last executing test programs: 31m12.245869282s ago: executing program 32 (id=36): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./tracefs/events/sched/filter\x00', 0x20002, &(0x7f0000000280), 0x1, 0x52d, &(0x7f00000020c0)="$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") write$rfkill(r0, &(0x7f0000000080)={0x9, 0x5, 0x0, 0x1}, 0x8) 29m57.98145398s ago: executing program 33 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 29m36.30528515s ago: executing program 34 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 29m17.682731727s ago: executing program 35 (id=472): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 28m37.712656512s ago: executing program 36 (id=564): syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0x11, 0x148, 0x340, 0x7f000000, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'erspan0\x00', {0xff}, 0x4, 0x1e}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) 9m22.020684434s ago: executing program 9 (id=4603): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 9m15.6782103s ago: executing program 9 (id=4618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000400)="e1c265e436668db73ed71843fc09a234a96c4ba30436", 0x8629, r0}, 0x38) 9m12.601174976s ago: executing program 9 (id=4627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x578410eb) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(r0, 0x0, r0) 9m9.245746099s ago: executing program 9 (id=4636): creat(0x0, 0xdafbe5d6891b6e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r0, 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000100)={0x0, 0xe690, 0x80, 0x5, 0x10050}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r7, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 9m7.406643454s ago: executing program 9 (id=4640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r3, &(0x7f0000000180)=""/109, 0x6d, 0x1000) 9m3.343142634s ago: executing program 9 (id=4652): write(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x274, 0x0) listxattr(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000080)={0x2, 0x10}, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088"], 0x60}}, 0x200040c0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="89070404", 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8m48.166783497s ago: executing program 37 (id=4652): write(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x274, 0x0) listxattr(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000080)={0x2, 0x10}, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088"], 0x60}}, 0x200040c0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="89070404", 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5m23.693771937s ago: executing program 8 (id=5104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 5m22.682241892s ago: executing program 8 (id=5108): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103d0000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 5m21.087200932s ago: executing program 8 (id=5113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x515e, 0xfffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5m19.776712794s ago: executing program 8 (id=5120): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 5m18.272369841s ago: executing program 8 (id=5121): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) 5m16.346746958s ago: executing program 8 (id=5124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x2d, 0x1001, r3, 0x0) fanotify_mark(r4, 0x22, 0x40001017, r3, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) 5m0.80177632s ago: executing program 38 (id=5124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x2d, 0x1001, r3, 0x0) fanotify_mark(r4, 0x22, 0x40001017, r3, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) 4m48.726649997s ago: executing program 5 (id=5188): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x442, 0x1ff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r3, 0x0, 0x78) 4m46.958883741s ago: executing program 5 (id=5191): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 4m46.120528632s ago: executing program 5 (id=5194): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) 4m44.97099709s ago: executing program 5 (id=5197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0xf00, 0x1000) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) 4m42.91204151s ago: executing program 5 (id=5200): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x20040040) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 4m40.92027232s ago: executing program 5 (id=5204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x42000000) 4m25.353768812s ago: executing program 39 (id=5204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x42000000) 4m22.158428561s ago: executing program 3 (id=5235): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4m19.884007147s ago: executing program 3 (id=5237): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 4m18.646997597s ago: executing program 3 (id=5241): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) pwritev2(r0, 0x0, 0x0, 0xe7c, 0x0, 0x0) sendmsg$alg(r0, 0x0, 0x48040) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) rseq(0x0, 0x0, 0x30000000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 4m13.485803375s ago: executing program 3 (id=5246): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x3, 0x9, 0x600, 0x8}, 0x20) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1004010, &(0x7f0000000500)=ANY=[], 0xfc, 0x6071, &(0x7f0000001f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17f) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write(0xffffffffffffffff, 0x0, 0x0) readlink(0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) shutdown(r3, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) 4m9.842098924s ago: executing program 3 (id=5252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(r4, 0x0, 0x100, 0x7fff) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) 4m7.411857414s ago: executing program 3 (id=5256): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x100, 0x80) getdents(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0xfffffffd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0x1, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 4m6.913676366s ago: executing program 40 (id=5256): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x100, 0x80) getdents(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0xfffffffd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0x1, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2m25.487287981s ago: executing program 4 (id=5422): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x20040040) gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 2m23.658676176s ago: executing program 4 (id=5428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x515e, 0xfffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m20.892194574s ago: executing program 4 (id=5433): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_open_dev$vivid(&(0x7f00000000c0), 0x3, 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)=0x2dff) setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) socket$inet(0x2, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2a482, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x2004890, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@aname}, {@noxattr}]}}) 2m14.398868414s ago: executing program 4 (id=5444): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 2m13.31142444s ago: executing program 4 (id=5448): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) 2m8.670485205s ago: executing program 4 (id=5455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x515e, 0xfffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000000c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m52.265348539s ago: executing program 41 (id=5455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x515e, 0xfffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000000c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 31.752079839s ago: executing program 7 (id=5666): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) fanotify_init(0x40, 0x101000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 27.65324068s ago: executing program 7 (id=5670): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) 15.971855367s ago: executing program 7 (id=5679): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 15.129423918s ago: executing program 6 (id=5681): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x20040040) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 14.027702415s ago: executing program 0 (id=5683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=ANY=[], 0x13) socket$packet(0x11, 0x2, 0x300) 13.683131754s ago: executing program 2 (id=5684): pselect6(0x40, &(0x7f0000000200)={0xa, 0x7fff, 0x0, 0x3, 0x4000000000010001, 0x1000000000000008, 0x400, 0x7}, &(0x7f0000000080)={0x9, 0x6, 0x4010001, 0x5, 0x11, 0x0, 0x8, 0x1004}, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f00000012c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20448d0}], 0x1, 0x80081) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x630982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.486254783s ago: executing program 2 (id=5685): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 12.21583608s ago: executing program 6 (id=5687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @empty, @local}}}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20741, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="48a0f96c33a017488c1e064596ff779d12d911fb4b43cad0091e548d2cacb792e462020a5282d0d3e4181c9e55936f8e960bc2dc05fc85170d5f1af7c76fd0bcab2b11b28e5c4a73c92e6143667ec57676dd15681015cd980e583c160f671f1ea3bf24c6", 0x64}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 11.015526589s ago: executing program 2 (id=5688): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x515e, 0xfffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 10.832246894s ago: executing program 0 (id=5689): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) 9.836923238s ago: executing program 6 (id=5691): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058) writev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1) 7.71321259s ago: executing program 7 (id=5693): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) 7.671783302s ago: executing program 0 (id=5694): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x20040040) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 7.531665475s ago: executing program 1 (id=5695): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 6.480084921s ago: executing program 1 (id=5696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6.427670012s ago: executing program 1 (id=5697): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x2}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2$9p(&(0x7f0000000080), 0x800) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.213288837s ago: executing program 1 (id=5698): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1f, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'S'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x66c7e65cbf3e4906, 0x2, 0x250, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4040) 5.908249995s ago: executing program 2 (id=5699): socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 5.815181697s ago: executing program 6 (id=5700): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2a0935e, &(0x7f0000000000)={[{@abort}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@dioread_nolock}, {@dioread_nolock}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x6c}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000340)=0x2a) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) syz_clone(0x3000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.27076783s ago: executing program 2 (id=5701): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x30, 0x36, 0x62, 0x61, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x62, 0x31, 0x30, 0x62, 0x30, 0x30, 0x64, 0x39, 0x64, 0x38, 0x64, 0x35, 0x33, 0x62, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x39]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x57, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x2a}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000500)="ce", 0x1, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) 4.336210774s ago: executing program 6 (id=5702): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x900}, 0x0) landlock_restrict_self(r3, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x90100, 0x100) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.282386965s ago: executing program 1 (id=5703): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 4.265696985s ago: executing program 0 (id=5704): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/fscaps', 0x2, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, 0x0, 0x40800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x554, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x6) 4.212827647s ago: executing program 7 (id=5705): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) 4.174717738s ago: executing program 1 (id=5706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r3, 0x4) listen(r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x0, 0x0, 0xa, 0x8, 0x30, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x9, &(0x7f0000000340)=""/9, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 3.980031852s ago: executing program 0 (id=5707): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@minixdf}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0xe3}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$eJzs3M1vFOUfAPDvTF94p4UfP5UXZRWNjWhLCyoHD2g04WJiogc81lIJUsDQmgghUo3Bo/EvUI8mJp68eNLEGPWk8ap3Y0IMF9CDqZndmXa23ZbtdttV9/NJdnmemWf2eb4z8+w+Mw/TALpWJXtLIrZHxM8RMVDL1heo1P65ffPqxB83r04kMTf34u9Jtdytm1cniqLFdtvyzFAakb6bxP4G9U5fvnJufGpq8lKeH5k5//rI9OUrj509P35m8szkhbHjx48dHX3yibHH2xJnFtetfW9dPLD35MsfPD8xF69892nW3u35+nIcNYNrrrMSlZjLLSztr74/tOZP/2fZUUonvR1sCKvSExHZ4eqr9v+B6ImFgzcQz70zn/m6Qw0E1k3227RrydKe/N90/vcL+C9K9HHoUsUvfnb9W7w2cvzRaTeezt4nq/Hfzl+1Nb2RZteyg7Ur9uUuaU+ssf7tEXFq9s8Ps1c0vA8BANBeX2bjn0cbjf/SuKtUbmc+hzIYEYcjYndE/C8i9kTE/yOqZe+OiHtWWX9lUX7p+OfHLS0F1qRs/PdUPrdVP/5L8xLJfG5HNf6+5NWzU5NH8n0yFH2bsvzoCnV89exP7y+3rlIa/2WvrP5iLJi347feTfXbnB6fGV9DyHVuvB2xr7dR/Mn8mDfbA3sjYl8Ln5/ts7OPfHIgS+/ctnT9neNfQRvmmeY+jni4dvxnY1H8haRW03LzkyObY2ryyEhxViz1/Q/XXyjn+0rpuvg3NxfT5laDbSA7/lsbnv95/EU3KOZrp1dfx/Vf3lv2mmbp8U/i1Gy5RO38T0tLsvO/P3mpmu7Pl705PjNzaTSiP19Qt3xsYdsiX5TP4h861Lj/747466N8u/0RkZ3E90bEfRFxMG/7/RHxQEQcWiH+b5958LWV91CL538bZPGfXun4Rwwm5fn6FhI95775Yrn6m/v+O1ZNDeVLmvn+a7aBa9l3AAAA8G+RVuegk3S4SJduTu2JrenUxemZw5V448Lp2lz1YPSlxZ2ugdL90NH83nCRH1uUPxoRu6r/02hLNT88cXFqRycDB6rP6tT1/0jT4eHaul97Ot06YN2tah6t/HTgZ5+3vzHAhvK8JnQv/R+6l/4P3Uv/h+7VqP9fi7jdgaYAG8zvP3Qv/R+6l/4P3Uv/h6609JH44s+ttPKk/0Ji98k1bb7uibmBdfnk2dVv1bNOkUb5j3Ysm0giorUqIl25TH8TtXcskd6xzIkWd8sqEgfzxKaIaHaraxu2Vzv7vQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAufwcAAP//eDnc9Q==") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xa0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r5, 0x0, 0x0, 0x2142, 0x0, 0x5) 2.892725979s ago: executing program 0 (id=5708): syz_usb_connect(0x3, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xb, &(0x7f0000000100)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) 1.22127021s ago: executing program 7 (id=5709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2508000000bc010280b401038054000180110002007063626328666372797074290000000008000100000001000a000200766c616e300000000a000200282b245e72000000050002000000000008000100060000000a000200762c616e300000001400018004000300040003000800010002000000240001800800010000000400080001000900000006000200ffff00000800010001010000b800018004"], 0x1e8}}, 0x10004000) socket$l2tp(0x2, 0x2, 0x73) 49.944469ms ago: executing program 2 (id=5710): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x515e, 0xfffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 6 (id=5711): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1537, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) kernel console output (not intermixed with test programs): subj=unconfined pid=18864 comm="syz.1.3727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f79e159 code=0x7ffc0000 [ 1051.791946][ T26] audit: type=1326 audit(1788941527.994:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.1.3727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa22f79e159 code=0x7ffc0000 [ 1051.819911][T18875] overlayfs: failed to resolve './file0': -2 [ 1052.928008][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3746'. [ 1053.436463][T18907] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1055.077992][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.154274][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.129039][T18916] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1056.162722][T18916] infiniband syz0: set active [ 1056.316966][T18916] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1056.357168][T18916] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1057.764322][T18916] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1057.787872][T18916] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1057.814978][T18916] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1057.838972][T18916] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1057.859903][T18916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1057.902209][T18242] lo speed is unknown, defaulting to 1000 [ 1064.979096][T18993] netlink: 'syz.5.3763': attribute type 1 has an invalid length. [ 1065.936875][T18993] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1066.489523][T18998] netlink: 'syz.9.3758': attribute type 1 has an invalid length. [ 1066.757486][T18999] device gretap1 entered promiscuous mode [ 1066.791150][T18999] bond5: (slave gretap1): making interface the new active one [ 1066.814152][T18999] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1066.839357][T19000] device macvlan0 entered promiscuous mode [ 1066.855402][T19000] device bond5 entered promiscuous mode [ 1066.862135][T19000] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1066.870189][T19000] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1066.889867][T19000] device bond5 left promiscuous mode [ 1066.944426][T17937] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 1066.976316][T19012] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3758'. [ 1070.835476][T19049] xt_CT: No such helper "netbios-ns" [ 1074.027369][T19089] futex_wake_op: syz.4.3787 tries to shift op by 144; fix this program [ 1074.046035][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3786'. [ 1074.169064][T19081] xt_CT: No such helper "pptp" [ 1075.501698][T19103] ip_tables: iptables: counters copy to user failed while replacing table [ 1078.542613][T19117] PKCS8: Unsupported PKCS#8 version [ 1085.459134][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.542607][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.615407][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.104624][T19190] tipc: Enabled bearer , priority 0 [ 1087.397206][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3818'. [ 1087.468710][T19203] device macvtap1 entered promiscuous mode [ 1087.517032][T19203] device batadv0 entered promiscuous mode [ 1087.551469][T19203] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1087.579268][T19203] device batadv0 left promiscuous mode [ 1096.925514][T19284] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.934919][T19284] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.944090][T19284] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.953031][T19284] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.233371][T19284] team0: Port device vxlan0 added [ 1109.292503][T19390] bond0 speed is unknown, defaulting to 1000 [ 1109.298880][T19390] bond0 speed is unknown, defaulting to 1000 [ 1109.306494][T19390] bond0 speed is unknown, defaulting to 1000 [ 1109.316821][T19390] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1109.331119][T19390] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1109.360215][T19390] bond0 speed is unknown, defaulting to 1000 [ 1109.367760][T19390] bond0 speed is unknown, defaulting to 1000 [ 1109.374488][T19390] bond0 speed is unknown, defaulting to 1000 [ 1109.383461][T19390] bond0 speed is unknown, defaulting to 1000 [ 1109.390391][T19390] bond0 speed is unknown, defaulting to 1000 [ 1114.625212][T19447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3884'. [ 1116.567908][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.574299][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.676154][T19469] overlayfs: failed to clone lowerpath [ 1124.451292][T19500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3889'. [ 1124.491651][T19500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3889'. [ 1124.535411][T19503] MPTCP: kernel_bind error, err=-98 [ 1127.622043][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 1127.622065][ T26] audit: type=1800 audit(1788941605.858:881): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3906" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1133.799175][T19570] tipc: Enabled bearer , priority 0 [ 1137.120511][T19593] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6071] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[19593] [ 1142.550541][T19617] tipc: Enabling of bearer rejected, already enabled [ 1142.957809][T19623] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3932'. [ 1144.003242][T19633] overlayfs: failed to clone lowerpath [ 1144.131817][T19635] overlayfs: failed to clone upperpath [ 1145.486509][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3937'. [ 1145.502862][T19646] device macvtap1 entered promiscuous mode [ 1145.846828][T19646] device batadv0 entered promiscuous mode [ 1145.853651][T19646] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1145.862728][T19646] device batadv0 left promiscuous mode [ 1146.003311][T19655] tipc: Enabling of bearer rejected, already enabled [ 1150.152478][T19697] futex_wake_op: syz.5.3956 tries to shift op by 144; fix this program [ 1155.402202][T19760] Set syz1 is full, maxelem 65536 reached [ 1159.307323][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3976'. [ 1161.025469][T19815] MPTCP: kernel_bind error, err=-99 [ 1163.516664][T19856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1173.174650][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4011'. [ 1173.202222][T19982] netlink: 'syz.5.4011': attribute type 30 has an invalid length. [ 1173.215726][T19982] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.224955][T19982] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.233814][T19982] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.242626][T19982] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.407130][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4011'. [ 1173.436551][T20001] netlink: 'syz.5.4011': attribute type 30 has an invalid length. [ 1177.392637][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.399094][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.632940][T20127] nftables ruleset with unbound set [ 1202.165997][ T26] audit: type=1800 audit(3936425328.410:882): pid=20247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4081" name="bus" dev="ramfs" ino=91914 res=0 errno=0 [ 1212.191428][T20314] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[20314] [ 1216.257636][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1217.316863][T20354] virtio-fs: tag not found [ 1230.403853][T20442] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4134'. [ 1230.446723][T20446] jffs2: notice: (20446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1231.043252][T20446] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1231.050560][T20446] jffs2 filesystem being mounted at /865/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1232.649178][ T26] audit: type=1804 audit(3936425358.892:883): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4139" name="bus" dev="ramfs" ino=92384 res=1 errno=0 [ 1232.751015][T20463] tipc: New replicast peer: 127.0.0.1 [ 1232.768744][T20463] tipc: Enabled bearer , priority 10 [ 1232.778936][ T26] audit: type=1804 audit(3936425358.932:884): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4139" name="bus" dev="ramfs" ino=92384 res=1 errno=0 [ 1236.160116][T20496] jffs2: notice: (20496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1236.356153][T20496] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1236.363521][T20496] jffs2 filesystem being mounted at /795/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1238.226680][T20518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4150'. [ 1238.801454][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.808187][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.758820][T20530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4156'. [ 1243.204531][ T26] audit: type=1804 audit(3936425369.453:885): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4159" name="bus" dev="ramfs" ino=93476 res=1 errno=0 [ 1243.308049][ T26] audit: type=1804 audit(3936425369.473:886): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4159" name="bus" dev="ramfs" ino=93476 res=1 errno=0 [ 1246.959725][T20584] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4169'. [ 1247.275092][T20593] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6997] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[20593] [ 1249.018927][ T26] audit: type=1804 audit(3936425375.263:887): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4174" name="bus" dev="ramfs" ino=92566 res=1 errno=0 [ 1249.109475][ T26] audit: type=1804 audit(3936425375.323:888): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4174" name="bus" dev="ramfs" ino=92566 res=1 errno=0 [ 1257.320874][T20680] ip_tables: iptables: counters copy to user failed while replacing table [ 1259.344578][T20704] netlink: 'syz.5.4205': attribute type 1 has an invalid length. [ 1259.358497][T20704] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4205'. [ 1259.832177][T20712] virtio-fs: tag not found [ 1273.270809][T20814] syz.1.4232 (20814) used greatest stack depth: 17488 bytes left [ 1273.398673][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1273.944432][T20830] netlink: 'syz.5.4237': attribute type 10 has an invalid length. [ 1274.838844][ T26] audit: type=1800 audit(3936425401.094:889): pid=20821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4234" name="bus" dev="ramfs" ino=93869 res=0 errno=0 [ 1279.170729][T20886] tipc: Enabling of bearer rejected, failed to enable media [ 1282.275223][T20904] netlink: 'syz.5.4252': attribute type 10 has an invalid length. [ 1282.326053][T20904] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4252'. [ 1283.461024][T20910] netlink: 'syz.9.4259': attribute type 1 has an invalid length. [ 1285.438935][T20928] device lo entered promiscuous mode [ 1285.873978][T20928] device tunl0 entered promiscuous mode [ 1286.641851][T20928] device gre0 entered promiscuous mode [ 1286.866430][T20928] device gretap0 entered promiscuous mode [ 1286.921427][T20928] device erspan0 entered promiscuous mode [ 1287.059319][T20928] device ip_vti0 entered promiscuous mode [ 1287.348944][T20928] device ip6_vti0 entered promiscuous mode [ 1287.372566][T20928] device sit0 entered promiscuous mode [ 1288.118541][T20987] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1288.382843][T20928] device ip6tnl0 entered promiscuous mode [ 1288.418878][T20928] device ip6gre0 entered promiscuous mode [ 1292.477101][T21036] ip_tables: iptables: counters copy to user failed while replacing table [ 1293.824195][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4306'. [ 1293.887036][T21051] device erspan1 entered promiscuous mode [ 1295.595185][T21076] fuse: Bad value for 'group_id' [ 1298.455673][T21104] ip_tables: iptables: counters copy to user failed while replacing table [ 1300.565346][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.572532][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.239109][T21152] overlayfs: failed to clone upperpath [ 1306.400992][T21202] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1313.452444][T21264] netlink: 'syz.8.4354': attribute type 4 has an invalid length. [ 1313.971107][T21276] netlink: 'syz.8.4361': attribute type 13 has an invalid length. [ 1313.979322][T21276] netlink: 'syz.8.4361': attribute type 27 has an invalid length. [ 1322.525385][T21354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1323.353347][T21356] overlayfs: failed to clone upperpath [ 1326.169971][T21376] overlayfs: failed to clone lowerpath [ 1336.866911][T21479] overlayfs: failed to clone lowerpath [ 1340.737644][T21526] netlink: 'syz.5.4431': attribute type 1 has an invalid length. [ 1343.706603][T21559] sctp: [Deprecated]: syz.9.4438 (pid 21559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1343.706603][T21559] Use struct sctp_sack_info instead [ 1344.143153][T21558] tipc: Enabling of bearer rejected, already enabled [ 1353.914681][T21674] 9pnet: p9_errstr2errno: server reported unknown error tun [ 1356.312289][T21693] futex_wake_op: syz.1.4478 tries to shift op by 144; fix this program [ 1356.365249][T21698] netlink: 'syz.4.4477': attribute type 2 has an invalid length. [ 1357.989921][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4484'. [ 1361.911473][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.917904][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.308628][T21789] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4500'. [ 1370.211788][T21870] lo speed is unknown, defaulting to 1000 [ 1372.305043][T21870] bond0 speed is unknown, defaulting to 1000 [ 1388.839631][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4557'. [ 1388.848738][T22019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4557'. [ 1392.616070][T22056] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1399.955737][T22126] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4586'. [ 1399.966871][T22126] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4586'. [ 1404.527654][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4599'. [ 1411.080076][T22216] device veth1_to_bond entered promiscuous mode [ 1411.100786][T22216] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4612'. [ 1412.732367][T22214] device veth1_to_bond left promiscuous mode [ 1413.311935][ T4290] Bluetooth: hci0: unknown advertising packet type: 0x30 [ 1413.312095][ T4290] Bluetooth: hci0: unknown advertising packet type: 0x74 [ 1413.322099][ T4290] Bluetooth: hci0: unknown advertising packet type: 0x69 [ 1413.331784][ T4290] Bluetooth: hci0: unknown advertising packet type: 0x66 [ 1413.340644][ T4290] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 1413.350759][ T4290] Bluetooth: hci0: unknown advertising packet type: 0x5f [ 1413.359766][ T4290] Bluetooth: hci0: unknown advertising packet type: 0x30 [ 1416.038140][T22271] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4625'. [ 1416.056523][T22271] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1416.064861][T22271] infiniband syz0: set active [ 1416.070077][T22271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1416.102554][T21747] lo speed is unknown, defaulting to 1000 [ 1416.382730][T22275] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4624'. [ 1423.402985][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.409407][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.904784][T22367] syz.1.4647 sent an empty control message without MSG_MORE. [ 1426.631600][T22380] device wlan0 left promiscuous mode [ 1426.665906][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1439.954433][ T4290] Bluetooth: hci0: link tx timeout [ 1441.476157][T22543] fuse: Bad value for 'group_id' [ 1444.989475][T22580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1445.006790][T22576] device veth1_to_bond entered promiscuous mode [ 1445.013721][T22580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1445.025966][T22580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1445.035932][T22580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1445.047019][T22580] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1445.054596][T22580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1445.126144][T22576] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4705'. [ 1445.367036][T22577] lo speed is unknown, defaulting to 1000 [ 1446.251266][T22575] device veth1_to_bond left promiscuous mode [ 1446.365911][T22577] bond0 speed is unknown, defaulting to 1000 [ 1446.749307][T22603] sctp: [Deprecated]: syz.4.4718 (pid 22603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1446.749307][T22603] Use struct sctp_sack_info instead [ 1447.231516][T22607] overlayfs: failed to clone lowerpath [ 1448.036767][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 1450.076854][T22580] Bluetooth: hci5: command 0x041b tx timeout [ 1450.219681][T22577] chnl_net:caif_netlink_parms(): no params data found [ 1450.741865][T22577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.785175][T22577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.821210][T22577] device bridge_slave_0 entered promiscuous mode [ 1450.941662][T22577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.958166][T22577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.995892][T22577] device bridge_slave_1 entered promiscuous mode [ 1451.192258][T22577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.218888][T19423] tipc: Disabling bearer [ 1451.241858][T19423] tipc: Disabling bearer [ 1451.263564][T22577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.273578][T19423] tipc: Left network mode [ 1451.454395][T22577] team0: Port device team_slave_0 added [ 1451.544599][T22577] team0: Port device team_slave_1 added [ 1451.685226][T22577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.721224][T22577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1451.816276][T22577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.971755][T22577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.986467][T22577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.087012][T22577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.148457][T22580] Bluetooth: hci5: command 0x040f tx timeout [ 1452.378622][T22668] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4727'. [ 1452.500424][T22668] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4727'. [ 1452.528595][T22577] device hsr_slave_0 entered promiscuous mode [ 1452.566162][T22577] device hsr_slave_1 entered promiscuous mode [ 1452.616638][T22577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1452.624995][T22577] Cannot create hsr debugfs directory [ 1454.235658][T22580] Bluetooth: hci5: command 0x0419 tx timeout [ 1455.830247][T22719] overlayfs: failed to clone upperpath [ 1458.329079][T22744] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1458.553437][T19423] device hsr_slave_0 left promiscuous mode [ 1458.567947][T19423] device hsr_slave_1 left promiscuous mode [ 1460.268611][T19423] bond4 (unregistering): Released all slaves [ 1460.317654][T19423] bond3 (unregistering): Released all slaves [ 1461.626029][T19423] bond2 (unregistering): Released all slaves [ 1462.257951][T19423] bond1 (unregistering): Released all slaves [ 1463.827272][T22821] overlayfs: failed to clone lowerpath [ 1466.985457][T19423] bond0 (unregistering): Released all slaves [ 1467.102273][T19423] smc: removing net device lo with user defined pnetid SYZ0 [ 1471.274244][T22577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1471.329760][T22577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1471.368781][T22577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1471.421134][T22577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1471.766971][T22861] tipc: Enabling of bearer rejected, already enabled [ 1471.827005][T22577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.894065][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1471.920112][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1471.950721][T22577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.990682][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1472.026247][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1472.066154][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.073328][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.136537][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1472.164053][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1472.208661][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1472.248672][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.255949][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.273979][T22871] futex_wake_op: syz.5.4772 tries to shift op by 144; fix this program [ 1472.329724][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1472.403665][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1472.471663][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1472.603520][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1472.704566][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1472.774541][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1472.835174][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1473.009565][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1473.097494][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1473.755624][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1473.810889][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1473.870096][T22577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1473.957298][T22879] tipc: Started in network mode [ 1473.962546][T22879] tipc: Node identity 9e0d94cd3313, cluster identity 4711 [ 1473.993028][T22879] tipc: Enabled bearer , priority 0 [ 1475.336039][ T4333] tipc: Node number set to 2904462541 [ 1476.896049][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1476.903583][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1476.951383][T22577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.019971][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1477.055935][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1477.111147][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1477.135941][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1477.165707][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1477.205452][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1477.237839][T22577] device veth0_vlan entered promiscuous mode [ 1477.262998][T22577] device veth1_vlan entered promiscuous mode [ 1477.333134][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1477.355909][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1477.375462][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1477.410555][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1477.432316][T22577] device veth0_macvtap entered promiscuous mode [ 1477.456735][T22577] device veth1_macvtap entered promiscuous mode [ 1477.533158][T22577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.541535][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1477.554828][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1477.564192][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1477.577955][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1477.593716][T22577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.604087][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1477.620395][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1477.637207][T22577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.652011][T22577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.661926][T22577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.674519][T22577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.798943][T19424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.823468][T19424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.842184][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1477.890715][ T5081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.911066][ T5081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.928157][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1481.352155][T22963] loop3: detected capacity change from 0 to 1024 [ 1482.474820][ T5091] hfsplus: bad catalog file entry [ 1482.491736][T22966] futex_wake_op: syz.8.4785 tries to shift op by 144; fix this program [ 1482.541911][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1484.110499][T22981] syz.3.4788: attempt to access beyond end of device [ 1484.110499][T22981] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1484.127217][T22981] qnx4: unable to read the superblock [ 1485.454947][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.474709][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.434047][T23024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1493.332018][T23068] loop3: detected capacity change from 0 to 8 [ 1493.348909][T23069] overlayfs: failed to clone lowerpath [ 1493.876273][T23068] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1493.884967][T23068] SQUASHFS error: Failed to read block 0x9b: -5 [ 1493.891403][T23068] SQUASHFS error: Unable to read metadata cache entry [99] [ 1493.899054][T23068] SQUASHFS error: Unable to read inode 0x127 [ 1494.287703][T23082] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1494.643870][T23091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1498.780241][T23127] fuse: Bad value for 'group_id' [ 1500.742100][T23160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1505.347866][T23202] netlink: 'syz.1.4854': attribute type 10 has an invalid length. [ 1505.374357][T23202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1505.688296][T23202] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1507.060106][ T47] rpcbind: server 127.0.0.1 not responding, timed out [ 1515.881994][T23289] loop3: detected capacity change from 0 to 256 [ 1516.408662][T23289] vfat filesystem being mounted at /21/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1518.701726][T23299] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1519.934371][T23326] overlayfs: failed to clone lowerpath [ 1527.940349][T23386] loop3: detected capacity change from 0 to 512 [ 1527.979218][T23386] msdos filesystem being mounted at /25/bus supports timestamps until 2108-01-01 (0x103915e0a) [ 1527.994144][T22580] Bluetooth: hci5: unknown advertising packet type: 0x30 [ 1527.994229][T22580] Bluetooth: hci5: unknown advertising packet type: 0x74 [ 1528.005674][T22580] Bluetooth: hci5: unknown advertising packet type: 0x69 [ 1528.013693][T22580] Bluetooth: hci5: unknown advertising packet type: 0x66 [ 1528.020981][T22580] Bluetooth: hci5: unknown advertising packet type: 0x65 [ 1528.029357][T22580] Bluetooth: hci5: unknown advertising packet type: 0x5f [ 1528.036511][T22580] Bluetooth: hci5: unknown advertising packet type: 0x30 [ 1528.152710][T23386] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1529.166426][T23404] overlayfs: failed to clone lowerpath [ 1534.150547][T23460] sctp: [Deprecated]: syz.8.4891 (pid 23460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1534.150547][T23460] Use struct sctp_sack_info instead [ 1536.379943][T23481] xt_policy: output policy not valid in PREROUTING and INPUT [ 1539.183119][T23517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1539.718794][T23525] sctp: [Deprecated]: syz.3.4904 (pid 23525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1539.718794][T23525] Use struct sctp_sack_info instead [ 1543.456000][T23539] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1545.988093][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.994552][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.011203][T23611] lo speed is unknown, defaulting to 1000 [ 1550.283802][T23616] sctp: [Deprecated]: syz.1.4918 (pid 23616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1550.283802][T23616] Use struct sctp_sack_info instead [ 1551.870571][T23611] bond0 speed is unknown, defaulting to 1000 [ 1552.346982][T23634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4914'. [ 1563.287442][T23731] overlayfs: failed to clone upperpath [ 1563.387003][T23762] UBIFS error (pid: 23762): cannot open "(null)", error -22 [ 1564.865036][T23776] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1567.440137][T23808] xt_policy: output policy not valid in PREROUTING and INPUT [ 1568.090581][T23779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4955'. [ 1569.125512][T23822] loop3: detected capacity change from 0 to 512 [ 1569.198538][T22580] Bluetooth: hci5: command 0x0406 tx timeout [ 1569.308058][T23822] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.4964: missing EA_INODE flag [ 1569.446767][T23822] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.4964: error while reading EA inode 2 err=-117 [ 1569.505116][T23822] EXT4-fs (loop3): 1 orphan inode deleted [ 1569.523817][T23822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1574.487110][T22577] EXT4-fs (loop3): unmounting filesystem. [ 1575.514640][T23884] loop3: detected capacity change from 0 to 2048 [ 1575.846101][T23884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1582.848812][T23958] device lo entered promiscuous mode [ 1583.530701][T23958] infiniband syz0: set down [ 1584.326043][T23958] device tunl0 entered promiscuous mode [ 1584.387147][T23958] device gre0 entered promiscuous mode [ 1584.438041][T23958] device gretap0 entered promiscuous mode [ 1584.472317][T23958] device erspan0 entered promiscuous mode [ 1584.529062][T23958] device ip_vti0 entered promiscuous mode [ 1584.565697][T23958] device ip6_vti0 entered promiscuous mode [ 1584.599462][T23976] loop3: detected capacity change from 0 to 2048 [ 1584.629176][T23958] device sit0 entered promiscuous mode [ 1584.698516][T23976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1584.751244][T23976] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1584.838024][T23958] device ip6tnl0 entered promiscuous mode [ 1584.885004][T23958] device ip6gre0 entered promiscuous mode [ 1584.946586][T23958] device ip6gretap0 entered promiscuous mode [ 1585.020190][T23958] device vcan0 entered promiscuous mode [ 1585.051915][T23958] device bond0 entered promiscuous mode [ 1585.123563][T22577] EXT4-fs (loop3): unmounting filesystem. [ 1585.131041][T23958] device nlmon0 entered promiscuous mode [ 1585.251435][T23958] device caif0 entered promiscuous mode [ 1585.259236][T23958] device veth0 entered promiscuous mode [ 1585.278202][T23958] device veth1 entered promiscuous mode [ 1585.299122][T23958] device wg0 entered promiscuous mode [ 1585.318961][T23958] device wg1 entered promiscuous mode [ 1585.339625][T23958] device veth0_to_bridge entered promiscuous mode [ 1585.362594][T23958] device veth1_to_bridge entered promiscuous mode [ 1585.387703][T23958] device bridge_slave_1 entered promiscuous mode [ 1585.406235][T23958] device veth0_to_bond entered promiscuous mode [ 1585.422403][T23958] device bond_slave_0 entered promiscuous mode [ 1585.439523][T23958] device veth1_to_bond entered promiscuous mode [ 1585.455762][T23958] device bond_slave_1 entered promiscuous mode [ 1585.497358][T23958] device veth1_to_team entered promiscuous mode [ 1585.532838][T23958] device team_slave_1 entered promiscuous mode [ 1585.568825][T23958] device veth0_to_batadv entered promiscuous mode [ 1585.585461][T23958] device batadv_slave_0 entered promiscuous mode [ 1585.592664][T23958] device veth1_to_batadv entered promiscuous mode [ 1585.599374][T23958] device batadv_slave_1 entered promiscuous mode [ 1585.606051][T23958] device xfrm0 entered promiscuous mode [ 1585.612221][T23958] device veth0_to_hsr entered promiscuous mode [ 1585.618759][T23958] device veth1_to_hsr entered promiscuous mode [ 1585.625302][T23958] device hsr0 entered promiscuous mode [ 1585.631092][T23958] device veth1_virt_wifi entered promiscuous mode [ 1585.637692][T23958] device veth0_virt_wifi entered promiscuous mode [ 1585.644355][T23958] device virt_wifi0 entered promiscuous mode [ 1585.658175][T23958] device macvtap0 entered promiscuous mode [ 1585.674813][T23958] device macsec0 entered promiscuous mode [ 1585.691718][T23958] device geneve0 entered promiscuous mode [ 1585.711142][T23958] device geneve1 entered promiscuous mode [ 1585.800345][T23992] ubi0: attaching mtd0 [ 1585.818533][T23992] ubi0: scanning is finished [ 1585.823308][T23992] ubi0: empty MTD device detected [ 1586.300745][T23958] device netdevsim0 entered promiscuous mode [ 1586.307035][T23958] device netdevsim1 entered promiscuous mode [ 1586.323782][T23992] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1586.334648][T23958] device netdevsim2 entered promiscuous mode [ 1586.355407][T23958] device netdevsim3 entered promiscuous mode [ 1586.407300][T23958] device wlan0 entered promiscuous mode [ 1586.437798][T23958] device wlan1 entered promiscuous mode [ 1587.538984][T23958] device ipvlan2 entered promiscuous mode [ 1587.544938][T23958] device vrf0 entered promiscuous mode [ 1587.587330][T23958] device bond1 entered promiscuous mode [ 1587.606976][T23958] tipc: Resetting bearer [ 1587.655706][T23958] device syzkaller0 entered promiscuous mode [ 1587.690094][T23958] device batadv0 entered promiscuous mode [ 1587.696215][T23958] device vlan3 entered promiscuous mode [ 1587.739086][T23958] device vti0 entered promiscuous mode [ 1587.744799][T23958] device bridge1 entered promiscuous mode [ 1587.778942][T23958] device  entered promiscuous mode [ 1587.784376][T23958] device vxlan0 entered promiscuous mode [ 1587.827899][T23958] device bridge0 entered promiscuous mode [ 1587.866758][T23958] device > entered promiscuous mode [ 1587.911601][T23958] device bridge2 entered promiscuous mode [ 1587.918703][T23958] device veth2 entered promiscuous mode [ 1587.924688][T23958] device veth3 entered promiscuous mode [ 1587.930756][T23958] device xfrm1 entered promiscuous mode [ 1587.936532][T23958] device bond2 entered promiscuous mode [ 1587.942978][T23958] device vlan4 entered promiscuous mode [ 1587.948917][T23958] device syztnl2 entered promiscuous mode [ 1587.954831][T23958] device bond3 entered promiscuous mode [ 1587.961189][T23958] device sit1 entered promiscuous mode [ 1588.541981][T23958] device bond4 entered promiscuous mode [ 1588.603783][T23958] device veth4 entered promiscuous mode [ 1588.648906][T23958] device veth5 entered promiscuous mode [ 1588.697192][T23958] device veth6 entered promiscuous mode [ 1588.703089][T23958] device veth7 entered promiscuous mode [ 1588.709892][T23958] device sit2 entered promiscuous mode [ 1589.765295][T23958] device bridge3 entered promiscuous mode [ 1589.842423][T23958] device bond5 entered promiscuous mode [ 1589.992676][T23958] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1590.001787][T23958] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1590.010899][T23958] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1590.019870][T23958] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1590.172073][T24014] loop3: detected capacity change from 0 to 256 [ 1590.193412][T23958] device vxlan1 entered promiscuous mode [ 1590.258543][T24014] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1590.272741][T23958] device ip6gretap1 entered promiscuous mode [ 1590.300444][T21747] lo speed is unknown, defaulting to 1000 [ 1590.355521][T24014] exfat filesystem being mounted at /53/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1590.408685][T21744] lo speed is unknown, defaulting to 1000 [ 1592.469656][T24039] xt_policy: output policy not valid in PREROUTING and INPUT [ 1593.344230][T24041] Option 'dnserror' to dns_resolver key: bad/missing value [ 1597.534259][T24066] loop3: detected capacity change from 0 to 512 [ 1597.831204][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1597.841890][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1597.852441][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3cd9 instead [ 1597.863198][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2af7 instead [ 1597.873764][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1597.884358][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1597.895409][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1597.906299][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1597.917087][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1597.927917][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1597.938888][T24069] jffs2: Further such events for this erase block will not be printed [ 1597.951062][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1597.961648][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1597.972206][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3cd9 instead [ 1597.983223][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2af7 instead [ 1597.993763][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1598.004462][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1598.014972][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1598.025681][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1598.036579][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1598.047488][T24069] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1598.057967][T24069] jffs2: Further such events for this erase block will not be printed [ 1598.068346][T24069] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1598.077890][T24069] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1607.434302][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.440813][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.295200][T24158] lo speed is unknown, defaulting to 1000 [ 1608.705897][T24164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.714754][T24164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.736236][T24164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1608.760768][ T4365] bond0 speed is unknown, defaulting to 1000 [ 1610.030936][T24158] bond0 speed is unknown, defaulting to 1000 [ 1615.087680][T24207] loop3: detected capacity change from 0 to 256 [ 1615.130187][T24207] vfat filesystem being mounted at /61/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2107-12-31 (0x10391447e) [ 1620.417192][T24244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5049'. [ 1620.980558][T24243] bridge3: port 1(erspan0) entered blocking state [ 1621.000127][T24243] bridge3: port 1(erspan0) entered disabled state [ 1622.975140][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5055'. [ 1623.040782][T24269] tipc: Started in network mode [ 1623.045752][T24269] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1623.084492][T24269] tipc: Enabled bearer , priority 10 [ 1624.077258][ T4366] tipc: Node number set to 10136234 [ 1626.359548][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079414000: rx timeout, send abort [ 1627.597045][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079414000: abort rx timeout. Force session deactivation [ 1630.956079][T24333] loop3: detected capacity change from 0 to 128 [ 1631.012478][T24333] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1631.291740][T24254] udevd[24254]: incorrect ext4 checksum on /dev/loop3 [ 1633.068517][T24363] lo speed is unknown, defaulting to 1000 [ 1633.539185][T24363] bond0 speed is unknown, defaulting to 1000 [ 1640.847151][T24453] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1640.928423][T24453] tipc: Enabled bearer , priority 10 [ 1643.689090][T24489] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1647.833306][T24545] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1648.882276][T24553] syz.3.5115: attempt to access beyond end of device [ 1648.882276][T24553] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1648.906999][T24553] qnx4: unable to read the superblock [ 1652.565069][T24586] tipc: Enabling of bearer rejected, failed to enable media [ 1654.203821][T24602] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1654.436606][T24606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1654.446027][T24606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1654.456555][T24606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1654.465642][T24606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1663.666424][T24676] syz.3.5137: attempt to access beyond end of device [ 1663.666424][T24676] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1664.438719][T24676] qnx4: unable to read the superblock [ 1664.901879][T24690] lo speed is unknown, defaulting to 1000 [ 1665.442235][T24690] bond0 speed is unknown, defaulting to 1000 [ 1666.921304][T24706] loop3: detected capacity change from 0 to 1024 [ 1666.988836][T24706] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1667.052715][T24706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1667.101473][T24706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 1667.150901][T24706] System zones: 0-1, 3-36 [ 1667.259169][T24706] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1667.474660][ T26] audit: type=1800 audit(3936425793.726:890): pid=24706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5152" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1669.208909][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.215465][ T26] audit: type=1326 audit(3936425795.226:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.4.5157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecab9e159 code=0x7ffc0000 [ 1669.249250][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.293255][T22577] EXT4-fs (loop3): unmounting filesystem. [ 1669.376413][ T26] audit: type=1326 audit(3936425795.226:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.4.5157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecab9e159 code=0x7ffc0000 [ 1669.592479][ T26] audit: type=1326 audit(3936425795.326:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.4.5157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f9ecab9e159 code=0x7ffc0000 [ 1670.879696][ T26] audit: type=1326 audit(3936425795.326:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.4.5157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecab9e159 code=0x7ffc0000 [ 1670.999483][T24747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5164'. [ 1671.124303][ T26] audit: type=1326 audit(3936425795.326:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.4.5157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecab9e159 code=0x7ffc0000 [ 1671.355914][ T26] audit: type=1326 audit(3936425795.406:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.4.5157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9ecab9e159 code=0x7ffc0000 [ 1671.866075][ T26] audit: type=1326 audit(3936425795.406:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.4.5157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecab9e159 code=0x7ffc0000 [ 1672.065674][ T26] audit: type=1326 audit(3936425795.406:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24728 comm="syz.4.5157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecab9e159 code=0x7ffc0000 [ 1672.075997][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1672.106692][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1672.115935][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1672.124831][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1672.132622][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1672.140598][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1672.327383][T24760] lo speed is unknown, defaulting to 1000 [ 1672.840620][T17937] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1672.894646][T24772] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1672.920452][T17937] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.387571][T17937] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.435984][T17937] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.543896][T24760] bond0 speed is unknown, defaulting to 1000 [ 1674.226237][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 1674.305709][T17937] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1674.357439][T17937] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.665713][ T4285] Bluetooth: hci0: unexpected event for opcode 0x041b [ 1674.701201][T17937] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1674.713767][T17937] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.791926][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 1677.031535][T24815] lo speed is unknown, defaulting to 1000 [ 1677.166218][T24815] bond0 speed is unknown, defaulting to 1000 [ 1677.404487][T17937] tipc: Disabling bearer [ 1677.412392][T17937] tipc: Disabling bearer [ 1677.512492][T17937] tipc: Disabling bearer [ 1677.617975][T24832] overlayfs: failed to clone upperpath [ 1677.676668][T17937] tipc: Left network mode [ 1677.725310][T24760] chnl_net:caif_netlink_parms(): no params data found [ 1678.929885][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 1681.603619][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 1682.300019][T24760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.331751][T24760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.369420][T24760] device bridge_slave_0 entered promiscuous mode [ 1683.446247][T24760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.468821][T24760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.507933][T24760] device bridge_slave_1 entered promiscuous mode [ 1684.570921][T24760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.732322][T24760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.771186][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1685.779793][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1685.788516][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1685.796255][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1685.803611][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1685.811261][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1685.818865][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1685.826482][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1685.833784][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1685.841041][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1685.848364][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 1685.855743][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr8: link becomes ready [ 1685.863181][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): nr9: link becomes ready [ 1685.870746][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1685.878293][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1685.886593][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1685.894574][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1685.902188][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1685.909953][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1685.918628][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1685.926452][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1685.934218][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1685.941846][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1685.950157][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1685.957829][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1685.965553][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb16: link becomes ready [ 1685.973398][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb17: link becomes ready [ 1685.981559][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb18: link becomes ready [ 1685.989742][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb19: link becomes ready [ 1685.997567][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb20: link becomes ready [ 1686.005214][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb21: link becomes ready [ 1686.012872][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb22: link becomes ready [ 1686.020653][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb23: link becomes ready [ 1686.028230][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb24: link becomes ready [ 1686.035961][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb25: link becomes ready [ 1686.043851][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb26: link becomes ready [ 1686.051878][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb27: link becomes ready [ 1686.060106][T24906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb28: link becomes ready [ 1687.646199][T24760] team0: Port device team_slave_0 added [ 1688.029786][T24760] team0: Port device team_slave_1 added [ 1688.046033][T24924] lo speed is unknown, defaulting to 1000 [ 1688.351553][T24760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.394788][T24760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.518869][T24760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.759867][T24760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.777251][T24760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.903993][T24760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.499382][T24924] bond0 speed is unknown, defaulting to 1000 [ 1690.814458][T17937] IPVS: stopping master sync thread 17830 ... [ 1691.973426][T24760] device hsr_slave_0 entered promiscuous mode [ 1692.023751][T24760] device hsr_slave_1 entered promiscuous mode [ 1692.083197][T24760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1692.091186][T24760] Cannot create hsr debugfs directory [ 1692.197621][T24952] unsupported nla_type 55137 [ 1693.890443][T17937] device hsr_slave_0 left promiscuous mode [ 1693.915549][T17937] device hsr_slave_1 left promiscuous mode [ 1695.429316][T17937] team0 (unregistering): Port device vxlan0 removed [ 1697.003476][T24993] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5222'. [ 1697.707216][T17937] bond5 (unregistering): Released all slaves [ 1698.192411][T17937] bond4 (unregistering): Released all slaves [ 1699.379322][T17937] bond3 (unregistering): Released all slaves [ 1701.394860][T17937] bond2 (unregistering): Released all slaves [ 1701.495786][T17937] bond1 (unregistering): Released all slaves [ 1704.376080][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1704.397778][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1704.407713][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1704.420255][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1704.431456][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1704.439362][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1704.493987][T17937] bond0 (unregistering): Released all slaves [ 1704.620611][T17937] smc: removing net device lo with user defined pnetid SYZ0 [ 1706.225478][ T4333] bond0 speed is unknown, defaulting to 1000 [ 1706.532226][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 1706.706793][T25036] lo speed is unknown, defaulting to 1000 [ 1708.028036][T24760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1708.622150][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 1708.636355][T24760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1708.776615][T24760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1708.853357][T24760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1708.932390][T25036] chnl_net:caif_netlink_parms(): no params data found [ 1711.041900][T22580] Bluetooth: hci4: command 0x040f tx timeout [ 1711.433028][T25036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.440297][T25036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.466844][T25036] device bridge_slave_0 entered promiscuous mode [ 1711.589611][T24760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.618788][T25036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.636606][T25036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.716405][T25036] device bridge_slave_1 entered promiscuous mode [ 1712.161292][T24760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1712.209259][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1712.222598][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1712.305839][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1712.361842][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1712.370500][T19421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.377698][T19421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1712.395462][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1712.405747][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1712.418528][T19421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.426114][T19421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1712.439548][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1712.457844][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1712.483165][T25036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.513001][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1712.556992][T25036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.655238][T24760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1712.711751][T24760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1713.575724][T25036] team0: Port device team_slave_0 added [ 1713.611964][T22580] Bluetooth: hci4: command 0x0419 tx timeout [ 1713.651107][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1713.687354][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1713.737119][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1713.799014][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1713.844344][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1713.906652][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1713.983560][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1714.044186][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1714.092522][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1714.141388][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1714.311435][T25036] team0: Port device team_slave_1 added [ 1714.469050][T25036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.491738][T25036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.580362][T25083] FAULT_INJECTION: forcing a failure. [ 1714.580362][T25083] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.619367][T25036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.633069][T25083] CPU: 1 PID: 25083 Comm: syz.3.5241 Not tainted syzkaller #0 [ 1714.640736][T25083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1714.650982][T25083] Call Trace: [ 1714.654314][T25083] [ 1714.657302][T25083] dump_stack_lvl+0x188/0x24e [ 1714.662161][T25083] ? show_regs_print_info+0x12/0x12 [ 1714.667526][T25083] ? load_image+0x410/0x410 [ 1714.672194][T25083] ? __might_sleep+0xd0/0xd0 [ 1714.676948][T25083] ? __lock_acquire+0x7c40/0x7c40 [ 1714.682073][T25083] should_fail_ex+0x390/0x4c0 [ 1714.686946][T25083] should_failslab+0x5/0x20 [ 1714.691548][T25083] slab_pre_alloc_hook+0x59/0x300 [ 1714.696668][T25083] kmem_cache_alloc+0x56/0x2f0 [ 1714.701558][T25083] ? __pmd_alloc+0x116/0x760 [ 1714.706283][T25083] __pmd_alloc+0x116/0x760 [ 1714.710749][T25083] ? __lock_acquire+0x7c40/0x7c40 [ 1714.715810][T25083] ? do_raw_spin_lock+0x128/0x2f0 [ 1714.720900][T25083] ? __pud_alloc+0x150/0x150 [ 1714.725523][T25083] ? __rwlock_init+0x140/0x140 [ 1714.730360][T25083] ? hugepage_vma_check+0x461/0x540 [ 1714.735737][T25083] handle_mm_fault+0xa06/0x3d40 [ 1714.740780][T25083] ? numa_migrate_prep+0x250/0x250 [ 1714.746049][T25083] ? vma_is_secretmem+0x9/0x40 [ 1714.750924][T25083] ? check_vma_flags+0x340/0x4c0 [ 1714.755939][T25083] __get_user_pages+0x40d/0xec0 [ 1714.760873][T25083] ? populate_vma_page_range+0x2b0/0x2b0 [ 1714.766546][T25083] ? __might_sleep+0xd0/0xd0 [ 1714.771161][T25083] ? read_lock_is_recursive+0x10/0x10 [ 1714.776662][T25083] __get_user_pages_remote+0x1c2/0x730 [ 1714.782169][T25083] ? get_user_pages_remote+0x55/0xa0 [ 1714.787648][T25083] get_arg_page+0x1ca/0x410 [ 1714.792313][T25083] ? copy_string_kernel+0x220/0x220 [ 1714.797559][T25083] ? up_write+0x1b6/0x410 [ 1714.801922][T25083] ? alloc_bprm+0x37a/0x710 [ 1714.806489][T25083] copy_string_kernel+0x161/0x220 [ 1714.811556][T25083] do_execveat_common+0x35d/0x6b0 [ 1714.816658][T25083] __x64_sys_execve+0x8e/0xa0 [ 1714.821417][T25083] do_syscall_64+0x4c/0xa0 [ 1714.825871][T25083] ? clear_bhb_loop+0x60/0xb0 [ 1714.830606][T25083] ? clear_bhb_loop+0x60/0xb0 [ 1714.835348][T25083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.841277][T25083] RIP: 0033:0x7f4f9a79e159 [ 1714.845837][T25083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.865659][T25083] RSP: 002b:00007f4f9b5aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1714.874119][T25083] RAX: ffffffffffffffda RBX: 00007f4f9aa25fa0 RCX: 00007f4f9a79e159 [ 1714.882122][T25083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 1714.890309][T25083] RBP: 00007f4f9a83503b R08: 0000000000000000 R09: 0000000000000000 [ 1714.898323][T25083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1714.906433][T25083] R13: 00007f4f9aa26038 R14: 00007f4f9aa25fa0 R15: 00007fffc12c2f68 [ 1714.914887][T25083] [ 1714.983904][T25036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.004194][T25036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1715.117671][T25036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.296442][T25091] ISOFS: Unable to identify CD-ROM format. [ 1715.436735][T25036] device hsr_slave_0 entered promiscuous mode [ 1715.488330][T25036] device hsr_slave_1 entered promiscuous mode [ 1715.522913][T25036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1715.542781][T25036] Cannot create hsr debugfs directory [ 1716.646923][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1716.669216][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1716.737846][T24760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1716.962960][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1716.984617][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1717.857821][T24760] device veth0_vlan entered promiscuous mode [ 1717.884850][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1717.898742][T25093] loop3: detected capacity change from 0 to 32768 [ 1717.919148][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1717.943396][T25093] jfs filesystem being mounted at /99/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 1717.954989][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1717.983011][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1718.005060][ T26] audit: type=1800 audit(3936425844.279:899): pid=25091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5246" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 1718.075682][T24760] device veth1_vlan entered promiscuous mode [ 1719.478514][T23946] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1719.709397][T23946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1719.781120][T23946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1719.846680][T24760] device veth0_macvtap entered promiscuous mode [ 1719.969401][T24760] device veth1_macvtap entered promiscuous mode [ 1721.005480][T25128] lo speed is unknown, defaulting to 1000 [ 1721.105653][T23775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1721.115937][T23775] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1721.607447][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1721.627596][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1721.645376][T24760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1722.026059][T22580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1722.039401][T22580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1722.049831][T22580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1722.058127][T22580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1722.835511][T22580] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1722.844113][T22580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1722.887093][T23946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1722.899049][T23946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1722.913979][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1722.927159][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.940010][T24760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1723.042140][T24760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.050974][T24760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.070284][T24760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.085878][T24760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.097403][T23946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1723.115610][T23946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1723.430262][T25144] lo speed is unknown, defaulting to 1000 [ 1723.880595][T25036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1723.894686][T25036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1723.966658][ T5090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1723.985919][T25036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1723.995529][ T5090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1724.056609][T25036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1724.075884][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1724.157543][ T5087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1724.176382][ T5087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1724.224469][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1724.323080][T17937] tipc: Disabling bearer [ 1724.342468][T17937] tipc: Disabling bearer [ 1724.375540][T17937] tipc: Left network mode [ 1724.961323][T21744] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1725.124587][T25036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1725.161707][T21744] usb 1-1: Using ep0 maxpacket: 16 [ 1725.179256][T21744] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1725.196866][T22580] Bluetooth: hci3: command 0x0409 tx timeout [ 1725.229866][T25144] chnl_net:caif_netlink_parms(): no params data found [ 1725.286335][T21744] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1725.434532][T21744] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 1725.444148][T21744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.466081][T21744] usb 1-1: config 0 descriptor?? [ 1725.545915][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1725.562320][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1725.601954][T25036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1725.708154][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1725.728558][T21744] usbhid 1-1:0.0: can't add hid device: -71 [ 1725.742007][T21744] usbhid: probe of 1-1:0.0 failed with error -71 [ 1725.757260][T21744] usb 1-1: USB disconnect, device number 7 [ 1725.772865][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1725.794119][T19421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.801402][T19421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1725.822222][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1725.832513][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1725.842871][T19421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.850054][T19421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1725.931778][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1725.973097][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1726.006127][T19421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1726.138886][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1726.171189][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1726.201832][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1726.409839][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1726.453793][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1726.473615][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1726.485793][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1726.499730][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1726.519226][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1726.741934][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1727.253547][T22580] Bluetooth: hci3: command 0x041b tx timeout [ 1727.287329][T25144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.389138][T25144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.536400][T25144] device bridge_slave_0 entered promiscuous mode [ 1727.657927][T17937] bond5: (slave gretap1): Releasing active interface [ 1727.687850][T25144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.701631][T25144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.710353][T25144] device bridge_slave_1 entered promiscuous mode [ 1727.815062][T25144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.834045][T25144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1727.968978][T25144] team0: Port device team_slave_0 added [ 1728.108786][T25144] team0: Port device team_slave_1 added [ 1728.159216][T25144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1728.176002][T25144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1728.231348][T25144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1728.281058][T25144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1728.291368][T25144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1728.319507][T25144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1728.570729][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1728.585017][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1728.614263][T25144] device hsr_slave_0 entered promiscuous mode [ 1728.637486][T25144] device hsr_slave_1 entered promiscuous mode [ 1728.659919][T25144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1728.678400][T25144] Cannot create hsr debugfs directory [ 1728.696814][T25036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1728.786780][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1728.811840][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1729.136773][T17937] bond5 (unregistering): Released all slaves [ 1729.334083][T22580] Bluetooth: hci3: command 0x040f tx timeout [ 1729.634089][T17937] bond4 (unregistering): Released all slaves [ 1729.659637][T17937] bond3 (unregistering): Released all slaves [ 1729.709759][T25245] loop0: detected capacity change from 0 to 512 [ 1729.924017][T17937] bond2 (unregistering): Released all slaves [ 1730.451189][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.463986][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.480862][T22580] Bluetooth: hci3: command 0x0419 tx timeout [ 1731.758515][T17937] bond1 (unregistering): Released all slaves [ 1733.171979][T25279] kvm: failed to shrink bus, removing it completely [ 1736.328851][T17937] bond0 (unregistering): Released all slaves [ 1737.225703][ T5083] smc: removing ib device syz0 [ 1737.515648][T25036] device veth0_vlan entered promiscuous mode [ 1737.525959][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1737.544018][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1737.598577][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1737.608952][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1738.341796][T25036] device veth1_vlan entered promiscuous mode [ 1738.537175][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1738.556225][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1740.204224][T25036] device veth0_macvtap entered promiscuous mode [ 1740.245506][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1740.259145][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1740.361851][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1740.416580][T25036] device veth1_macvtap entered promiscuous mode [ 1741.112659][T25036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.150208][T25036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.184435][T25036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.238792][T25036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.310425][T25036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1741.319642][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1741.350445][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1741.384928][T25036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.437012][T25036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.474693][T25036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.521028][T25036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.566946][T25036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1741.591015][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1741.622960][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1741.922046][T25036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.960219][T25036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.999588][T25036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.030362][T25036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.525408][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.556052][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.666303][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1744.727439][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.757446][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.923838][T25144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1744.995602][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1745.050946][T25144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1745.189757][T25144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1745.365483][T25144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1746.537018][T17937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.022059][T17937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.822057][T17937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.004991][T25144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1751.101280][T25454] kvm: failed to shrink bus, removing it completely [ 1751.287211][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1751.315423][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1751.519138][T17937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.753281][T25144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1752.511248][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1752.568736][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1752.700491][T25438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.707740][T25438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1753.159064][T25144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1753.519652][T25144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1753.542064][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1753.554352][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1753.563458][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1753.578620][T25438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.585971][T25438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1753.597896][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1753.608040][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1753.654885][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1753.708181][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1753.780199][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1753.832760][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1753.910122][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1753.992431][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1754.037037][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1754.068969][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1754.167864][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1754.180458][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1755.542625][T17937] tipc: Disabling bearer [ 1755.572629][T17937] tipc: Left network mode [ 1756.686708][T25519] dns_resolver: Unsupported content type (6) [ 1762.094073][T25423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1762.187721][T25423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1762.376583][T25144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1763.423365][T25597] loop0: detected capacity change from 0 to 256 [ 1763.495732][T25597] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1763.599570][T25597] exfat filesystem being mounted at /19/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1767.105436][T25621] loop2: detected capacity change from 0 to 512 [ 1769.834686][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1769.887201][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1769.944560][T17937] device hsr_slave_0 left promiscuous mode [ 1769.971498][T17937] device hsr_slave_1 left promiscuous mode [ 1770.402880][T17937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1770.428759][T17937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1770.444715][T17937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1770.459402][T17937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1770.472955][T17937] device bridge_slave_1 left promiscuous mode [ 1770.493924][T17937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.110354][T17937] device bridge_slave_0 left promiscuous mode [ 1772.118806][T17937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.827805][T17937] device veth1_macvtap left promiscuous mode [ 1774.088368][T17937] device veth0_macvtap left promiscuous mode [ 1774.136126][T17937] device veth1_vlan left promiscuous mode [ 1774.166076][T17937] device veth0_vlan left promiscuous mode [ 1792.221652][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.228074][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.370172][T22580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1792.382372][T22580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1792.392638][T22580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1792.426053][T22580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1792.437823][T22580] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1792.455358][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1792.873457][T17937] team0 (unregistering): Port device team_slave_1 removed [ 1793.851591][T17937] team0 (unregistering): Port device team_slave_0 removed [ 1794.216920][T17937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1794.257329][T21744] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1794.389875][T17937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.475694][T21744] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1794.486624][T21744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.498765][T21744] usb 1-1: Product: syz [ 1794.503173][T21744] usb 1-1: Manufacturer: syz [ 1794.511559][T21744] usb 1-1: SerialNumber: syz [ 1794.528380][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 1794.577913][T21744] usb 1-1: config 0 descriptor?? [ 1794.592184][T21744] ch341 1-1:0.0: ch341-uart converter detected [ 1794.843236][T25814] __vm_enough_memory: pid: 25814, comm: syz.1.5380, no enough memory for the allocation [ 1795.057254][T21744] usb 1-1: failed to receive control message: -32 [ 1795.080716][T21744] ch341-uart: probe of ttyUSB0 failed with error -32 [ 1796.501029][T17858] usb 1-1: USB disconnect, device number 8 [ 1796.508228][T17858] ch341 1-1:0.0: device disconnected [ 1796.613229][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 1796.880985][T17937] bond0 (unregistering): Released all slaves [ 1797.638673][T25785] chnl_net:caif_netlink_parms(): no params data found [ 1798.013572][T25785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.033103][T25785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.041889][T25785] device bridge_slave_0 entered promiscuous mode [ 1798.052106][T25785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.059857][T25785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.068405][T25785] device bridge_slave_1 entered promiscuous mode [ 1798.095460][T25785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.108417][T25785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.155593][T25785] team0: Port device team_slave_0 added [ 1798.188870][T25785] team0: Port device team_slave_1 added [ 1798.223788][T25785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.234116][T25785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.265610][T25785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.284295][T25785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.296190][T25785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.328497][T25785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.391740][T25785] device hsr_slave_0 entered promiscuous mode [ 1798.401635][T25785] device hsr_slave_1 entered promiscuous mode [ 1798.414538][T25785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1798.426136][T25785] Cannot create hsr debugfs directory [ 1798.687009][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 1798.937153][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 1800.122282][T25421] device hsr_slave_0 left promiscuous mode [ 1800.129338][T25421] device hsr_slave_1 left promiscuous mode [ 1800.135928][T25421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1800.145262][T25421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1800.156699][T25421] device bridge_slave_1 left promiscuous mode [ 1800.165283][T25421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.179857][T25421] device bridge_slave_0 left promiscuous mode [ 1800.186153][T25421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.767124][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 1800.844371][T25421] team0 (unregistering): Port device team_slave_1 removed [ 1800.966076][T25421] team0 (unregistering): Port device team_slave_0 removed [ 1801.062455][T25421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.163827][T25421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.812081][T25421] bond0 (unregistering): Released all slaves [ 1802.082979][T25785] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1802.100422][T25785] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1802.113369][T25785] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1802.124192][T25785] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1802.313185][T25785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1802.335478][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1802.344003][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1802.360428][T25785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1802.391966][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1802.402410][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1802.411462][T23953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.418660][T23953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1802.457829][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1802.470403][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1802.480135][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1802.491515][T23953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.498836][T23953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.511115][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1802.522747][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1802.550873][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1802.569655][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1802.579246][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1802.608736][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1802.628208][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1802.639138][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1802.651549][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1802.664641][T25785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1802.677058][T25785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1802.685735][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1802.704100][T25442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1803.020256][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1803.033075][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1803.048299][T25785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1803.513368][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1803.529655][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1803.557226][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1803.568326][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1803.581619][T25785] device veth0_vlan entered promiscuous mode [ 1803.589508][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1803.598905][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1803.613287][T25785] device veth1_vlan entered promiscuous mode [ 1803.642879][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1803.657725][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1803.666196][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1803.680761][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1803.694605][T25785] device veth0_macvtap entered promiscuous mode [ 1803.711236][T25785] device veth1_macvtap entered promiscuous mode [ 1803.735831][T25785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.751023][T25785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.762015][T25785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.776065][T25785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.788821][T25785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1803.796545][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1803.805319][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1803.824347][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1803.834065][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1803.850162][T25785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1803.867300][T25785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.880961][T25785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1803.896275][T25785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.910460][T25785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1803.920884][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1803.930682][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1803.942860][T25785] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.953349][T25785] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.964039][T25785] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.976040][T25785] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.080032][T25421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.097060][T25421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.104828][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1804.133875][T25421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.145681][T25421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.155984][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1804.384300][T25958] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1804.392896][T25958] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1804.401730][T25958] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1807.281882][T25969] loop7: detected capacity change from 0 to 512 [ 1810.325875][T25997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5389'. [ 1815.206354][T21304] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1816.105499][T21304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.137474][T21304] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1816.575335][T21304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.026483][T21304] as10x_usb: device has been detected [ 1818.032781][T21304] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1818.081897][T21304] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1818.298800][T21304] as10x_usb: error during firmware upload part1 [ 1818.305574][T21304] Registered device Abilis Systems DVB-Titan [ 1818.336053][T21304] usb 3-1: USB disconnect, device number 5 [ 1818.468272][T21304] Unregistered device Abilis Systems DVB-Titan [ 1818.469756][T21304] as10x_usb: device has been disconnected [ 1824.666773][T26144] loop2: detected capacity change from 0 to 512 [ 1827.932315][ T26] audit: type=1800 audit(3936425962.208:900): pid=26180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5434" name="syzkaller0" dev="sda1" ino=2049 res=0 errno=0 [ 1829.773864][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 1835.490162][T26245] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1840.354796][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 57 is 1014 jiffies old. [ 1846.848737][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1846.861192][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1846.870541][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1846.881255][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1846.892055][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1846.907007][T26333] loop2: detected capacity change from 0 to 16 [ 1847.320679][T26333] erofs: (device loop2): mounted with root inode @ nid 36. [ 1853.170024][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.176474][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1857.993963][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 61 is 1070 jiffies old. [ 1858.410178][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1858.431076][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1858.443103][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1858.451795][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1858.466189][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1858.474236][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1859.755168][T26414] chnl_net:caif_netlink_parms(): no params data found [ 1859.983180][T26414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.047242][T26414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.055151][T18242] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1860.114428][T26414] device bridge_slave_0 entered promiscuous mode [ 1860.169869][T26414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.201653][T26414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.222240][T26414] device bridge_slave_1 entered promiscuous mode [ 1860.267701][T18242] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.294429][T18242] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1860.323741][T26414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1860.333238][T18242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.365133][T18242] usb 3-1: config 0 descriptor?? [ 1860.385618][T26414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1860.408548][T18242] pwc: Askey VC010 type 2 USB webcam detected. [ 1861.429745][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 1861.472785][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1861.481021][T18242] pwc: send_video_command error -32 [ 1861.487367][T18242] pwc: Failed to set video mode CIF@30 fps; return code = -32 [ 1861.515321][T18242] Philips webcam: probe of 3-1:0.0 failed with error -32 [ 1861.541484][T18242] usb 3-1: USB disconnect, device number 6 [ 1861.919764][T26414] team0: Port device team_slave_0 added [ 1861.952940][T26414] team0: Port device team_slave_1 added [ 1862.197811][T26414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1863.214490][T26414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1863.323401][T18242] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1863.453298][T26414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1863.483744][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 1863.589536][T26414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1863.627382][T26414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1863.767799][T26414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.831058][T26414] device hsr_slave_0 entered promiscuous mode [ 1864.674340][T26414] device hsr_slave_1 entered promiscuous mode [ 1864.698208][T26414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1864.713753][T26414] Cannot create hsr debugfs directory [ 1864.830549][T26478] loop7: detected capacity change from 0 to 2048 [ 1864.846603][T26480] loop2: detected capacity change from 0 to 512 [ 1864.952522][T26480] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1864.996012][T26480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1865.044342][T26478] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1865.072188][T26478] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1865.152453][T26480] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1865.299011][T26480] EXT4-fs (loop2): 1 truncate cleaned up [ 1865.316448][T26480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1865.563563][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 1865.878540][T26488] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1865.997294][T26489] netlink: 'syz.2.5496': attribute type 13 has an invalid length. [ 1866.017559][T26489] netlink: 'syz.2.5496': attribute type 27 has an invalid length. [ 1866.081193][T25785] EXT4-fs (loop7): unmounting filesystem. [ 1866.289826][T25036] EXT4-fs (loop2): unmounting filesystem. [ 1868.454628][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 1872.319531][T26555] loop7: detected capacity change from 0 to 2048 [ 1882.042061][T26414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1882.157830][T26414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1882.302768][T26414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1882.399762][T26414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1883.370921][T26677] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5534'. [ 1884.310223][T26414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1884.383659][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1884.434049][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1884.479628][T26414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1884.537871][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1884.557433][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1884.594426][T23960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.601725][T23960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1884.610972][T26687] fuse: Bad value for 'fd' [ 1886.713553][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1886.741158][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1886.762829][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1886.775512][T23960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.782708][T23960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1886.836814][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1886.863298][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1886.909387][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1886.946601][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1886.986720][T25432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1887.024446][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1887.062871][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1887.096323][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1887.114261][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1887.147979][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1887.182849][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1887.224142][T26414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1887.467846][T26704] lo speed is unknown, defaulting to 1000 [ 1887.473907][T26704] lo speed is unknown, defaulting to 1000 [ 1887.480133][T26704] lo speed is unknown, defaulting to 1000 [ 1887.493771][T26704] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1887.515580][T26704] lo speed is unknown, defaulting to 1000 [ 1887.523380][T26704] lo speed is unknown, defaulting to 1000 [ 1887.542503][T26704] lo speed is unknown, defaulting to 1000 [ 1887.549397][T26704] lo speed is unknown, defaulting to 1000 [ 1887.556538][T26704] lo speed is unknown, defaulting to 1000 [ 1887.563771][T26704] lo speed is unknown, defaulting to 1000 [ 1890.776035][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1890.820432][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1890.866466][T26414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.066728][T26738] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1891.987408][T25430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1892.035285][T25430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1892.190082][T25430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1892.199730][T25430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1892.213389][T26414] device veth0_vlan entered promiscuous mode [ 1893.062898][T25430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1893.092573][T25430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1893.125025][T26414] device veth1_vlan entered promiscuous mode [ 1893.134794][T26750] fuse: Bad value for 'fd' [ 1893.267892][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1893.279656][T26756] fuse: Bad value for 'fd' [ 1893.319568][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1893.377259][T26414] device veth0_macvtap entered promiscuous mode [ 1893.401175][T26414] device veth1_macvtap entered promiscuous mode [ 1893.476719][T26414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.521615][T26414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.537778][T26414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1894.349802][T26414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1894.381056][T26414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1894.430606][T26414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1894.528443][T26414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1894.541257][T26775] Bluetooth: MGMT ver 1.22 [ 1895.357107][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1895.370966][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1895.435322][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1895.496402][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1896.648821][T26414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1896.705459][T26414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1896.750751][T26414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1896.830999][T26414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1896.899753][ T26] audit: type=1800 audit(2000000029.901:901): pid=26792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5562" name="addr_trtype" dev="configfs" ino=112324 res=0 errno=0 [ 1897.908585][T26792] nvmet_tcp: address family 255 not supported [ 1897.941500][ T26] audit: type=1800 audit(2000000030.891:902): pid=26792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5562" name="addr_traddr" dev="configfs" ino=111568 res=0 errno=0 [ 1897.983243][T26414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1898.241601][T26414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1898.259212][ T26] audit: type=1800 audit(2000000030.901:903): pid=26792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5562" name="addr_trsvcid" dev="configfs" ino=111569 res=0 errno=0 [ 1898.422943][T26414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1899.211811][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1899.234163][T25438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1899.353811][T26414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.369193][T26414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.380822][T26414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.390478][T26414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.638560][T23946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.677146][T23946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.748302][T25419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1899.797300][T23960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.808564][T23960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.830883][T25427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1899.982690][T26821] fuse: Bad value for 'fd' [ 1900.121170][ C0] hrtimer: interrupt took 54022 ns [ 1902.478381][T26850] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1903.430304][T26855] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1904.135528][T26863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5575'. [ 1904.144734][T26863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5575'. [ 1904.153869][T26863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5575'. [ 1904.162925][T26863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5575'. [ 1909.996770][T26922] fuse: Bad value for 'fd' [ 1912.797790][T26957] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1912.806553][T26957] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1912.815304][T26957] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1913.446296][T26968] syz.7.5598 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1914.386388][T26968] CPU: 1 PID: 26968 Comm: syz.7.5598 Not tainted syzkaller #0 [ 1914.393970][T26968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1914.404066][T26968] Call Trace: [ 1914.407400][T26968] [ 1914.410387][T26968] dump_stack_lvl+0x188/0x24e [ 1914.415312][T26968] ? ___ratelimit+0x14e/0x610 [ 1914.420160][T26968] ? show_regs_print_info+0x12/0x12 [ 1914.425442][T26968] ? load_image+0x410/0x410 [ 1914.430280][T26968] ? ___ratelimit+0x474/0x610 [ 1914.435036][T26968] ? radix_tree_cpu_dead+0x160/0x160 [ 1914.440387][T26968] dump_header+0xd8/0x820 [ 1914.444922][T26968] oom_kill_process+0x361/0x550 [ 1914.449963][T26968] out_of_memory+0xe25/0x1220 [ 1914.454717][T26968] ? mutex_lock_nested+0x10/0x10 [ 1914.459733][T26968] ? unregister_oom_notifier+0x20/0x20 [ 1914.465258][T26968] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1914.470876][T26968] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1914.476645][T26968] ? do_raw_spin_unlock+0x11d/0x230 [ 1914.481919][T26968] try_charge_memcg+0xc9d/0x17c0 [ 1914.486926][T26968] ? percpu_ref_put+0x180/0x180 [ 1914.492023][T26968] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1914.497788][T26968] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1914.503808][T26968] ? percpu_ref_tryget+0x15/0x180 [ 1914.508864][T26968] ? percpu_ref_tryget+0x15/0x180 [ 1914.514096][T26968] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1914.519849][T26968] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1914.525606][T26968] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1914.531461][T26968] obj_cgroup_charge+0x36a/0x620 [ 1914.536531][T26968] ? obj_cgroup_charge+0xe9/0x620 [ 1914.541617][T26968] ? mod_objcg_mlstate+0x320/0x320 [ 1914.546895][T26968] ? percpu_ref_tryget+0x15/0x180 [ 1914.552044][T26968] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1914.558497][T26968] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1914.564458][T26968] slab_pre_alloc_hook+0x2e2/0x300 [ 1914.569618][T26968] ? kvm_assign_ioeventfd_idx+0x92/0xa50 [ 1914.575431][T26968] __kmem_cache_alloc_node+0x4f/0x270 [ 1914.580839][T26968] ? kvm_assign_ioeventfd_idx+0x92/0xa50 [ 1914.586515][T26968] kmalloc_trace+0x26/0xe0 [ 1914.591121][T26968] kvm_assign_ioeventfd_idx+0x92/0xa50 [ 1914.596708][T26968] ? __might_fault+0xa6/0x120 [ 1914.601434][T26968] kvm_ioeventfd+0x24d/0x2f0 [ 1914.606420][T26968] kvm_vm_ioctl+0x879/0xb00 [ 1914.611326][T26968] ? kvm_device_release+0x1e0/0x1e0 [ 1914.616647][T26968] ? __kmem_cache_free+0xb6/0x200 [ 1914.621812][T26968] ? tomoyo_path_number_perm+0x205/0x650 [ 1914.627534][T26968] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1914.633205][T26968] ? tomoyo_path_number_perm+0x205/0x650 [ 1914.638870][T26968] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1914.644388][T26968] ? __fget_files+0x28/0x460 [ 1914.649049][T26968] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1914.654124][T26968] ? security_file_ioctl+0x7c/0xa0 [ 1914.659530][T26968] ? kvm_device_release+0x1e0/0x1e0 [ 1914.664768][T26968] __se_sys_ioctl+0xfa/0x170 [ 1914.669412][T26968] do_syscall_64+0x4c/0xa0 [ 1914.673881][T26968] ? clear_bhb_loop+0x60/0xb0 [ 1914.679047][T26968] ? clear_bhb_loop+0x60/0xb0 [ 1914.683960][T26968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1914.689896][T26968] RIP: 0033:0x7f893d99e159 [ 1914.694444][T26968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.714279][T26968] RSP: 002b:00007f893e78a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1914.722941][T26968] RAX: ffffffffffffffda RBX: 00007f893dc25fa0 RCX: 00007f893d99e159 [ 1914.731241][T26968] RDX: 0000200000000100 RSI: 000000004040ae79 RDI: 0000000000000004 [ 1914.739243][T26968] RBP: 00007f893da3503b R08: 0000000000000000 R09: 0000000000000000 [ 1914.747526][T26968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1914.755542][T26968] R13: 00007f893dc26038 R14: 00007f893dc25fa0 R15: 00007ffdc63f87b8 [ 1914.763557][T26968] [ 1914.771690][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.778414][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.793894][T26968] memory: usage 8kB, limit 8kB, failcnt 59 [ 1914.802376][T26968] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1914.832126][T26968] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1914.856717][T26968] Memory cgroup stats for /syz7/test: [ 1914.870583][T26968] anon 0 [ 1914.870583][T26968] file 0 [ 1914.870583][T26968] kernel 8192 [ 1914.870583][T26968] kernel_stack 0 [ 1914.870583][T26968] pagetables 0 [ 1914.870583][T26968] sec_pagetables 0 [ 1914.870583][T26968] percpu 0 [ 1914.870583][T26968] sock 0 [ 1914.870583][T26968] vmalloc 0 [ 1914.870583][T26968] shmem 0 [ 1914.870583][T26968] zswap 0 [ 1914.870583][T26968] zswapped 0 [ 1914.870583][T26968] file_mapped 0 [ 1914.870583][T26968] file_dirty 0 [ 1914.870583][T26968] file_writeback 0 [ 1914.870583][T26968] swapcached 0 [ 1914.870583][T26968] anon_thp 0 [ 1914.870583][T26968] file_thp 0 [ 1914.870583][T26968] shmem_thp 0 [ 1914.870583][T26968] inactive_anon 0 [ 1914.870583][T26968] active_anon 0 [ 1914.870583][T26968] inactive_file 0 [ 1914.870583][T26968] active_file 0 [ 1914.870583][T26968] unevictable 0 [ 1914.870583][T26968] slab_reclaimable 1536 [ 1914.870583][T26968] slab_unreclaimable 5544 [ 1914.870583][T26968] slab 7080 [ 1914.870583][T26968] workingset_refault_anon 0 [ 1915.221118][T26968] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.5598,pid=26967,uid=0 [ 1915.469115][T26968] Memory cgroup out of memory: Killed process 26967 (syz.7.5598) total-vm:102508kB, anon-rss:1404kB, file-rss:21832kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1915.878570][T26968] kvm: failed to shrink bus, removing it completely [ 1916.244504][T26992] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1917.647590][ T4290] Bluetooth: hci5: command 0x0406 tx timeout [ 1917.764439][T27001] fuse: Bad value for 'fd' [ 1918.313057][T27013] loop2: detected capacity change from 0 to 256 [ 1918.343366][T27014] MPTCP: kernel_bind error, err=-99 [ 1918.418152][T27013] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1921.360610][T27053] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1923.373600][T27104] loop7: detected capacity change from 0 to 256 [ 1924.513558][T27104] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1926.396257][T27140] loop2: detected capacity change from 0 to 512 [ 1926.474449][T27140] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2754: inode #11: comm syz.2.5633: corrupted xattr block 95 [ 1926.572023][T27140] EXT4-fs (loop2): Remounting filesystem read-only [ 1926.644438][T27140] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.5633: bg 0: block 7: invalid block bitmap [ 1926.734975][T27140] EXT4-fs (loop2): Remounting filesystem read-only [ 1926.748585][T27140] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1926.779377][T27140] EXT4-fs (loop2): Remounting filesystem read-only [ 1926.800523][T27140] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2921: inode #11: comm syz.2.5633: corrupted xattr block 95 [ 1926.843957][T27140] EXT4-fs (loop2): Remounting filesystem read-only [ 1926.863878][T27140] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 1926.897758][T27140] EXT4-fs (loop2): 1 orphan inode deleted [ 1926.929592][T27140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1926.958103][T27160] tipc: Enabling of bearer rejected, already enabled [ 1927.330991][T27163] __vm_enough_memory: pid: 27163, comm: syz.2.5633, no enough memory for the allocation [ 1927.893382][T25036] EXT4-fs (loop2): unmounting filesystem. [ 1930.959471][T21747] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1931.153454][T21747] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1931.179445][T21747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.209546][T21747] usb 3-1: Product: syz [ 1931.215440][T21747] usb 3-1: Manufacturer: syz [ 1931.220182][T21747] usb 3-1: SerialNumber: syz [ 1931.248886][T21747] usb 3-1: config 0 descriptor?? [ 1931.613455][T21747] ch341 3-1:0.0: ch341-uart converter detected [ 1933.622320][T21747] usb 3-1: failed to receive control message: -32 [ 1933.628848][T21747] ch341-uart: probe of ttyUSB0 failed with error -32 [ 1933.637922][T21747] usb 3-1: USB disconnect, device number 8 [ 1933.644904][T21747] ch341 3-1:0.0: device disconnected [ 1934.153808][ T3933] netdevsim netdevsim9 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.209593][T27240] __vm_enough_memory: pid: 27240, comm: syz.0.5649, no enough memory for the allocation [ 1934.904729][ T3933] netdevsim netdevsim9 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.913470][ T3933] netdevsim netdevsim9 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.944209][ T3933] netdevsim netdevsim9 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.955096][ T3933] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.965859][ T3933] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.976473][ T3933] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.988488][ T3933] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.999470][ T3933] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.008407][ T3933] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.017695][ T3933] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.026285][ T3933] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.043474][ T3933] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.052611][ T3933] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.061399][ T3933] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.070977][ T3933] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1937.597532][T27269] dns_resolver: Unsupported content type (6) [ 1941.938041][T27299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1943.356959][T27313] loop6: detected capacity change from 0 to 256 [ 1943.485765][T27313] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1945.225177][T27335] loop2: detected capacity change from 0 to 128 [ 1947.706630][T27343] loop6: detected capacity change from 0 to 512 [ 1948.181534][T27343] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2754: inode #11: comm syz.6.5663: corrupted xattr block 95 [ 1950.692885][T27343] EXT4-fs (loop6): Remounting filesystem read-only [ 1950.764468][T27343] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.5663: bg 0: block 7: invalid block bitmap [ 1950.883155][T27343] EXT4-fs (loop6): Remounting filesystem read-only [ 1950.986574][T27343] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1951.062941][T27343] EXT4-fs (loop6): Remounting filesystem read-only [ 1951.153037][T27343] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2921: inode #11: comm syz.6.5663: corrupted xattr block 95 [ 1951.255388][T27343] EXT4-fs (loop6): Remounting filesystem read-only [ 1951.339428][T27343] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 1951.413889][T27343] EXT4-fs (loop6): 1 orphan inode deleted [ 1951.446364][T27343] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1951.480366][T27376] overlayfs: failed to clone upperpath [ 1952.978386][T27392] loop2: detected capacity change from 0 to 128 [ 1952.996190][T27392] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1953.105292][T27392] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1953.484908][T26414] EXT4-fs (loop6): unmounting filesystem. [ 1953.713157][T23960] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1961.139386][T27462] overlayfs: conflicting options: nfs_export=on,index=off [ 1962.387781][T25165] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1962.588824][T25165] usb 1-1: Dual-Role OTG device on HNP port [ 1962.597581][T25165] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 1962.644429][T25165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.704100][T25165] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1963.181959][T27489] loop6: detected capacity change from 0 to 512 [ 1968.912089][T27541] loop6: detected capacity change from 0 to 256 [ 1969.137365][T27541] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1973.367723][T27591] using random self ethernet address [ 1973.374205][T27591] using random host ethernet address [ 1974.411554][T27610] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5709'. [ 1976.039417][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.045798][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1983.236632][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 2037.481337][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.487886][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.912824][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.919186][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2107.070547][T25442] ------------[ cut here ]------------ [ 2107.077160][T25442] WARNING: CPU: 1 PID: 25442 at io_uring/io_uring.c:2892 io_ring_exit_work+0x329/0x760 [ 2107.086994][T25442] Modules linked in: [ 2107.091103][T25442] CPU: 1 PID: 25442 Comm: kworker/u4:32 Not tainted syzkaller #0 [ 2107.099284][T25442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2107.109780][T25442] Workqueue: events_unbound io_ring_exit_work [ 2107.116009][T25442] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 2107.121861][T25442] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 de 2d 11 00 48 85 c0 75 40 e8 f4 5f 59 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 e5 5f 59 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 2107.142110][T25442] RSP: 0018:ffffc900042c7ac0 EFLAGS: 00010293 [ 2107.148229][T25442] RAX: ffffffff8a28e1ab RBX: 1ffff11003099603 RCX: ffff88802c208000 [ 2107.156389][T25442] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 2107.164476][T25442] RBP: ffffc900042c7c30 R08: ffffc900042c7a47 R09: 1ffff92000858f48 [ 2107.172556][T25442] R10: dffffc0000000000 R11: fffff52000858f49 R12: dffffc0000000000 [ 2107.180702][T25442] R13: 000000010002c12e R14: 000000010002c130 R15: ffff8880184cb018 [ 2107.188713][T25442] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2107.197834][T25442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2107.204597][T25442] CR2: 000055f1ef165168 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 2107.212671][T25442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2107.220723][T25442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2107.228749][T25442] Call Trace: [ 2107.232219][T25442] [ 2107.235209][T25442] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 2107.241224][T25442] ? _raw_spin_unlock+0x40/0x40 [ 2107.246148][T25442] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2107.251487][T25442] ? process_one_work+0x7b4/0x1160 [ 2107.256660][T25442] process_one_work+0x8ab/0x1160 [ 2107.261701][T25442] ? worker_detach_from_pool+0x240/0x240 [ 2107.267491][T25442] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2107.272632][T25442] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2107.278230][T25442] ? wq_worker_running+0x97/0x190 [ 2107.283347][T25442] worker_thread+0xaf5/0x12a0 [ 2107.288115][T25442] kthread+0x29d/0x330 [ 2107.292306][T25442] ? worker_clr_flags+0x1a0/0x1a0 [ 2107.297393][T25442] ? kthread_blkcg+0xd0/0xd0 [ 2107.302069][T25442] ret_from_fork+0x1f/0x30 [ 2107.306593][T25442] [ 2107.309719][T25442] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2107.317036][T25442] CPU: 1 PID: 25442 Comm: kworker/u4:32 Not tainted syzkaller #0 [ 2107.326113][T25442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2107.336396][T25442] Workqueue: events_unbound io_ring_exit_work [ 2107.342620][T25442] Call Trace: [ 2107.346306][T25442] [ 2107.350772][T25442] dump_stack_lvl+0x188/0x24e [ 2107.355648][T25442] ? memcpy+0x3c/0x60 [ 2107.359967][T25442] ? show_regs_print_info+0x12/0x12 [ 2107.365224][T25442] ? load_image+0x410/0x410 [ 2107.369810][T25442] panic+0x2d3/0x710 [ 2107.373938][T25442] ? bpf_jit_dump+0xd0/0xd0 [ 2107.378580][T25442] ? ret_from_fork+0x1f/0x30 [ 2107.384605][T25442] __warn+0x2f8/0x4f0 [ 2107.388622][T25442] ? io_ring_exit_work+0x329/0x760 [ 2107.393768][T25442] ? io_ring_exit_work+0x329/0x760 [ 2107.399102][T25442] report_bug+0x2ba/0x4f0 [ 2107.403582][T25442] ? io_ring_exit_work+0x329/0x760 [ 2107.408845][T25442] handle_bug+0x3a/0x70 [ 2107.413145][T25442] exc_invalid_op+0x16/0x40 [ 2107.417758][T25442] asm_exc_invalid_op+0x16/0x20 [ 2107.422653][T25442] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 2107.429291][T25442] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 de 2d 11 00 48 85 c0 75 40 e8 f4 5f 59 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 e5 5f 59 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 2107.449028][T25442] RSP: 0018:ffffc900042c7ac0 EFLAGS: 00010293 [ 2107.455127][T25442] RAX: ffffffff8a28e1ab RBX: 1ffff11003099603 RCX: ffff88802c208000 [ 2107.463389][T25442] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 2107.471576][T25442] RBP: ffffc900042c7c30 R08: ffffc900042c7a47 R09: 1ffff92000858f48 [ 2107.479597][T25442] R10: dffffc0000000000 R11: fffff52000858f49 R12: dffffc0000000000 [ 2107.488050][T25442] R13: 000000010002c12e R14: 000000010002c130 R15: ffff8880184cb018 [ 2107.496874][T25442] ? io_ring_exit_work+0x329/0x760 [ 2107.502095][T25442] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 2107.508535][T25442] ? _raw_spin_unlock+0x40/0x40 [ 2107.513524][T25442] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2107.519352][T25442] ? process_one_work+0x7b4/0x1160 [ 2107.524860][T25442] process_one_work+0x8ab/0x1160 [ 2107.529845][T25442] ? worker_detach_from_pool+0x240/0x240 [ 2107.535771][T25442] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2107.540919][T25442] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2107.546673][T25442] ? wq_worker_running+0x97/0x190 [ 2107.551955][T25442] worker_thread+0xaf5/0x12a0 [ 2107.556699][T25442] kthread+0x29d/0x330 [ 2107.560818][T25442] ? worker_clr_flags+0x1a0/0x1a0 [ 2107.566376][T25442] ? kthread_blkcg+0xd0/0xd0 [ 2107.571078][T25442] ret_from_fork+0x1f/0x30 [ 2107.575723][T25442] [ 2107.579358][T25442] Kernel Offset: disabled [ 2107.583983][T25442] Rebooting in 86400 seconds..