ 1094.238920][ T6463] net_ratelimit: 3 callbacks suppressed [ 1094.430067][T16823] tipc: Enabling of bearer rejected, failed to enable media [ 1095.089109][T16834] ip6gretap1: entered allmulticast mode [ 1095.106250][T16834] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1095.113141][T16834] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.139152][T16834] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1098.340583][T16852] Console: switching to colour VGA+ 80x25 [ 1098.438459][T16854] Console: switching to colour frame buffer device 128x48 [ 1099.358579][ C0] net_ratelimit: 1 callbacks suppressed [ 1099.669526][T16863] NILFS (nullb0): couldn't find nilfs on the device [ 1100.033423][ T28] audit: type=1326 audit(1798121349.423:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16856 comm="syz.2.2447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52cc19e159 code=0x0 [ 1101.427165][T16883] jffs2: notice: (16883) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1101.596896][T16885] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8299] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16885] [ 1101.969462][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1102.147105][T16887] wlan0 speed is unknown, defaulting to 1000 [ 1103.413954][ T28] audit: type=1326 audit(1798121352.803:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.7.2456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9376b9e159 code=0x0 [ 1104.596005][T15260] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1104.789116][T15260] usb 9-1: Using ep0 maxpacket: 8 [ 1104.849551][T15260] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1104.857958][T15260] usb 9-1: config 179 has no interface number 0 [ 1104.909387][T15260] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1104.987625][T15260] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1105.044123][T15260] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1105.089158][T15260] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1105.123920][ T1149] net_ratelimit: 5 callbacks suppressed [ 1105.149526][T15260] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1105.214252][T15260] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1105.277005][T15260] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.869736][T16907] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1107.328997][T15260] usb 9-1: USB disconnect, device number 11 [ 1107.335196][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1107.335370][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1108.222049][T16945] wlan0 speed is unknown, defaulting to 1000 [ 1108.710235][ T28] audit: type=1326 audit(1798121358.032:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.8.2467" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8e2b9e159 code=0x0 [ 1109.584358][T16974] xt_policy: output policy not valid in PREROUTING and INPUT [ 1111.220623][T16375] net_ratelimit: 4 callbacks suppressed [ 1112.998401][T16990] overlayfs: failed to clone upperpath [ 1115.233796][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 41 (since boot) is 4055 jiffies old. [ 1115.461076][T16997] syz.8.2470 (16997) used greatest stack depth: 17032 bytes left [ 1115.520318][ T28] audit: type=1326 audit(1798121364.662:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16994 comm="syz.2.2478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52cc19e159 code=0x0 [ 1116.018606][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.025142][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.642861][T16375] net_ratelimit: 2 callbacks suppressed [ 1123.292896][ T6231] net_ratelimit: 7 callbacks suppressed [ 1123.534978][ T28] audit: type=1326 audit(1798121628.921:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17047 comm="syz.2.2489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52cc19e159 code=0x0 [ 1128.811256][ T11] net_ratelimit: 1 callbacks suppressed [ 1129.441656][ T28] audit: type=1326 audit(1798121642.825:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.2.2501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52cc19e159 code=0x0 [ 1129.494205][ T5778] libceph: connect (1)[c::]:6789 error -22 [ 1129.713766][ T5778] libceph: mon0 (1)[c::]:6789 connect error [ 1130.406369][ T5778] libceph: connect (1)[c::]:6789 error -22 [ 1130.412512][ T5778] libceph: mon0 (1)[c::]:6789 connect error [ 1130.694066][T17101] ceph: No mds server is up or the cluster is laggy [ 1133.945780][ T6463] net_ratelimit: 20 callbacks suppressed [ 1139.601839][ T1149] net_ratelimit: 2 callbacks suppressed [ 1141.878262][T17218] netlink: 'syz.7.2531': attribute type 39 has an invalid length. [ 1142.237345][T17218] syz_tun (unregistering): left allmulticast mode [ 1143.174988][T17236] netlink: 'syz.8.2536': attribute type 1 has an invalid length. [ 1143.217631][T17236] netlink: 'syz.8.2536': attribute type 2 has an invalid length. [ 1143.321811][T17236] tipc: Enabling of bearer rejected, already enabled [ 1144.246101][T17233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1144.410954][ T28] audit: type=1326 audit(1798121657.745:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17232 comm="syz.9.2534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f3679e159 code=0x0 [ 1146.005509][ T987] net_ratelimit: 4 callbacks suppressed [ 1146.196419][T17258] loop8: detected capacity change from 0 to 128 [ 1147.756366][T17265] program syz.8.2542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1148.683842][ T8384] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1148.971095][ T8384] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1149.086955][T17272] ceph: No mds server is up or the cluster is laggy [ 1149.905379][T17276] Cannot find del_set index 4 as target [ 1150.011154][T17286] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 1150.244611][T17290] overlayfs: failed to clone upperpath [ 1151.201562][ T987] net_ratelimit: 4 callbacks suppressed [ 1152.615698][T17304] tipc: Enabled bearer , priority 0 [ 1156.665523][ T6463] net_ratelimit: 2 callbacks suppressed [ 1160.036390][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1160.045924][T17370] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1160.054929][T17370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1160.065073][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1161.209462][T17382] loop8: detected capacity change from 0 to 512 [ 1161.383459][T17382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.780807][ T1149] net_ratelimit: 4 callbacks suppressed [ 1161.897989][ T8296] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.133576][T17413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1165.151079][T17359] bridge0: port 3(macvlan2) entered disabled state [ 1166.907252][ T6463] net_ratelimit: 1 callbacks suppressed [ 1172.514482][ T1138] net_ratelimit: 3 callbacks suppressed [ 1176.172691][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1176.191797][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1176.200613][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1176.210664][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1176.221653][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1176.229810][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1176.678951][T17530] wlan0 speed is unknown, defaulting to 1000 [ 1177.356510][T17540] overlayfs: failed to clone lowerpath [ 1177.375087][T17540] overlayfs: failed to clone lowerpath [ 1177.460713][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.467228][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.989891][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2604'. [ 1178.082182][ T8808] net_ratelimit: 1 callbacks suppressed [ 1178.321245][ T5785] Bluetooth: hci1: command tx timeout [ 1178.782346][T17564] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1180.887005][ T5785] Bluetooth: hci1: command tx timeout [ 1181.185580][T17530] chnl_net:caif_netlink_parms(): no params data found [ 1182.138261][ T6231] tipc: Disabling bearer [ 1182.576664][ T28] audit: type=1326 audit(1798121695.955:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17596 comm="syz.7.2613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9376b9e159 code=0x0 [ 1182.961942][ T5785] Bluetooth: hci1: command tx timeout [ 1183.202966][ T11] net_ratelimit: 5 callbacks suppressed [ 1183.662561][ T6231] tipc: Left network mode [ 1184.798130][ T6231] macvlan2 (unregistering): left allmulticast mode [ 1184.804939][ T6231] macvlan2 (unregistering): left promiscuous mode [ 1184.812010][ T6231] bridge0: port 3(macvlan2) entered disabled state [ 1185.041530][ T5785] Bluetooth: hci1: command tx timeout [ 1185.622211][T17632] netlink: 'syz.7.2618': attribute type 49 has an invalid length. [ 1185.775472][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.783275][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.817544][T17530] bridge_slave_0: entered allmulticast mode [ 1185.843573][T17530] bridge_slave_0: entered promiscuous mode [ 1186.081107][T17649] loop8: detected capacity change from 0 to 128 [ 1187.558755][T17660] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1188.209521][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.251088][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.268932][T17530] bridge_slave_1: entered allmulticast mode [ 1188.285906][T17530] bridge_slave_1: entered promiscuous mode [ 1188.960922][ C0] net_ratelimit: 2 callbacks suppressed [ 1190.695718][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.585016][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.931651][T17530] team0: Port device team_slave_0 added [ 1192.973115][T17530] team0: Port device team_slave_1 added [ 1193.255125][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.290764][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.629911][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.715031][ T28] audit: type=1326 audit(1798121707.085:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17702 comm="syz.7.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9376b9e159 code=0x0 [ 1194.088704][ T996] net_ratelimit: 5 callbacks suppressed [ 1194.754626][ T6231] bond1: (slave gretap1): Releasing backup interface [ 1195.681124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1196.361603][ T6231] bond5: (slave gretap2): Releasing active interface [ 1196.890278][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.933485][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.091020][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.043222][T17530] hsr_slave_0: entered promiscuous mode [ 1199.071949][T17530] hsr_slave_1: entered promiscuous mode [ 1199.100661][T17530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1199.121296][T17530] Cannot create hsr debugfs directory [ 1199.201114][ T1138] net_ratelimit: 1 callbacks suppressed [ 1199.333865][T17743] netlink: 'syz.2.2638': attribute type 10 has an invalid length. [ 1199.407750][T17743] bridge0: port 3(wlan1) entered disabled state [ 1199.414443][T17743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.421836][T17743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.600521][T17743] bridge0: port 3(wlan1) entered blocking state [ 1199.606992][T17743] bridge0: port 3(wlan1) entered forwarding state [ 1199.614595][T17743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.621900][T17743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.629554][T17743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.636833][T17743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.899411][T17743] bridge0: entered promiscuous mode [ 1199.905972][T17743] bridge0: entered allmulticast mode [ 1199.919032][T16375] .`: (slave bridge0): interface is now down [ 1199.956494][T16375] .`: (slave bridge0): interface is now down [ 1200.142154][T16375] .`: (slave bridge0): interface is now down [ 1200.169326][T17743] .`: (slave bridge0): Enslaving as an active interface with an up link [ 1200.187465][ T34] .`: (slave bridge0): interface is now down [ 1200.219448][T17746] netlink: 'syz.2.2638': attribute type 10 has an invalid length. [ 1200.258334][T17746] .`: left allmulticast mode [ 1200.272872][T17746] bond_slave_0: left allmulticast mode [ 1200.313264][T17746] bond_slave_1: left allmulticast mode [ 1200.318820][T17746] bridge0: left allmulticast mode [ 1200.384818][T17746] bond2: (slave .`): Releasing active interface [ 1203.047353][ T6231] veth7: left allmulticast mode [ 1203.310168][ T6231] veth7: left promiscuous mode [ 1203.397113][ T6231] bridge3: port 3(veth7) entered disabled state [ 1203.724272][ T6231] veth5: left allmulticast mode [ 1204.744298][T17796] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1204.765036][T16375] net_ratelimit: 2 callbacks suppressed [ 1204.772104][ T6231] veth5: left promiscuous mode [ 1204.777502][ T6231] bridge3: port 1(veth5) entered disabled state [ 1204.806314][ T6231] hsr_slave_0: left promiscuous mode [ 1204.922256][ T6231] hsr_slave_1: left promiscuous mode [ 1204.928834][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.951916][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.974252][ T6231] team0: left allmulticast mode [ 1204.979189][ T6231] team_slave_0: left allmulticast mode [ 1205.022100][ T6231] team_slave_1: left allmulticast mode [ 1205.027657][ T6231] team0: left promiscuous mode [ 1205.055926][ T6231] team_slave_0: left promiscuous mode [ 1205.076530][ T6231] team_slave_1: left promiscuous mode [ 1205.082814][ T6231] bridge0: port 4(team0) entered disabled state [ 1205.109215][ T6231] bridge_slave_1: left allmulticast mode [ 1205.139516][ T6231] bridge_slave_1: left promiscuous mode [ 1205.157467][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.188817][ T6231] bridge_slave_0: left allmulticast mode [ 1205.238835][ T6231] bridge_slave_0: left promiscuous mode [ 1205.277679][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.599083][T17798] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8304] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17798] [ 1208.851015][T17808] loop8: detected capacity change from 0 to 512 [ 1208.880255][T17808] EXT4-fs: inline encryption not supported [ 1208.898869][T17808] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1208.925411][T17808] EXT4-fs (loop8): Invalid default hash set in the superblock [ 1209.277730][ T6231] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1209.323762][ T6231] bond8 (unregistering): Released all slaves [ 1210.115988][T11194] net_ratelimit: 4 callbacks suppressed [ 1210.560675][ T6231] team0 (unregistering): Port device bridge2 removed [ 1210.669268][ T6231] bond7 (unregistering): (slave veth3): Releasing active interface [ 1211.331213][ T6231] bond7 (unregistering): Released all slaves [ 1212.086869][ T6231] bond5 (unregistering): (slave bond6): Releasing active interface [ 1212.113334][ T6231] bond6 (unregistering): Released all slaves [ 1212.402298][ T6231] bond5 (unregistering): Released all slaves [ 1212.443243][ T6231] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1212.518048][ T6231] bond4 (unregistering): Released all slaves [ 1212.547320][ T6231] bond3 (unregistering): Released all slaves [ 1212.745106][ T6231] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1212.756342][ T6231] bond2 (unregistering): Released all slaves [ 1212.784813][ T6231] bond1 (unregistering): Released all slaves [ 1213.575493][ T6231] team0 (unregistering): Port device team_slave_1 removed [ 1213.642698][ T6231] team0 (unregistering): Port device team_slave_0 removed [ 1213.721211][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.795907][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.327432][ T6231] bond0 (unregistering): Released all slaves [ 1215.895043][ T996] net_ratelimit: 2 callbacks suppressed [ 1219.688868][T17864] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8299] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17864] [ 1220.136526][ T6231] IPVS: stop unused estimator thread 0... [ 1222.264855][ T996] net_ratelimit: 3 callbacks suppressed [ 1225.450089][T17530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1225.500036][T17530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1225.561451][T17530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1225.617322][T17530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1226.029880][T17530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.143280][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.203543][T11194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.210766][T11194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.337020][T11194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.344247][T11194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.630873][ T28] audit: type=1800 audit(1798121740.005:508): pid=17920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2672" name="power" dev="configfs" ino=44063 res=0 errno=0 [ 1227.314592][T17927] af_packet: tpacket_rcv: packet too big, clamped from 324 to 4294967272. macoff=96 [ 1227.360760][ C0] net_ratelimit: 3 callbacks suppressed [ 1227.463045][T17932] xt_CONNSECMARK: invalid mode: 0 [ 1228.516785][T17530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.826092][T17530] veth0_vlan: entered promiscuous mode [ 1228.917494][T17530] veth1_vlan: entered promiscuous mode [ 1231.243216][T17530] veth0_macvtap: entered promiscuous mode [ 1231.317348][T17530] veth1_macvtap: entered promiscuous mode [ 1232.800365][ T34] net_ratelimit: 1 callbacks suppressed [ 1233.051324][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.492402][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.546138][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.589698][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.761424][T17530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1237.572993][T17979] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2686'. [ 1237.881694][T17990] netlink: 'syz.2.2689': attribute type 12 has an invalid length. [ 1237.907192][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2690'. [ 1239.111423][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.117782][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.153970][ T987] net_ratelimit: 4 callbacks suppressed [ 1239.536173][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1239.551593][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1239.560993][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1239.572759][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1239.581339][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1239.589178][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1241.841137][ T51] Bluetooth: hci2: command tx timeout [ 1243.920874][ T51] Bluetooth: hci2: command tx timeout [ 1244.164184][T18015] futex_wake_op: syz.2.2695 tries to shift op by 144; fix this program [ 1245.638329][T18013] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1246.000905][ T51] Bluetooth: hci2: command tx timeout [ 1246.385440][T18032] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 1246.580792][T18032] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 1248.080752][ T51] Bluetooth: hci2: command tx timeout [ 1250.116013][T18077] 9pnet_virtio: no channels available for device syz [ 1250.129114][T18077] overlayfs: failed to clone upperpath [ 1250.497130][T18004] chnl_net:caif_netlink_parms(): no params data found [ 1251.041151][ C0] net_ratelimit: 2 callbacks suppressed [ 1253.032731][T18004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.068561][T18004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.118669][T18004] bridge_slave_0: entered allmulticast mode [ 1253.129861][T18004] bridge_slave_0: entered promiscuous mode [ 1253.156905][T18004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.180164][T18004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.211317][T18004] bridge_slave_1: entered allmulticast mode [ 1253.249700][T18004] bridge_slave_1: entered promiscuous mode [ 1255.608568][T18004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.668354][T18004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.168879][T18004] team0: Port device team_slave_0 added [ 1256.250824][T17966] net_ratelimit: 2 callbacks suppressed [ 1256.415926][T18004] team0: Port device team_slave_1 added [ 1257.607655][T18004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.635729][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.705640][T18004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.749261][T18004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.785142][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.901180][T18004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.750287][T18004] hsr_slave_0: entered promiscuous mode [ 1259.837680][T18004] hsr_slave_1: entered promiscuous mode [ 1259.852560][T18004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.890604][T18004] Cannot create hsr debugfs directory [ 1260.247709][T18203] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8304] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18203] [ 1260.591624][ T1149] hsr_slave_0: left promiscuous mode [ 1260.616628][ T1149] hsr_slave_1: left promiscuous mode [ 1261.246914][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.276514][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.343095][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.358021][ T1149] bridge_slave_1: left allmulticast mode [ 1261.384038][ T1149] bridge_slave_1: left promiscuous mode [ 1261.420446][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.463486][ T1149] bridge_slave_0: left allmulticast mode [ 1261.469228][ T1149] bridge_slave_0: left promiscuous mode [ 1261.510928][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.674403][ T1149] veth1_macvtap: left promiscuous mode [ 1261.680016][ T1149] veth0_macvtap: left promiscuous mode [ 1261.687655][T18228] jffs2: notice: (18228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1261.730994][ T1149] veth1_vlan: left promiscuous mode [ 1261.736443][ T1149] veth0_vlan: left promiscuous mode [ 1261.841267][ T1138] net_ratelimit: 13 callbacks suppressed [ 1265.535258][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 1265.620802][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 1265.712541][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.806331][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.444643][ T1149] bond0 (unregistering): Released all slaves [ 1266.772408][T18257] loop8: detected capacity change from 0 to 512 [ 1266.794107][T18257] ext4: Bad value for 'data' [ 1267.041772][T17966] net_ratelimit: 4 callbacks suppressed [ 1269.205068][T18277] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1269.214490][T18277] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1269.224202][T18277] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1272.136787][T18004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1272.625428][T17966] net_ratelimit: 1 callbacks suppressed [ 1272.718640][T18004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1274.242187][T18004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1274.320930][T18004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1275.851614][T18004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.957997][T18004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.017957][T17966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.025226][T17966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.145406][T17966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.152699][T17966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.776385][T17966] net_ratelimit: 4 callbacks suppressed [ 1280.386641][T18004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.079133][T18004] veth0_vlan: entered promiscuous mode [ 1282.103911][T18004] veth1_vlan: entered promiscuous mode [ 1282.227962][T18004] veth0_macvtap: entered promiscuous mode [ 1282.275015][T18004] veth1_macvtap: entered promiscuous mode [ 1282.321932][T18004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.353200][T18004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.381158][T18004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.413131][T18004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.452445][T18004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.504487][T18004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.533531][T18004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.562623][T18004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.615502][T18004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.663060][T18004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.691902][T18004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.713108][T18004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.801715][T18004] net_ratelimit: 2 callbacks suppressed [ 1284.240895][T10541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.248857][T10541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.407915][T10541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.437145][T10541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.030257][ C0] net_ratelimit: 44 callbacks suppressed [ 1290.012299][ T28] audit: type=1326 audit(1798121803.395:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.7.2780" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9376b9e159 code=0x0 [ 1291.111355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 1293.210697][ C1] net_ratelimit: 28 callbacks suppressed [ 1298.320711][ C1] net_ratelimit: 13 callbacks suppressed [ 1300.337668][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.344511][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.075002][T18604] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1302.095504][T18604] CIFS: Attempting to mount //127.0.0.1/share [ 1302.188146][T18604] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1302.214373][T18604] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1303.363161][ C1] net_ratelimit: 16 callbacks suppressed [ 1309.201105][ C1] net_ratelimit: 19 callbacks suppressed [ 1309.412069][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1309.430010][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1309.439244][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1309.510029][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1309.528132][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1309.584925][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1312.059706][ T5785] Bluetooth: hci1: command tx timeout [ 1312.399691][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2808'. [ 1313.046195][T18723] program syz.1.2810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1314.320782][ T5785] Bluetooth: hci1: command tx timeout [ 1314.560700][ C1] net_ratelimit: 16 callbacks suppressed [ 1314.976784][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1315.052834][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.400997][ T5785] Bluetooth: hci1: command tx timeout [ 1318.230784][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2820'. [ 1318.480922][ T5785] Bluetooth: hci1: command tx timeout [ 1318.499235][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.691019][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.936715][T18685] chnl_net:caif_netlink_parms(): no params data found [ 1319.680718][ C0] net_ratelimit: 14 callbacks suppressed [ 1321.584582][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1321.639765][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.720828][ C1] net_ratelimit: 15 callbacks suppressed [ 1327.049733][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.122687][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.985092][T18685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.044064][T18685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.094512][T18685] bridge_slave_0: entered allmulticast mode [ 1329.161341][T18685] bridge_slave_0: entered promiscuous mode [ 1329.228057][T18685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.310760][T18685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.367779][T18685] bridge_slave_1: entered allmulticast mode [ 1329.760818][ C1] net_ratelimit: 17 callbacks suppressed [ 1330.166567][T18685] bridge_slave_1: entered promiscuous mode [ 1330.838893][T18870] CIFS: Attempting to mount //127.0.0.1/share [ 1331.356632][T18685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.370264][T18685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.371297][ T28] audit: type=1326 audit(1798122100.710:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390359e159 code=0x7ffc0000 [ 1331.438989][ T28] audit: type=1326 audit(1798122100.710:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f390359e159 code=0x7ffc0000 [ 1331.464747][ T28] audit: type=1326 audit(1798122100.710:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390359e159 code=0x7ffc0000 [ 1331.498462][ T28] audit: type=1326 audit(1798122100.720:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f390355e98e code=0x7ffc0000 [ 1331.528069][ T28] audit: type=1326 audit(1798122100.720:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f390359f457 code=0x7ffc0000 [ 1331.557329][ T28] audit: type=1326 audit(1798122100.720:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f390359e159 code=0x7ffc0000 [ 1331.590254][ T28] audit: type=1326 audit(1798122100.720:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f390359f457 code=0x7ffc0000 [ 1331.641126][T18870] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1331.648875][T18870] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1331.721213][ T28] audit: type=1326 audit(1798122100.720:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f390355e98e code=0x7ffc0000 [ 1331.790701][ T28] audit: type=1326 audit(1798122100.720:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390359e159 code=0x7ffc0000 [ 1331.865479][T18685] team0: Port device team_slave_0 added [ 1331.890997][ T28] audit: type=1326 audit(1798122100.720:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.1.2840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f390359e159 code=0x7ffc0000 [ 1332.297312][T18685] team0: Port device team_slave_1 added [ 1333.369786][ T1138] tipc: Disabling bearer [ 1333.411016][ T1138] tipc: Left network mode [ 1333.421883][T18685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.475171][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.589788][T18685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.684162][T18685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.732068][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.898956][T18685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.763136][T18916] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1334.881049][ C0] net_ratelimit: 7 callbacks suppressed [ 1336.233662][T18915] loop1: detected capacity change from 0 to 16 [ 1340.889403][ C1] net_ratelimit: 15 callbacks suppressed [ 1341.959595][T18685] hsr_slave_0: entered promiscuous mode [ 1342.000520][T18685] hsr_slave_1: entered promiscuous mode [ 1342.022824][T18685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1342.047387][T18685] Cannot create hsr debugfs directory [ 1345.483607][ T1138] bridge0: port 3(wlan1) entered disabled state [ 1345.727205][ T1138] mac80211_hwsim hwsim19 wlan1 (unregistering): left allmulticast mode [ 1345.769074][ T1138] mac80211_hwsim hwsim19 wlan1 (unregistering): left promiscuous mode [ 1345.821552][ T1138] bridge0: port 3(wlan1) entered disabled state [ 1345.910534][ T1138] ------------[ cut here ]------------ [ 1345.917801][ T1138] WARNING: CPU: 1 PID: 1138 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 1345.928937][ T1138] Modules linked in: [ 1345.933038][ T1138] CPU: 1 PID: 1138 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1345.940728][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1345.950878][ T1138] Workqueue: netns cleanup_net [ 1345.955711][ T1138] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 1345.962734][ T1138] Code: 7c 2d 00 00 74 08 48 89 df e8 48 3e cc f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 01 14 86 00 e8 0c b2 73 f7 <0f> 0b eb c5 48 c7 c1 2c 66 8c 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1345.982806][ T1138] RSP: 0000:ffffc900047e7568 EFLAGS: 00010293 [ 1345.989378][ T1138] RAX: ffffffff8a13d944 RBX: ffff88803a02d618 RCX: ffff888023d40000 [ 1345.997791][ T1138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.006044][ T1138] RBP: 0000000000000000 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 1346.014192][ T1138] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff88803a02ec88 [ 1346.022318][ T1138] R13: 1ffff11007405ac3 R14: ffff88803a02e440 R15: dffffc0000000000 [ 1346.030336][ T1138] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1346.039769][ T1138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1346.046614][ T1138] CR2: 00007f2c40401000 CR3: 000000005f781000 CR4: 00000000003506e0 [ 1346.054708][ T1138] Call Trace: [ 1346.058091][ T1138] [ 1346.061130][ T1138] ? trace_drv_return_void+0x1c0/0x1c0 [ 1346.066749][ T1138] unregister_netdevice_many_notify+0x1357/0x1910 [ 1346.073292][ T1138] ? unregister_netdevice_many+0x20/0x20 [ 1346.078993][ T1138] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1346.085205][ T1138] ? __lock_acquire+0x7d80/0x7d80 [ 1346.090765][ T1138] unregister_netdevice_queue+0x2e9/0x330 [ 1346.096626][ T1138] ? list_netdevice+0x730/0x730 [ 1346.101844][ T1138] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1346.107642][ T1138] _cfg80211_unregister_wdev+0x16d/0x580 [ 1346.113500][ T1138] ieee80211_remove_interfaces+0x4b3/0x690 [ 1346.119382][ T1138] ? ieee80211_do_stop+0x2000/0x2000 [ 1346.124795][ T1138] ? rcu_is_watching+0x15/0xb0 [ 1346.129811][ T1138] ieee80211_unregister_hw+0x5d/0x2a0 [ 1346.135506][ T1138] mac80211_hwsim_del_radio+0x289/0x480 [ 1346.141218][ T1138] ? rhashtable_remove_fast+0xc00/0xc00 [ 1346.146839][ T1138] hwsim_exit_net+0x58d/0x650 [ 1346.151752][ T1138] ? hwsim_init_net+0x90/0x90 [ 1346.156494][ T1138] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1346.162486][ T1138] cleanup_net+0x6f7/0xb00 [ 1346.166961][ T1138] ? ops_free_list+0x3b0/0x3b0 [ 1346.171856][ T1138] ? _raw_spin_unlock_irq+0x23/0x50 [ 1346.177254][ T1138] ? process_scheduled_works+0x975/0x1600 [ 1346.183178][ T1138] ? process_scheduled_works+0x975/0x1600 [ 1346.189410][ T1138] process_scheduled_works+0xa60/0x1600 [ 1346.195175][ T1138] ? worker_attach_to_pool+0x370/0x370 [ 1346.200858][ T1138] ? assign_work+0x3cc/0x5d0 [ 1346.205679][ T1138] worker_thread+0xa5e/0xfe0 [ 1346.210360][ T1138] kthread+0x2fa/0x390 [ 1346.214622][ T1138] ? pr_cont_work+0x550/0x550 [ 1346.219393][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 1346.224098][ T1138] ret_from_fork+0x48/0x80 [ 1346.228653][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 1346.233355][ T1138] ret_from_fork_asm+0x11/0x20 [ 1346.238260][ T1138] [ 1346.242068][ T1138] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1346.249384][ T1138] CPU: 1 PID: 1138 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1346.256979][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.267064][ T1138] Workqueue: netns cleanup_net [ 1346.271878][ T1138] Call Trace: [ 1346.275187][ T1138] [ 1346.278154][ T1138] dump_stack_lvl+0x18c/0x250 [ 1346.282931][ T1138] ? show_regs_print_info+0x20/0x20 [ 1346.288174][ T1138] ? load_image+0x420/0x420 [ 1346.292749][ T1138] panic+0x2ca/0x720 [ 1346.296700][ T1138] ? bpf_jit_dump+0xd0/0xd0 [ 1346.301254][ T1138] ? ret_from_fork_asm+0x11/0x20 [ 1346.306231][ T1138] __warn+0x2e0/0x470 [ 1346.310236][ T1138] ? ieee80211_link_release_channel+0x154/0x180 [ 1346.316517][ T1138] ? ieee80211_link_release_channel+0x154/0x180 [ 1346.322819][ T1138] report_bug+0x2be/0x4f0 [ 1346.327300][ T1138] ? ieee80211_link_release_channel+0x154/0x180 [ 1346.333581][ T1138] ? ieee80211_link_release_channel+0x154/0x180 [ 1346.339859][ T1138] ? ieee80211_link_release_channel+0x156/0x180 [ 1346.346138][ T1138] handle_bug+0xcf/0x120 [ 1346.350426][ T1138] exc_invalid_op+0x1a/0x50 [ 1346.354971][ T1138] asm_exc_invalid_op+0x1a/0x20 [ 1346.359953][ T1138] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 1346.366848][ T1138] Code: 7c 2d 00 00 74 08 48 89 df e8 48 3e cc f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 01 14 86 00 e8 0c b2 73 f7 <0f> 0b eb c5 48 c7 c1 2c 66 8c 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1346.386560][ T1138] RSP: 0000:ffffc900047e7568 EFLAGS: 00010293 [ 1346.392677][ T1138] RAX: ffffffff8a13d944 RBX: ffff88803a02d618 RCX: ffff888023d40000 [ 1346.400683][ T1138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.408685][ T1138] RBP: 0000000000000000 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 1346.416700][ T1138] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff88803a02ec88 [ 1346.424716][ T1138] R13: 1ffff11007405ac3 R14: ffff88803a02e440 R15: dffffc0000000000 [ 1346.432761][ T1138] ? ieee80211_link_release_channel+0x154/0x180 [ 1346.439092][ T1138] ? ieee80211_link_release_channel+0x154/0x180 [ 1346.445387][ T1138] ? trace_drv_return_void+0x1c0/0x1c0 [ 1346.450912][ T1138] unregister_netdevice_many_notify+0x1357/0x1910 [ 1346.457403][ T1138] ? unregister_netdevice_many+0x20/0x20 [ 1346.463084][ T1138] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1346.468844][ T1138] ? __lock_acquire+0x7d80/0x7d80 [ 1346.473916][ T1138] unregister_netdevice_queue+0x2e9/0x330 [ 1346.479695][ T1138] ? list_netdevice+0x730/0x730 [ 1346.484586][ T1138] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1346.490372][ T1138] _cfg80211_unregister_wdev+0x16d/0x580 [ 1346.496056][ T1138] ieee80211_remove_interfaces+0x4b3/0x690 [ 1346.501959][ T1138] ? ieee80211_do_stop+0x2000/0x2000 [ 1346.507294][ T1138] ? rcu_is_watching+0x15/0xb0 [ 1346.512111][ T1138] ieee80211_unregister_hw+0x5d/0x2a0 [ 1346.517543][ T1138] mac80211_hwsim_del_radio+0x289/0x480 [ 1346.523139][ T1138] ? rhashtable_remove_fast+0xc00/0xc00 [ 1346.528742][ T1138] hwsim_exit_net+0x58d/0x650 [ 1346.533454][ T1138] ? hwsim_init_net+0x90/0x90 [ 1346.538172][ T1138] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1346.544062][ T1138] cleanup_net+0x6f7/0xb00 [ 1346.548608][ T1138] ? ops_free_list+0x3b0/0x3b0 [ 1346.553421][ T1138] ? _raw_spin_unlock_irq+0x23/0x50 [ 1346.558660][ T1138] ? process_scheduled_works+0x975/0x1600 [ 1346.564421][ T1138] ? process_scheduled_works+0x975/0x1600 [ 1346.570188][ T1138] process_scheduled_works+0xa60/0x1600 [ 1346.575813][ T1138] ? worker_attach_to_pool+0x370/0x370 [ 1346.581327][ T1138] ? assign_work+0x3cc/0x5d0 [ 1346.585963][ T1138] worker_thread+0xa5e/0xfe0 [ 1346.590632][ T1138] kthread+0x2fa/0x390 [ 1346.594743][ T1138] ? pr_cont_work+0x550/0x550 [ 1346.599463][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 1346.604102][ T1138] ret_from_fork+0x48/0x80 [ 1346.608569][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 1346.613212][ T1138] ret_from_fork_asm+0x11/0x20 [ 1346.618033][ T1138] [ 1346.621685][ T1138] Kernel Offset: disabled [ 1346.626201][ T1138] Rebooting in 86400 seconds..