last executing test programs: 11m33.849767857s ago: executing program 0 (id=469): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$vim2m(&(0x7f0000000200), 0x7ff, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)="d2", 0x1}], 0x1}}], 0x1, 0x8080) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) write$cgroup_subtree(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab0700f2000523a6"], 0xfe33) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0xa, 0x0, 0xd, 0x80000002}, 0x0, 0x0) close(0x3) 11m31.621565799s ago: executing program 0 (id=472): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x640, 0x0, 0x0, 0x128, 0x0, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, &(0x7f0000000600), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@srh={{0x30}, {0x0, 0x1, 0x9f, 0x4, 0x7ff, 0x1100, 0x200}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xff, 0xff, 0xffffff00], [0x0, 0x0, 0xffffff00], 'ip6_vti0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xfb, 0xfe, 0x1, 0x38}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@mcast2, 0xe, 0x1b, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@rand_addr=' \x01\x00', 0x9, 0x19, 0x4}}}, {{@ipv6={@private0, @private0, [0xff, 0xff000000, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff00], 'pim6reg\x00', 'wg2\x00', {}, {}, 0x5e, 0x7, 0x4, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x1}, {0x0, 0x1, 0x2}, {0x3, 0x5, 0x2}, 0x6, 0x6b5}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x7ff, 0x6, 0x1, [0xeee, 0x1000, 0x2, 0x9, 0x0, 0x9, 0x8ae4, 0x8, 0x4, 0xfff, 0x6, 0xe700, 0x9, 0x4, 0x7ff, 0x8], 0xb}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@multicast1, 0x3d, 0x1a, 0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r7, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9435}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x1, 0x2, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x6b06, 0x0, 0x0, 0x41000, 0xb5, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f00000000c0)=0x6) syz_open_procfs(0x0, &(0x7f0000000580)='net/sockstat6\x00') 11m27.260710348s ago: executing program 0 (id=482): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x81) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) 11m23.605779495s ago: executing program 0 (id=480): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) process_mrelease(r0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, 0x0, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) set_mempolicy(0x6005, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000180), &(0x7f0000000340), &(0x7f00000001c0), 0x0, 0xff}) 11m19.991435901s ago: executing program 0 (id=487): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x8000, 0x1, 0x61}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) write$binfmt_elf64(r6, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) 11m15.634780451s ago: executing program 0 (id=492): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18090084bfb6a80993c9c0ce56ee8d00000000000000000000000000850000007d0000001801000020696c2500000000004388b8ea7394e31fab82ed0f4187813fe81c97d3f316efb89f32cf5eb58386a527f5ae61"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x1000, 0xf}, 0x8) r3 = socket$kcm(0x10, 0x6, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}, 0x48050) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 10m59.826524597s ago: executing program 32 (id=492): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18090084bfb6a80993c9c0ce56ee8d00000000000000000000000000850000007d0000001801000020696c2500000000004388b8ea7394e31fab82ed0f4187813fe81c97d3f316efb89f32cf5eb58386a527f5ae61"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x1000, 0xf}, 0x8) r3 = socket$kcm(0x10, 0x6, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}, 0x48050) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 28.209721587s ago: executing program 3 (id=1604): gettid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x800) get_robust_list(r0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000100)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) inotify_init1(0x0) 21.304618145s ago: executing program 3 (id=1614): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000280)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") rt_sigqueueinfo(0x0, 0x3b, &(0x7f0000000580)={0x37, 0x5, 0x9}) r7 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002000000000000000000"], 0x10}}, 0x0) 19.055648806s ago: executing program 3 (id=1619): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf251e00010008000400ffffffff080001"], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x40010) r2 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f34, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@remote, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = getpgrp(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r4, 0x2, 0x0) r5 = getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x62040, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0xa000080) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x7b9, &(0x7f0000000280)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0xf0ff, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f0000001600)={0x9, {"a2e3ad21ed0d52f91b25090947f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b657fe8ed7c34f4638e7d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc4856bea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff00", 0x1000}}, 0x1006) 16.363660242s ago: executing program 2 (id=1623): gettid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(0x0, 0x101080, 0x0) getdents(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x800) get_robust_list(r0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x18, 0x0, &(0x7f0000000100)) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) inotify_init1(0x0) 15.345017769s ago: executing program 4 (id=1625): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00C\x00'], 0x20}}, 0x20004000) r4 = socket(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x10802, &(0x7f0000000040)=ANY=[], 0x1, 0x17f, &(0x7f0000000340)="$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") chdir(&(0x7f0000000080)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffff5d) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_open_pts(0xffffffffffffffff, 0x303040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01102dbd7000ffdbca256c00000008000300", @ANYRES32=r9, @ANYBLOB="080026006c09000008009f0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 15.148011176s ago: executing program 1 (id=1626): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xcac) fchown(r0, 0xee00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000000c0)=0x7) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r10, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_COPY(r9, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r10, r10, 0x1000, 0x0, 0x3ffe}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r12, 0x40085618, &(0x7f0000000080)=0x1000) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[], 0x78) 14.325242516s ago: executing program 3 (id=1627): bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1000000000000098, 0x1, 0xd) unshare(0x22020400) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='attr/fscreate\x00') lseek(r1, 0xe, 0x3) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca044c750222197d6ea1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0x6}, {0x0, 0x5}, {0xfff3, 0xc}}, [{0x8, 0xb, 0x6}]}, 0x2c}}, 0x24000084) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) 14.277749367s ago: executing program 2 (id=1628): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000752200004200000040000008000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a0000000500"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r8], 0x1015, 0x2) r9 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r10}) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x8936, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 14.101488733s ago: executing program 1 (id=1629): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pim6reg0\x00'}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) vmsplice(r2, &(0x7f0000000640)=[{&(0x7f0000000500)="06d8d88b66be4c2ca8599f971ad309bf6fba4a9cf39634967c1aae9a036923a8ded7ad467380ef1f9dc1a70c2894a0ef17a28efd673b9108e049f480858045da5b9eb020dc1f490b69d3914dc5b167c62d7d24831cc79ce26b7e39323eadf5067b0911b65c5c2423c77e59f90b59f3378e0582161e89e2f5ffc9fc2a46b87f2160f3a668a974c07807eb0318958b73b1598ce8b170183dc4a191fcfbf8647425572a1219b59938991b83a2cfbedfbfc020e784fa94647d6ef9fe4e81badff5b8bd87ed110bce6bb87d0637f4d3c89682d1699009816ffd172e6faf13e5a224a2f12e4dcbb54de9", 0xe7}], 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(r6, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) connect$packet(r0, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) 12.930684375s ago: executing program 2 (id=1630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r6, 0x2007ffb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r8, r7, 0x0, 0x7ffff000) creat(0x0, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 12.888512277s ago: executing program 4 (id=1631): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000752200004200000040000008000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a0000000500"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r8], 0x1015, 0x2) r9 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r10}) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x8936, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 12.368002855s ago: executing program 1 (id=1632): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000340)=""/174, 0xae}], 0x2, 0x2, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = socket(0x10, 0x803, 0x0) recvmmsg(r7, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.520187044s ago: executing program 2 (id=1633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="a4020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2a4}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x2000, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x4000000, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x2000000, 0x1, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x9}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x464a2) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7.841795658s ago: executing program 4 (id=1634): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r4}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba3ca62a"}, 0x10}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x36}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x2000c850) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="000000000000000000b10048840c000000000000", @ANYRES8=r7], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x24, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 6.633130662s ago: executing program 1 (id=1635): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf1}}], 0x18}, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) listen(0xffffffffffffffff, 0x6) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x42000800, &(0x7f00000002c0)="a073188c4bc9998fbf3bebbd5c6c91eeafdad83c856f1a7317dffd948bcf1f2247876ee5fe3420dc9de4874c6ca0b196", 0x30, &(0x7f00000003c0), 0x0, 0x0) capset(&(0x7f00000005c0)={0x19980330, r0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.629866012s ago: executing program 2 (id=1636): gettid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(0x0, 0x101080, 0x0) getdents(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x800) get_robust_list(r0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x18, 0x0, &(0x7f0000000100)) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) inotify_init1(0x0) 6.606341243s ago: executing program 3 (id=1637): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000752200004200000040000008000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a0000000500"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r7], 0x1015, 0x2) r8 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'bond0\x00'}) 6.244875626s ago: executing program 4 (id=1638): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000752200004200000040000008000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a0000000500"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r8], 0x1015, 0x2) r9 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r10}) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x8936, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.589777961s ago: executing program 3 (id=1639): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x4, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0x80, 0x40, 0x2, 0x1b}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r0, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0}, 0x40) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB='6\x00'/12, @ANYRES32=r0, @ANYRES64=r6], 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRES64=r6], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x208000c9, 0x101002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045520, &(0x7f0000000040)=0x3) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x102, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xd80e377706055939}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2a}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa1}, @NFTA_SET_DESC={0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14}}, 0x74}}, 0x0) 3.025638131s ago: executing program 1 (id=1640): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00B'], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 3.022706711s ago: executing program 2 (id=1641): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}, {0x0}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x0, &(0x7f0000000040)) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000541000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 2.584549247s ago: executing program 4 (id=1642): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000752200004200000040000008000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a0000000500"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r8], 0x1015, 0x2) r9 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'bond0\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x8936, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.637494471s ago: executing program 1 (id=1643): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 0s ago: executing program 4 (id=1644): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b00000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) read$FUSE(r4, &(0x7f00000006c0)={0x2020}, 0x2020) unshare(0x2c020400) r5 = msgget$private(0x0, 0x244) msgsnd(r5, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r7) msgsnd(r5, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac"}, 0x74, 0x800) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) setrlimit(0x1, 0x0) kernel console output (not intermixed with test programs): by "ci2-linux-6-6-kasan/syz-executor exec"[6391] [ 174.255946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.355943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.385964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 175.182650][ T6395] tty tty1: ldisc open failed (-12), clearing slot 0 [ 175.398275][ T6404] tty tty1: ldisc open failed (-12), clearing slot 0 [ 175.710347][ T5763] usbhid 2-1:0.0: can't add hid device: -71 [ 176.391068][ T5763] usbhid: probe of 2-1:0.0 failed with error -71 [ 178.449179][ T5763] usb 2-1: USB disconnect, device number 2 [ 179.669858][ T5763] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 181.090555][ T5763] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.110061][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.259330][ T5763] usb 2-1: config 0 has no interface number 0 [ 181.265506][ T5763] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.319135][ T5763] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 181.396284][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.433366][ T5763] usb 2-1: config 0 descriptor?? [ 181.518180][ T5763] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 181.905558][ T5841] usb 2-1: USB disconnect, device number 3 [ 182.373169][ T6436] loop1: detected capacity change from 0 to 164 [ 183.077688][ T6440] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6440] [ 183.973293][ T6446] loop1: detected capacity change from 0 to 8 [ 184.061040][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.071409][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.102041][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.112284][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.120359][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.127670][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.146684][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.162144][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.169797][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.177369][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.191722][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.198837][ T6446] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.236150][ T28] audit: type=1800 audit(1779940328.456:4): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.135" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 193.527393][ T6500] xt_bpf: check failed: parse error [ 193.629339][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.148'. [ 193.654821][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 194.563083][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.583238][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.701957][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 196.708964][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 196.715039][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 196.721571][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 200.117420][ T5841] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 200.636006][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 201.005547][ T5841] usb 1-1: device descriptor read/all, error -71 [ 202.809971][ T6549] loop0: detected capacity change from 0 to 128 [ 204.000763][ T6553] loop1: detected capacity change from 0 to 164 [ 206.194575][ T6561] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6561] [ 207.660191][ T6574] Process accounting resumed [ 210.178236][ T6596] binder: 6589:6596 ioctl 4002f516 0 returned -22 [ 210.980389][ T6594] xt_bpf: check failed: parse error [ 212.428834][ T6606] random: crng reseeded on system resumption [ 221.012151][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 221.044020][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 221.920662][ T6657] loop0: detected capacity change from 0 to 8 [ 222.017784][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.026711][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.041937][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.050119][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.057198][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.065100][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.075311][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.083502][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.090953][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.098121][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.107850][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.114734][ T6657] SQUASHFS error: Failed to read block 0x4de: -5 [ 222.151022][ T28] audit: type=1800 audit(1779940366.406:5): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.183" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 222.170280][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.362787][ T6682] loop3: detected capacity change from 0 to 256 [ 226.317777][ T6693] loop1: detected capacity change from 0 to 256 [ 227.185236][ T6690] tipc: Started in network mode [ 227.190609][ T6690] tipc: Node identity 4, cluster identity 4711 [ 227.196855][ T6690] tipc: Node number set to 4 [ 227.814250][ T6711] loop1: detected capacity change from 0 to 164 [ 228.140814][ T6713] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6713] [ 229.956104][ T28] audit: type=1800 audit(1779940374.296:6): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file0" dev="overlay" ino=304 res=0 errno=0 [ 235.853977][ T6763] loop2: detected capacity change from 0 to 16 [ 235.996959][ T6763] erofs: (device loop2): mounted with root inode @ nid 36. [ 237.200612][ T6784] loop2: detected capacity change from 0 to 512 [ 237.755461][ T6784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.916167][ T6784] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.171755][ T6784] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.206: iget: bad i_size value: 2533274857506816 [ 238.213471][ T6784] EXT4-fs (loop2): Remounting filesystem read-only [ 238.396103][ T5832] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 238.612934][ T5832] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.675042][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.819588][ T5832] usb 1-1: config 0 has no interface number 0 [ 238.895839][ T5832] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.945736][ T5832] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 238.972331][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.993253][ T5832] usb 1-1: config 0 descriptor?? [ 239.066408][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 239.079557][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.080356][ T5832] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 240.045255][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'. [ 242.045151][ T9] usb 4-1: device descriptor read/all, error -71 [ 242.939383][ T5778] IPVS: starting estimator thread 0... [ 243.108594][ T5778] usb 1-1: USB disconnect, device number 4 [ 243.196111][ T6843] IPVS: using max 35 ests per chain, 84000 per kthread [ 246.443670][ T6897] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 246.505710][ T6902] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 247.008146][ T6902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.019650][ T6902] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 247.028617][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 247.038673][ T6902] syz.2.225 (6902) used greatest stack depth: 19688 bytes left [ 247.320198][ T6904] xt_TCPMSS: Only works on TCP SYN packets [ 247.437928][ T6887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.729339][ T6910] loop1: detected capacity change from 0 to 128 [ 247.857099][ T6910] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 247.901755][ T6910] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 249.107963][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 249.834411][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.372563][ T5832] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 250.830454][ T5832] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.902687][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.056156][ T5832] usb 2-1: config 0 has no interface number 0 [ 251.062364][ T5832] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.088325][ T6952] loop0: detected capacity change from 0 to 128 [ 251.233081][ T5832] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 251.429134][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.447378][ T6952] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.950930][ T6952] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.982903][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.082399][ T5832] usb 2-1: config 0 descriptor?? [ 252.389068][ T6965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.861059][ T5832] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 253.502015][ T6972] syz.0.237 (pid 6972) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 253.670080][ T6968] loop3: detected capacity change from 0 to 512 [ 253.793015][ T6968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.837102][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.846474][ T6968] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.969353][ T6968] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.238: iget: bad i_size value: 2533274857506816 [ 254.005138][ T6968] EXT4-fs (loop3): Remounting filesystem read-only [ 254.858176][ T5780] usb 2-1: USB disconnect, device number 4 [ 255.968196][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.974578][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.050267][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.356335][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 256.842933][ T6977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.047605][ T7015] loop3: detected capacity change from 0 to 32768 [ 259.117492][ T7015] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 259.970880][ T7028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.247'. [ 260.008924][ T7031] Invalid ELF header type: 3 != 1 [ 260.983074][ T7015] XFS (loop3): Ending clean mount [ 261.238256][ T7015] XFS (loop3): Quotacheck needed: Please wait. [ 262.679749][ T7015] XFS (loop3): Quotacheck: Done. [ 262.734333][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 264.034535][ T7055] netlink: 'syz.2.254': attribute type 10 has an invalid length. [ 264.042568][ T7055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.254'. [ 264.051951][ T7055] team0: entered promiscuous mode [ 264.057145][ T7055] team_slave_0: entered promiscuous mode [ 264.068982][ T7055] team_slave_1: entered promiscuous mode [ 264.075050][ T7055] team0: entered allmulticast mode [ 264.080322][ T7055] team_slave_0: entered allmulticast mode [ 264.086145][ T7055] team_slave_1: entered allmulticast mode [ 264.092625][ T7055] bridge0: port 3(team0) entered blocking state [ 264.099132][ T7055] bridge0: port 3(team0) entered disabled state [ 264.112722][ T7055] bridge0: port 3(team0) entered blocking state [ 264.119649][ T7055] bridge0: port 3(team0) entered forwarding state [ 266.192085][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 266.816598][ T7083] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 267.716119][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 268.047632][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.047752][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.047804][ T8] usb 4-1: config 0 has no interface number 0 [ 268.048043][ T8] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.048247][ T8] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 268.048335][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.554264][ T8] usb 4-1: config 0 descriptor?? [ 269.042520][ T7085] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 269.066105][ T7085] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 269.069037][ T8] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 269.093191][ T7085] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 269.117080][ T7085] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 269.137654][ T7085] bond1: (slave geneve2): making interface the new active one [ 269.158971][ T7085] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 273.922485][ T1189] usb 4-1: USB disconnect, device number 4 [ 275.081667][ T7132] loop3: detected capacity change from 0 to 16 [ 275.133562][ T7132] erofs: (device loop3): mounted with root inode @ nid 36. [ 276.820768][ T7141] loop0: detected capacity change from 0 to 16 [ 276.837970][ T7141] erofs: (device loop0): mounted with root inode @ nid 36. [ 277.008432][ T7122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.027023][ T7154] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 279.071060][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 282.845317][ T7178] loop1: detected capacity change from 0 to 1024 [ 283.460713][ T7178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 283.473184][ T7178] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.753516][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 284.446255][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 284.496022][ T5841] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 284.885115][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.893522][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.904576][ T9] usb 2-1: config 0 has no interface number 0 [ 285.130797][ T5841] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 285.237852][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.377592][ T5841] usb 1-1: config 0 has no interface number 0 [ 285.408011][ T9] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.421098][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 285.430229][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.445033][ T5841] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 285.459545][ T9] usb 2-1: config 0 descriptor?? [ 285.469788][ T5841] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.652221][ T5841] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 285.673634][ T9] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 285.692409][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.709377][ T5841] usb 1-1: Product: syz [ 285.714072][ T5841] usb 1-1: Manufacturer: syz [ 285.720107][ T5841] usb 1-1: SerialNumber: syz [ 285.965527][ T5841] usb 1-1: config 0 descriptor?? [ 285.974251][ T7192] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 285.996737][ T5841] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 286.668564][ T5841] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 286.720491][ T5841] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 287.032195][ T7217] Invalid ELF header type: 3 != 1 [ 287.872688][ T9] usb 2-1: USB disconnect, device number 5 [ 288.012059][ T7223] loop2: detected capacity change from 0 to 4096 [ 288.047809][ T5813] usb 1-1: USB disconnect, device number 5 [ 288.449790][ T5813] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 288.499799][ T7223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 288.680743][ T5813] cyberjack 1-1:0.69: device disconnected [ 288.809393][ T7223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.600226][ T7242] syz.2.293 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 289.617014][ T7242] overlayfs: missing 'lowerdir' [ 290.410714][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.536014][ T7257] loop1: detected capacity change from 0 to 512 [ 291.571425][ T7257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.584412][ T7257] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.926071][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 291.952610][ T7269] syz.1.299 uses obsolete (PF_INET,SOCK_PACKET) [ 292.534462][ T5813] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.548433][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.667774][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.678510][ T5813] usb 3-1: config 0 has no interface number 0 [ 292.684664][ T5813] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.697637][ T5813] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 292.706776][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.463900][ T7275] loop0: detected capacity change from 0 to 1024 [ 293.465599][ T5813] usb 3-1: config 0 descriptor?? [ 293.557514][ T7275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 293.569695][ T7275] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.622286][ T5813] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 293.944563][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 294.653374][ T7285] binder: 7280:7285 ioctl 4002f516 0 returned -22 [ 295.204253][ T7291] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 295.777272][ T5813] usb 3-1: USB disconnect, device number 2 [ 296.126029][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.136880][ T7291] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 296.560217][ T7302] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 296.786757][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 297.206102][ T5763] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 297.484378][ T5763] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.518967][ T5763] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.571083][ T5763] usb 1-1: config 0 has no interface number 0 [ 297.607523][ T5763] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.678296][ T5763] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 297.741260][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.804024][ T5763] usb 1-1: config 0 descriptor?? [ 297.815255][ T5763] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 300.947607][ T8] usb 1-1: USB disconnect, device number 6 [ 303.447397][ T5777] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 303.981549][ T7351] warning: `syz.1.319' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 304.863294][ T7359] loop2: detected capacity change from 0 to 16 [ 304.898615][ T7359] erofs: (device loop2): mounted with root inode @ nid 36. [ 305.135973][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 305.166399][ T7365] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 305.183208][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 305.448263][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.541101][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.741147][ T9] usb 1-1: config 0 has no interface number 0 [ 305.747686][ T9] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.762871][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 305.773282][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.788034][ T9] usb 1-1: config 0 descriptor?? [ 305.841087][ T9] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 307.206021][ T5813] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 307.462055][ T5813] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.542381][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.644263][ T5813] usb 2-1: config 0 has no interface number 0 [ 307.708499][ T5813] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.723862][ T5813] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 307.734015][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.901573][ T5813] usb 2-1: config 0 descriptor?? [ 307.914716][ T5813] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 308.889611][ T5813] usb 1-1: USB disconnect, device number 7 [ 310.783305][ T9] usb 2-1: USB disconnect, device number 6 [ 312.822676][ T7419] sctp: failed to load transform for md5: -2 [ 312.831146][ T7416] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 313.006435][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 315.385966][ T5778] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 316.153100][ T7455] netlink: 280 bytes leftover after parsing attributes in process `syz.2.339'. [ 317.425893][ C0] hrtimer: interrupt took 49841 ns [ 318.049514][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.056268][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.251283][ T7462] Can't find a SQUASHFS superblock on nullb0 [ 318.711809][ T7468] netlink: 'syz.3.345': attribute type 10 has an invalid length. [ 318.719619][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.345'. [ 318.729477][ T7468] batman_adv: batadv0: Adding interface: vlan1 [ 318.735646][ T7468] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.760923][ T7468] batman_adv: batadv0: Interface activated: vlan1 [ 319.057870][ T7476] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 319.075055][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 321.136305][ T7485] GUP no longer grows the stack in syz.2.350 (7485): 200000006000-200000008000 (200000004000) [ 321.147265][ T7485] CPU: 0 PID: 7485 Comm: syz.2.350 Not tainted syzkaller #0 [ 321.154585][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.164671][ T7485] Call Trace: [ 321.167955][ T7485] [ 321.170881][ T7485] dump_stack_lvl+0x18c/0x250 [ 321.175568][ T7485] ? show_regs_print_info+0x20/0x20 [ 321.180764][ T7485] ? load_image+0x420/0x420 [ 321.185267][ T7485] ? find_vma+0x134/0x1b0 [ 321.189615][ T7485] fixup_user_fault+0x642/0x700 [ 321.194479][ T7485] fault_in_user_writeable+0x71/0xd0 [ 321.199766][ T7485] futex_lock_pi+0x274/0x9b0 [ 321.204382][ T7485] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 321.209873][ T7485] ? userfaultfd_unmap_prep+0x3d0/0x3d0 [ 321.215421][ T7485] ? mas_find_setup+0x493/0x590 [ 321.220279][ T7485] do_futex+0x23d/0x3e0 [ 321.224434][ T7485] ? __ia32_sys_get_robust_list+0x110/0x110 [ 321.230333][ T7485] __se_sys_futex+0x3a9/0x440 [ 321.235015][ T7485] ? __x64_sys_futex+0xf0/0xf0 [ 321.239779][ T7485] ? __x64_sys_futex+0x21/0xf0 [ 321.244541][ T7485] do_syscall_64+0x55/0xb0 [ 321.248961][ T7485] ? clear_bhb_loop+0x40/0x90 [ 321.253639][ T7485] ? clear_bhb_loop+0x40/0x90 [ 321.258326][ T7485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.264236][ T7485] RIP: 0033:0x7faae079ce59 [ 321.268667][ T7485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.288363][ T7485] RSP: 002b:00007faae16d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 321.296776][ T7485] RAX: ffffffffffffffda RBX: 00007faae0a16180 RCX: 00007faae079ce59 [ 321.304743][ T7485] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 321.312710][ T7485] RBP: 00007faae0832d6f R08: 0000000000000000 R09: 0000000000000002 [ 321.320675][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.328640][ T7485] R13: 00007faae0a16218 R14: 00007faae0a16180 R15: 00007ffcac321d28 [ 321.336629][ T7485] [ 323.037528][ T7495] loop0: detected capacity change from 0 to 512 [ 323.047824][ T7495] EXT4-fs: Ignoring removed orlov option [ 323.472888][ T7495] EXT4-fs (loop0): Test dummy encryption mode enabled [ 323.480243][ T7495] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 323.493480][ T7495] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 324.009721][ T7495] EXT4-fs (loop0): 1 truncate cleaned up [ 324.016845][ T7495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.361822][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.131156][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 328.215223][ T7522] nfs4: Unknown parameter 'no' [ 329.212235][ T7536] bridge_slave_1: left allmulticast mode [ 329.218080][ T7536] bridge_slave_1: left promiscuous mode [ 329.225021][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.836798][ T7536] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 332.120785][ T7540] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 332.208650][ T7544] loop1: detected capacity change from 0 to 8 [ 333.002098][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 333.011340][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 333.020851][ T7550] netlink: 'syz.0.367': attribute type 11 has an invalid length. [ 333.029126][ T7550] netlink: 'syz.0.367': attribute type 13 has an invalid length. [ 334.020303][ T7545] netlink: 'syz.1.365': attribute type 10 has an invalid length. [ 334.048521][ T7545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.365'. [ 334.112928][ T7545] batman_adv: batadv0: Adding interface: vlan1 [ 334.151494][ T7545] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.374018][ T7545] batman_adv: batadv0: Interface activated: vlan1 [ 335.063295][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.072016][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.108136][ T7550] bridge0: entered allmulticast mode [ 335.117255][ T7560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.172118][ T7554] bridge_slave_1: left allmulticast mode [ 335.186906][ T7554] bridge_slave_1: left promiscuous mode [ 335.203935][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.223008][ T7554] bridge_slave_0: left allmulticast mode [ 335.231600][ T7554] bridge_slave_0: left promiscuous mode [ 335.241323][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.090488][ T7629] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.097728][ T7629] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.149686][ T7629] hsr0: entered promiscuous mode [ 345.746478][ T7635] unsupported nlmsg_type 40 [ 346.544216][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 346.547041][ T7628] EXT4-fs: Conflicting test_dummy_encryption options [ 348.604332][ T7663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.820907][ T7725] loop1: detected capacity change from 0 to 262144 [ 355.830119][ T7725] (syz.1.409,7725,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 355.840680][ T7725] (syz.1.409,7725,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 357.388582][ T7733] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 362.109308][ T28] audit: type=1326 audit(1779940506.476:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 362.389184][ T28] audit: type=1326 audit(1779940506.476:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 362.413512][ T28] audit: type=1326 audit(1779940506.516:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 363.676528][ T28] audit: type=1326 audit(1779940506.516:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 363.751517][ T7789] loop1: detected capacity change from 0 to 128 [ 365.476590][ T28] audit: type=1326 audit(1779940506.516:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 365.855560][ T28] audit: type=1326 audit(1779940506.746:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 365.882262][ T7793] loop0: detected capacity change from 0 to 40427 [ 365.897448][ T28] audit: type=1326 audit(1779940506.746:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 365.909113][ T7793] F2FS-fs (loop0): invalid crc_offset: 4177530876 [ 365.947470][ T28] audit: type=1326 audit(1779940506.746:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 365.971491][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.085387][ T28] audit: type=1326 audit(1779940507.796:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 366.143226][ T7805] loop1: detected capacity change from 0 to 128 [ 366.151300][ T7793] F2FS-fs (loop0): Wrong journal entry on segno 65538 [ 366.161148][ T7793] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 366.161629][ T28] audit: type=1326 audit(1779940507.796:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 366.193064][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.624851][ T7809] xt_connbytes: Forcing CT accounting to be enabled [ 366.631933][ T7809] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 369.039785][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 369.039829][ T28] audit: type=1800 audit(1779940513.386:76): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.431" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 369.455410][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 373.198817][ T7845] loop0: detected capacity change from 0 to 2048 [ 374.644671][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.430'. [ 374.748919][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.430'. [ 374.977610][ T7846] syz.3.430 (7846) used greatest stack depth: 17352 bytes left [ 375.441139][ T7856] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 375.736239][ T7860] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.745039][ T7860] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.754001][ T7860] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.762973][ T7860] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.080389][ T7860] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.090292][ T7860] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.099284][ T7860] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.108257][ T7860] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.473105][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.480023][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.510300][ T7914] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 383.455439][ T7922] loop0: detected capacity change from 0 to 4096 [ 384.129347][ T7931] xt_connbytes: Forcing CT accounting to be enabled [ 384.919903][ T7937] nfs4: Unknown parameter 'no' [ 393.742705][ T7969] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 394.583991][ T7981] kernel profiling enabled (shift: 9) [ 394.641371][ T7982] nfs4: Unknown parameter 'no' [ 396.518508][ T7994] loop1: detected capacity change from 0 to 512 [ 396.529021][ T7994] EXT4-fs: Ignoring removed orlov option [ 397.252606][ T7994] EXT4-fs (loop1): Test dummy encryption mode enabled [ 397.259653][ T7994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 397.288622][ T7994] EXT4-fs (loop1): 1 truncate cleaned up [ 397.299582][ T7994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.594537][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.812154][ T8000] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.469'. [ 397.922234][ T9] Process accounting resumed [ 398.092140][ T8003] loop1: detected capacity change from 0 to 32768 [ 398.199405][ T8003] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 398.255127][ T8003] XFS (loop1): Ending clean mount [ 398.310828][ T8003] XFS (loop1): Quotacheck needed: Please wait. [ 398.419383][ T8003] XFS (loop1): Quotacheck: Done. [ 398.941025][ T28] audit: type=1804 audit(1779940543.146:77): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.470" name="/newroot/114/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=1 errno=0 [ 399.526740][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 400.278223][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 405.443138][ T8057] nfs4: Unknown parameter 'no' [ 406.826651][ T8075] loop1: detected capacity change from 0 to 40427 [ 406.860218][ T8075] F2FS-fs (loop1): invalid crc_offset: 4177530876 [ 407.316447][ T8075] F2FS-fs (loop1): Wrong journal entry on segno 65538 [ 407.323268][ T8075] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 407.811245][ T8090] xt_connbytes: Forcing CT accounting to be enabled [ 410.372014][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.483'. [ 411.167118][ T8111] syz_tun: entered allmulticast mode [ 412.034434][ T8110] syz_tun: left allmulticast mode [ 421.401237][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 424.414436][ T8207] tipc: Started in network mode [ 424.419498][ T8207] tipc: Node identity 4, cluster identity 4711 [ 424.425718][ T8207] tipc: Node number set to 4 [ 425.673859][ T8215] nfs4: Unknown parameter 'no' [ 428.027860][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 428.065446][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 428.076472][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 428.087054][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 430.200435][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.527972][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.546180][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.554618][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.569369][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.577306][ T5089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 434.584851][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.716221][ T5089] Bluetooth: hci4: command tx timeout [ 438.766048][ T5089] Bluetooth: hci4: command tx timeout [ 439.266561][ T28] audit: type=1326 audit(2000000001.899:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.2.531" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faae079ce59 code=0x0 [ 439.737974][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.775078][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 440.406504][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.412853][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.580047][ T8266] chnl_net:caif_netlink_parms(): no params data found [ 440.846220][ T5089] Bluetooth: hci4: command tx timeout [ 441.684542][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.695459][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 442.627209][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.639892][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.657063][ T8266] bridge_slave_0: entered allmulticast mode [ 442.664413][ T8266] bridge_slave_0: entered promiscuous mode [ 442.716684][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.729678][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 442.746835][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.753996][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.766181][ T8266] bridge_slave_1: entered allmulticast mode [ 442.777568][ T8266] bridge_slave_1: entered promiscuous mode [ 442.840110][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.852950][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 442.887096][ T8266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.916406][ T5089] Bluetooth: hci4: command tx timeout [ 442.926799][ T8266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.963639][ T8266] team0: Port device team_slave_0 added [ 442.974107][ T8266] team0: Port device team_slave_1 added [ 443.044046][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.053365][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.081859][ T8266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.094476][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.101921][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.128862][ T8266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.201053][ T8266] hsr_slave_0: entered promiscuous mode [ 443.210446][ T8266] hsr_slave_1: entered promiscuous mode [ 443.217771][ T8266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.225344][ T8266] Cannot create hsr debugfs directory [ 443.580640][ T8266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 443.594061][ T8266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 443.644287][ T8266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 443.656724][ T8266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 443.794160][ T8266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.884282][ T8266] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.940452][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.947643][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.975854][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.982978][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.349542][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.369045][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.379327][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.387495][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.418528][ T11] veth1_macvtap: left promiscuous mode [ 444.424522][ T11] veth0_macvtap: left promiscuous mode [ 444.431818][ T11] veth1_vlan: left promiscuous mode [ 444.437607][ T11] veth0_vlan: left promiscuous mode [ 444.666693][ T11] bond1 (unregistering): (slave geneve2): Releasing active interface [ 444.681811][ T11] bond1 (unregistering): Released all slaves [ 445.192818][ T11] team0 (unregistering): Port device team_slave_1 removed [ 445.241838][ T11] team0 (unregistering): Port device team_slave_0 removed [ 445.285494][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.333883][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.684134][ T11] bond0 (unregistering): Released all slaves [ 445.815742][ T8266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.184713][ T8266] veth0_vlan: entered promiscuous mode [ 446.212015][ T8266] veth1_vlan: entered promiscuous mode [ 446.256422][ T8266] veth0_macvtap: entered promiscuous mode [ 446.272694][ T8266] veth1_macvtap: entered promiscuous mode [ 446.299115][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.316154][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.330972][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.341800][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.356613][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.370509][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.382287][ T8266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.399570][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.413966][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.424460][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.435348][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.445677][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.460665][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.472386][ T8266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.505424][ T8266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.516514][ T8266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.525279][ T8266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.535078][ T8266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.636203][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.644073][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.676334][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.684352][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.229422][ T8405] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 448.301104][ T8408] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 449.244381][ T8403] IPVS: stopping master sync thread 8405 ... [ 451.003782][ T8435] nfs4: Unknown parameter 'no' [ 452.665954][ T8442] capability: warning: `syz.3.545' uses deprecated v2 capabilities in a way that may be insecure [ 453.387426][ T8452] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 460.420412][ T8502] netlink: 96 bytes leftover after parsing attributes in process `syz.2.558'. [ 460.574373][ T8501] dccp_close: ABORT with 4578 bytes unread [ 461.406395][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.413951][ T8510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.449361][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.462604][ T8510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.288066][ T8513] xt_TCPMSS: Only works on TCP SYN packets [ 462.294780][ T8512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.305686][ T5777] Bluetooth: hci4: command tx timeout [ 462.440664][ T8510] batman_adv: batadv0: Interface deactivated: vlan1 [ 462.464767][ T8510] batman_adv: batadv0: Removing interface: vlan1 [ 464.011244][ T8536] loop4: detected capacity change from 0 to 256 [ 464.904040][ T8536] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 465.496172][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 465.508265][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 465.517442][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 465.527655][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 466.600151][ T8568] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by " [ 468.772498][ T8583] loop1: detected capacity change from 0 to 1024 [ 468.863856][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.959950][ T8583] hfsplus: failed to load extents file [ 473.360416][ T8622] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 487.516001][ T8730] kAFS: No cell specified [ 489.186172][ T8745] loop4: detected capacity change from 0 to 32768 [ 489.285223][ T8745] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 489.922399][ T8745] XFS (loop4): Ending clean mount [ 489.935717][ T8745] XFS (loop4): Quotacheck needed: Please wait. [ 490.081933][ T8745] XFS (loop4): Quotacheck: Done. [ 490.786164][ T28] audit: type=1804 audit(2000000053.419:79): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.600" name="/newroot/16/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=1 errno=0 [ 491.110146][ T8266] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 493.411659][ T8796] netlink: 96 bytes leftover after parsing attributes in process `syz.4.605'. [ 493.805858][ T8787] dccp_close: ABORT with 4578 bytes unread [ 493.865360][ T5777] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 496.370033][ T8817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.476658][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 497.739032][ T787] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.755933][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.777193][ T787] usb 5-1: config 0 has no interface number 0 [ 497.796206][ T787] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.820446][ T787] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 497.872045][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.023910][ T787] usb 5-1: config 0 descriptor?? [ 498.066278][ T787] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 500.228702][ T5777] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 501.721797][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.728389][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.485950][ T1189] usb 5-1: USB disconnect, device number 2 [ 504.450567][ T8877] xt_TCPMSS: Only works on TCP SYN packets [ 504.457518][ T8875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.274207][ T8929] overlayfs: failed to clone upperpath [ 513.247316][ T8957] xt_TCPMSS: Only works on TCP SYN packets [ 513.254174][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.209115][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 517.145851][ T8993] input: syz0 as /devices/virtual/input/input7 [ 518.657061][ T9009] overlayfs: failed to clone upperpath [ 519.849341][ T9023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.409796][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 527.498241][ T5763] IPVS: starting estimator thread 0... [ 528.025947][ T9100] IPVS: using max 21 ests per chain, 50400 per kthread [ 528.644833][ T9123] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 528.749348][ T9123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'. [ 530.925516][ T9157] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by " [ 532.946366][ T9171] overlayfs: failed to clone upperpath [ 540.748743][ T9225] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 542.223758][ T9216] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 542.241810][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'. [ 546.072455][ T9260] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 548.206099][ T9266] netlink: 96 bytes leftover after parsing attributes in process `syz.2.696'. [ 548.326444][ T9265] dccp_close: ABORT with 4570 bytes unread [ 550.445451][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.701'. [ 552.058058][ T9296] netlink: 64 bytes leftover after parsing attributes in process `syz.3.704'. [ 552.456295][ T5777] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 552.465258][ T5777] Bluetooth: hci4: Injecting HCI hardware error event [ 552.475438][ T5777] Bluetooth: hci4: hardware error 0x00 [ 553.965475][ T9315] syzkaller0: entered allmulticast mode [ 553.988155][ T9315] syzkaller0: entered promiscuous mode [ 553.999804][ T9315] syzkaller0 (unregistering): left allmulticast mode [ 554.007041][ T9315] syzkaller0 (unregistering): left promiscuous mode [ 554.058091][ T9318] loop1: detected capacity change from 0 to 2048 [ 554.080229][ T9318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 555.266054][ T5777] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 563.084283][ T9389] bridge_slave_0: left allmulticast mode [ 563.090487][ T9389] bridge_slave_0: left promiscuous mode [ 563.096326][ T9389] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.258623][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.306867][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.844195][ T9389] bridge_slave_1: left allmulticast mode [ 563.850027][ T9389] bridge_slave_1: left promiscuous mode [ 563.855812][ T9389] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.930027][ T9389] bond0: (slave bond_slave_0): Releasing backup interface [ 563.973011][ T9389] bond0: (slave bond_slave_1): Releasing backup interface [ 564.106936][ T9387] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 564.399097][ T9389] team0: Port device team_slave_0 removed [ 564.432508][ T9389] team0: Port device team_slave_1 removed [ 564.439001][ T9389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.446563][ T9389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.463961][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 564.467595][ T9389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.480384][ T9389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.619616][ T9402] tipc: Enabling of bearer rejected, failed to enable media [ 567.236037][ T9421] loop1: detected capacity change from 0 to 2048 [ 567.250553][ T9421] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 569.405225][ T9435] bridge0: port 4(veth0_to_bond) entered blocking state [ 569.412414][ T9435] bridge0: port 4(veth0_to_bond) entered disabled state [ 569.419604][ T9435] veth0_to_bond: entered allmulticast mode [ 569.427045][ T9435] veth0_to_bond: entered promiscuous mode [ 569.433465][ T9435] bridge0: port 4(veth0_to_bond) entered blocking state [ 569.441618][ T9435] bridge0: port 4(veth0_to_bond) entered forwarding state [ 574.826538][ T9462] capability: warning: `syz.3.744' uses 32-bit capabilities (legacy support in use) [ 577.693522][ T9481] loop4: detected capacity change from 0 to 128 [ 577.717315][ T9481] EXT4-fs (loop4): Test dummy encryption mode enabled [ 577.801884][ T9481] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 577.817779][ T9481] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 579.702973][ T8266] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 579.725131][ T5777] Bluetooth: hci3: unexpected event for opcode 0x203d [ 582.751038][ T9541] bridge0: port 2(veth0_to_bond) entered blocking state [ 582.758321][ T9541] bridge0: port 2(veth0_to_bond) entered disabled state [ 582.765462][ T9541] veth0_to_bond: entered allmulticast mode [ 582.772851][ T9541] veth0_to_bond: entered promiscuous mode [ 582.779283][ T9541] bridge0: port 2(veth0_to_bond) entered blocking state [ 582.786416][ T9541] bridge0: port 2(veth0_to_bond) entered forwarding state [ 582.825484][ T9538] NILFS (nullb0): couldn't find nilfs on the device [ 583.281105][ T9548] bond0: (slave batadv0): Releasing backup interface [ 583.837866][ T5777] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 583.846783][ T5777] Bluetooth: hci3: Injecting HCI hardware error event [ 583.860024][ T5777] Bluetooth: hci3: hardware error 0x00 [ 584.018467][ T9548] bridge_slave_0: left allmulticast mode [ 584.024168][ T9548] bridge_slave_0: left promiscuous mode [ 584.029952][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.061273][ T9548] veth0_to_bond: left allmulticast mode [ 584.066942][ T9548] veth0_to_bond: left promiscuous mode [ 584.072537][ T9548] bridge0: port 2(veth0_to_bond) entered disabled state [ 584.092005][ T9548] bond0: (slave bond_slave_0): Releasing backup interface [ 584.110109][ T9548] bond0: (slave bond_slave_1): Releasing backup interface [ 584.144940][ T9548] team0: Port device team_slave_0 removed [ 584.180104][ T9548] team0: Port device team_slave_1 removed [ 584.187289][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.194740][ T9548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.214633][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.222238][ T9548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.235092][ T9548] batman_adv: batadv0: Interface deactivated: vlan1 [ 584.241971][ T9548] batman_adv: batadv0: Removing interface: vlan1 [ 584.255118][ T9548] bond0: (slave wlan1): Releasing backup interface [ 586.236025][ T5777] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 587.566738][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'. [ 587.645329][ T9590] loop4: detected capacity change from 0 to 1024 [ 587.687109][ T9590] EXT4-fs: quotafile must be on filesystem root [ 588.324731][ T9597] loop4: detected capacity change from 0 to 512 [ 588.583902][ T9597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.648528][ T9594] EXT4-fs (loop4): resizing filesystem from 256 to 1 blocks [ 588.656385][ T9594] EXT4-fs warning (device loop4): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 589.738610][ T8266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.616486][ T9624] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 590.633245][ T9624] VFS: Can't find a romfs filesystem on dev nullb0. [ 590.633245][ T9624] [ 591.731170][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.786'. [ 592.972758][ T28] audit: type=1326 audit(2000000155.599:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 593.043306][ T28] audit: type=1326 audit(2000000155.599:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 593.163884][ T28] audit: type=1326 audit(2000000155.639:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 593.188388][ T28] audit: type=1326 audit(2000000155.639:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 593.212475][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.880892][ T28] audit: type=1326 audit(2000000155.639:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 593.951007][ T28] audit: type=1326 audit(2000000155.639:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 594.033308][ T28] audit: type=1326 audit(2000000155.639:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 594.112090][ T28] audit: type=1326 audit(2000000155.639:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 594.142824][ T28] audit: type=1326 audit(2000000155.639:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 594.172659][ T28] audit: type=1326 audit(2000000155.639:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.3.788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7c19ce59 code=0x7ffc0000 [ 597.581522][ T9670] bridge0: port 3(team0) entered disabled state [ 597.596165][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.605044][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.613559][ T9670] bridge0: port 4(veth0_to_bond) entered disabled state [ 597.949269][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 600.154756][ T9697] bridge_slave_0: left allmulticast mode [ 600.160862][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.294234][ T9700] xt_NFQUEUE: number of total queues is 0 [ 600.312659][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.800'. [ 600.322227][ T9700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.800'. [ 601.901061][ T9697] bridge_slave_1: left allmulticast mode [ 601.906977][ T9697] bridge_slave_1: left promiscuous mode [ 601.913317][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.214874][ T9697] bond0: (slave bond_slave_0): Releasing backup interface [ 603.235632][ T9697] bond0: (slave bond_slave_1): Releasing backup interface [ 603.263366][ T9697] team0: Port device team_slave_0 removed [ 603.282846][ T9697] team0: Port device team_slave_1 removed [ 603.301544][ T9697] bond0: (slave wlan1): Releasing backup interface [ 603.429480][ T9711] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 603.523441][ T9709] IPVS: stopping master sync thread 9711 ... [ 606.369931][ T9745] team0: left promiscuous mode [ 606.375167][ T9745] team_slave_0: left promiscuous mode [ 606.386004][ T9745] team_slave_1: left promiscuous mode [ 606.398125][ T9745] bridge0: port 3(team0) entered disabled state [ 606.992756][ T9745] bond0: (slave batadv0): Releasing backup interface [ 607.475600][ T9745] bridge_slave_0: left allmulticast mode [ 607.579860][ T9745] bridge_slave_0: left promiscuous mode [ 607.585668][ T9745] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.632163][ T9745] bridge_slave_1: left allmulticast mode [ 607.637907][ T9745] bridge_slave_1: left promiscuous mode [ 607.644084][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.655412][ T9745] veth0_to_bond: left allmulticast mode [ 607.662910][ T9745] veth0_to_bond: left promiscuous mode [ 607.668671][ T9745] bridge0: port 4(veth0_to_bond) entered disabled state [ 607.719771][ T9745] bond0: (slave bond_slave_0): Releasing backup interface [ 607.755197][ T9745] bond0: (slave bond_slave_1): Releasing backup interface [ 607.767918][ T9745] team_slave_0: left allmulticast mode [ 611.079593][ T9745] team0: Port device team_slave_0 removed [ 611.086463][ T9745] team_slave_1: left allmulticast mode [ 611.109176][ T9745] team0: Port device team_slave_1 removed [ 611.117633][ T9745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.125058][ T9745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.155129][ T9745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.162682][ T9745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.994201][ T9771] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 613.071068][ T9776] loop1: detected capacity change from 0 to 2048 [ 613.082103][ T9776] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 619.656510][ T9818] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 623.063504][ T9844] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 624.614290][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.634552][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.919268][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.837'. [ 624.998439][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.837'. [ 626.012468][ T9859] loop4: detected capacity change from 0 to 32768 [ 627.668146][ T9872] loop4: detected capacity change from 0 to 64 [ 627.774869][ T9872] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 628.731854][ T9880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.845'. [ 630.006300][ T9889] No such timeout policy "syz1" [ 633.353072][ T9913] netlink: 'syz.3.855': attribute type 12 has an invalid length. [ 633.770483][ T9918] xt_NFQUEUE: number of total queues is 0 [ 633.778388][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.856'. [ 633.787464][ T9918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.856'. [ 634.533702][ T5763] IPVS: starting estimator thread 0... [ 634.655860][ T9921] IPVS: using max 35 ests per chain, 84000 per kthread [ 637.474476][ T9943] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 637.621981][ T5814] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 638.061483][ T5814] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 638.383436][ T5814] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 638.442107][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.503609][ T5814] usb 2-1: Product: syz [ 638.533764][ T5814] usb 2-1: Manufacturer: syz [ 638.567635][ T5814] usb 2-1: SerialNumber: syz [ 638.769517][ T5814] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 639.775597][ T5839] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 641.128196][ T5839] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 641.139161][ T5839] ath9k_htc: Failed to initialize the device [ 641.225345][ T9960] netlink: 'syz.4.866': attribute type 12 has an invalid length. [ 641.243060][ T9957] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 641.250032][ T9957] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 641.259173][ T9957] vhci_hcd vhci_hcd.0: Device attached [ 641.529645][ T9958] vhci_hcd: connection closed [ 641.565638][ T2983] vhci_hcd: stop threads [ 641.586912][ T5839] usb 2-1: ath9k_htc: USB layer deinitialized [ 641.813299][ T2983] vhci_hcd: release socket [ 641.940975][ T2983] vhci_hcd: disconnect device [ 641.968364][ T5814] usb 42-1: SetAddress Request (2) to port 0 [ 642.076487][ T5814] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 642.155920][ T5814] usb 42-1: enqueue for inactive port 0 [ 642.206286][ T8] usb 2-1: USB disconnect, device number 7 [ 642.480432][ T9969] netlink: 277 bytes leftover after parsing attributes in process `syz.3.868'. [ 642.674875][ T5814] usb usb42-port1: attempt power cycle [ 642.784871][ T9968] loop1: detected capacity change from 0 to 4096 [ 642.939092][ T9968] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 643.363249][ T5814] usb usb42-port1: unable to enumerate USB device [ 645.617244][T10000] NILFS (nullb0): couldn't find nilfs on the device [ 647.725174][T10008] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 648.019654][T10012] netlink: 'syz.2.878': attribute type 12 has an invalid length. [ 653.396114][T10041] No such timeout policy "syz1" [ 656.321876][T10068] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 656.397192][T10070] (null): rxe_set_mtu: Set mtu to 256 [ 656.405413][T10070] vxcan1 speed is unknown, defaulting to 1000 [ 656.415220][T10070] vxcan1 speed is unknown, defaulting to 1000 [ 656.424310][T10070] vxcan1 speed is unknown, defaulting to 1000 [ 656.613396][T10070] infiniband syz2: set active [ 656.618617][T10070] infiniband syz2: added vxcan1 [ 656.667204][ T8] vxcan1 speed is unknown, defaulting to 1000 [ 656.677004][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 656.677017][ T28] audit: type=1326 audit(2000000219.079:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 656.728050][T10070] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 656.743058][T10070] infiniband syz2: Couldn't open port 1 [ 656.803010][T10070] RDS/IB: syz2: added [ 656.805865][ T28] audit: type=1326 audit(2000000219.079:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 656.807912][T10070] smc: adding ib device syz2 with port count 1 [ 656.837790][T10070] smc: ib device syz2 port 1 has pnetid [ 656.851048][T10070] vxcan1 speed is unknown, defaulting to 1000 [ 656.870814][ T5814] vxcan1 speed is unknown, defaulting to 1000 [ 656.963771][T10070] vxcan1 speed is unknown, defaulting to 1000 [ 657.048457][T10070] vxcan1 speed is unknown, defaulting to 1000 [ 657.134285][T10070] vxcan1 speed is unknown, defaulting to 1000 [ 657.272882][ T28] audit: type=1326 audit(2000000219.089:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 657.306366][T10074] loop4: detected capacity change from 0 to 128 [ 657.311002][ T28] audit: type=1326 audit(2000000219.089:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 657.326994][T10074] FAT-fs (loop4): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 657.387156][ T28] audit: type=1326 audit(2000000219.089:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 657.449609][ T28] audit: type=1326 audit(2000000219.089:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 657.475160][ T28] audit: type=1326 audit(2000000219.089:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 657.516068][ T28] audit: type=1326 audit(2000000219.089:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 657.562773][T10076] vxcan1 speed is unknown, defaulting to 1000 [ 657.755908][ T28] audit: type=1326 audit(2000000219.089:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 657.858598][ T28] audit: type=1326 audit(2000000219.089:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae079ce59 code=0x7ffc0000 [ 660.365829][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 666.551150][T10124] Invalid ELF header len 8 [ 668.551721][T10131] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 670.861936][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 670.861950][ T28] audit: type=1326 audit(2000000233.489:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 670.912052][ T28] audit: type=1326 audit(2000000233.539:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 670.937627][ T28] audit: type=1326 audit(2000000233.539:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 670.961770][ T28] audit: type=1326 audit(2000000233.539:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 670.986293][ T28] audit: type=1326 audit(2000000233.539:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 671.247933][ T28] audit: type=1326 audit(2000000233.539:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 671.366648][ T28] audit: type=1326 audit(2000000233.539:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 671.391728][ T28] audit: type=1326 audit(2000000233.539:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 671.416497][ T28] audit: type=1326 audit(2000000233.539:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 671.457362][T10145] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 671.475895][ T28] audit: type=1326 audit(2000000233.539:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.4.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 671.574643][T10150] hsr0: entered promiscuous mode [ 671.593297][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 673.825514][T10181] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 674.584305][T10185] (null): rxe_set_mtu: Set mtu to 256 [ 674.596180][T10185] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 674.770358][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 676.925168][T10202] loop1: detected capacity change from 0 to 256 [ 676.953606][T10202] exfat: Deprecated parameter 'utf8' [ 678.077660][T10200] ±ÿþ€: renamed from team_slave_1 [ 678.544483][T10202] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 678.838632][ T5777] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 678.849123][ T5777] Bluetooth: hci1: Injecting HCI hardware error event [ 678.859903][ T9302] Bluetooth: hci1: hardware error 0x00 [ 680.935976][ T5780] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 681.732501][T10231] loop1: detected capacity change from 0 to 32768 [ 681.818545][ T9302] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 682.497976][ T5780] usb 5-1: Using ep0 maxpacket: 16 [ 682.518448][ T5780] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 682.533253][ T5780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.557711][ T5780] usb 5-1: config 0 has no interface number 0 [ 682.569267][ T5780] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 682.593165][ T5780] usb 5-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.633622][ T5780] usb 5-1: config 0 interface 98 has no altsetting 0 [ 682.652544][ T5780] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 682.679895][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.690960][ T5780] usb 5-1: Product: syz [ 682.695224][ T5780] usb 5-1: Manufacturer: syz [ 682.701433][ T5780] usb 5-1: SerialNumber: syz [ 682.715432][ T5780] usb 5-1: config 0 descriptor?? [ 682.722390][T10223] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 682.737448][ T5780] asix: probe of 5-1:0.98 failed with error -22 [ 683.004156][T10223] printk: syz.4.929 (10223): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 683.964292][T10242] loop4: detected capacity change from 0 to 512 [ 684.084709][T10242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 685.822394][T10242] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 685.899005][T10242] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 685.899435][T10242] EXT4-fs: failed to create workqueue [ 686.045997][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.055907][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.077174][T10242] EXT4-fs (loop4): mount failed [ 686.139524][ T5841] usb 5-1: USB disconnect, device number 3 [ 686.242108][T10252] netlink: 14 bytes leftover after parsing attributes in process `syz.3.943'. [ 686.394651][T10252] bond0 (unregistering): Released all slaves [ 686.412083][T10256] syz_tun: entered allmulticast mode [ 688.431608][T10251] syz_tun: left allmulticast mode [ 688.763561][T10265] loop4: detected capacity change from 0 to 128 [ 691.336406][ T28] kauditd_printk_skb: 148 callbacks suppressed [ 691.336422][ T28] audit: type=1800 audit(2000000253.509:288): pid=10274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.947" name="file1" dev="loop4" ino=1048639 res=0 errno=0 [ 691.380946][T10275] syz.4.947: attempt to access beyond end of device [ 691.380946][T10275] loop4: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 691.616734][T10283] hsr0: entered promiscuous mode [ 691.640253][T10284] loop1: detected capacity change from 0 to 256 [ 691.655258][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 691.661809][T10284] exfat: Deprecated parameter 'utf8' [ 691.686181][T10284] exfat: Deprecated parameter 'utf8' [ 691.714963][T10284] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 698.477116][T10329] netlink: 136 bytes leftover after parsing attributes in process `syz.2.963'. [ 701.660646][T10349] loop1: detected capacity change from 0 to 512 [ 701.670795][T10349] EXT4-fs: Ignoring removed i_version option [ 701.772246][T10349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.785107][T10349] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.304860][T10347] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 702.464777][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.550161][T10363] pim6reg: entered allmulticast mode [ 703.648555][T10364] team0: entered allmulticast mode [ 703.656804][T10364] team0: left allmulticast mode [ 703.662056][T10364] pim6reg: left allmulticast mode [ 703.963228][T10363] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 704.543254][T10377] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 707.429286][T10388] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 708.439237][T10397] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 711.291771][T10422] loop4: detected capacity change from 0 to 128 [ 711.782858][T10430] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 712.211091][ T28] audit: type=1800 audit(2000000274.229:289): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.986" name="file1" dev="loop4" ino=1048640 res=0 errno=0 [ 712.241680][T10431] syz.4.986: attempt to access beyond end of device [ 712.241680][T10431] loop4: rw=2049, sector=132, nr_sectors = 24 limit=128 [ 713.056979][T10435] loop4: detected capacity change from 0 to 8 [ 713.121615][T10435] SQUASHFS error: zlib decompression failed, data probably corrupt [ 713.212422][T10435] SQUASHFS error: Failed to read block 0x9b: -5 [ 713.221248][T10435] SQUASHFS error: Unable to read metadata cache entry [99] [ 713.229221][T10435] SQUASHFS error: Unable to read inode 0x127 [ 718.959198][T10485] lo speed is unknown, defaulting to 1000 [ 718.967108][T10485] lo speed is unknown, defaulting to 1000 [ 718.983697][T10485] lo speed is unknown, defaulting to 1000 [ 719.015567][T10485] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 719.070359][T10485] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 719.476330][T10485] lo speed is unknown, defaulting to 1000 [ 719.484066][T10485] lo speed is unknown, defaulting to 1000 [ 719.492049][T10485] lo speed is unknown, defaulting to 1000 [ 719.499350][T10485] lo speed is unknown, defaulting to 1000 [ 722.624094][T10527] fuse: Unknown parameter '0x0000000000000007' [ 722.642510][T10527] 9pnet_fd: Insufficient options for proto=fd [ 722.736462][T10528] (null): rxe_set_mtu: Set mtu to 256 [ 722.757773][T10528] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 723.546777][ T28] audit: type=1326 audit(2000000285.429:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.1.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29a59ce59 code=0x7ffc0000 [ 723.628091][ T28] audit: type=1326 audit(2000000285.449:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.1.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe29a59ce59 code=0x7ffc0000 [ 724.022085][ T28] audit: type=1326 audit(2000000285.449:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.1.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29a59ce59 code=0x7ffc0000 [ 724.165349][ T28] audit: type=1326 audit(2000000285.729:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.1.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe29a59ce59 code=0x7ffc0000 [ 726.029927][T10539] syzkaller0: entered promiscuous mode [ 726.035455][T10539] syzkaller0: entered allmulticast mode [ 726.116656][T10543] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 726.238768][T10548] Set syz0 is full, maxelem 0 reached [ 726.284292][T10552] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1017'. [ 726.390191][T10554] loop1: detected capacity change from 0 to 1024 [ 726.400896][T10552] bond0 (unregistering): Released all slaves [ 726.444391][T10539] netlink: 'syz.4.1011': attribute type 3 has an invalid length. [ 726.460697][T10539] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1011'. [ 726.471889][T10558] syz_tun: entered allmulticast mode [ 727.131840][T10550] syz_tun: left allmulticast mode [ 727.303252][T10568] 9pnet_fd: Insufficient options for proto=fd [ 728.025193][T10554] hfsplus: unknown catalog record type 0 [ 728.292185][ T2983] hfsplus: b-tree write err: -5, ino 25 [ 728.316185][ T2983] hfsplus: b-tree write err: -5, ino 4 [ 728.336302][ T2983] hfsplus: b-tree write err: -5, ino 2 [ 728.363317][ T2983] hfsplus: b-tree write err: -5, ino 22 [ 728.667103][T10586] (null): rxe_set_mtu: Set mtu to 256 [ 728.673874][T10586] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 729.216153][ T28] audit: type=1326 audit(2000000291.309:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 729.511586][ T28] audit: type=1326 audit(2000000291.319:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 729.848636][ T28] audit: type=1326 audit(2000000291.319:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 730.158075][ T28] audit: type=1326 audit(2000000291.319:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 730.359684][ T28] audit: type=1326 audit(2000000291.319:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 730.626007][ T28] audit: type=1326 audit(2000000291.319:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 730.665858][ T28] audit: type=1326 audit(2000000291.319:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 730.701484][ T28] audit: type=1326 audit(2000000291.319:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 730.728220][ T28] audit: type=1326 audit(2000000291.329:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 730.782100][ T28] audit: type=1326 audit(2000000291.329:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.4.1021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cc959ce59 code=0x7ffc0000 [ 730.901406][T10604] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1029'. [ 730.974404][T10604] bond0 (unregistering): Released all slaves [ 731.008668][T10607] syz_tun: entered allmulticast mode [ 733.104151][T10603] syz_tun: left allmulticast mode [ 737.137432][T10635] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 738.826321][T10659] xt_NFQUEUE: number of total queues is 0 [ 740.506223][T10676] netlink: 'syz.1.1046': attribute type 12 has an invalid length. [ 741.451452][T10688] loop1: detected capacity change from 0 to 256 [ 741.514347][T10688] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 742.212994][T10690] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 743.045490][T10702] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.054687][T10702] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.063561][T10702] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.072412][T10702] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.111947][T10702] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.121608][T10702] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.130801][T10702] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.140354][T10702] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.179687][T10704] comedi comedi2: comedi_config --init_data is deprecated [ 744.294722][T10703] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.303763][T10703] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.312670][T10703] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.321555][T10703] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.511052][T10703] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.520201][T10703] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.529289][T10703] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.538306][T10703] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.480463][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.488476][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.018229][T10727] syz.2.1061(10727): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 750.265533][T10733] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 753.114837][T10735] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 753.648384][T10754] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 756.861805][T10760] batman_adv: batadv0: Adding interface: dummy0 [ 756.869174][T10760] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.003215][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 757.597235][T10760] batman_adv: batadv0: Interface activated: dummy0 [ 757.655829][T10770] batadv0: mtu less than device minimum [ 757.663672][T10770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 757.676201][T10770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 757.688721][T10770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 757.701696][T10770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 757.714525][T10770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 757.727403][T10770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 757.739554][T10770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 757.751565][T10770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 757.763058][T10770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 757.940413][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 761.370320][T10819] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 763.033550][T10837] loop4: detected capacity change from 0 to 128 [ 763.041989][T10837] FAT-fs (loop4): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 763.154923][T10840] xt_CONNSECMARK: invalid mode: 0 [ 770.607142][T10898] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1106'. [ 776.040338][T10935] netlink: 'syz.1.1119': attribute type 10 has an invalid length. [ 776.235308][T10935] team0: Port device dummy0 added [ 776.245373][T10940] netlink: 'syz.1.1119': attribute type 10 has an invalid length. [ 776.658251][T10940] team0: Port device dummy0 removed [ 776.705812][T10940] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 782.413308][T10959] loop4: detected capacity change from 0 to 128 [ 783.457007][T10959] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 783.481133][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 783.666160][T10959] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 783.900840][ T8266] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 784.008470][T10989] loop1: detected capacity change from 0 to 128 [ 784.095281][T10989] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 784.576458][T10970] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 784.631001][T10987] ipip0: entered promiscuous mode [ 784.637217][T10987] ipip0: entered allmulticast mode [ 786.767028][T11007] net_ratelimit: 12 callbacks suppressed [ 786.767047][T11007] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 793.661249][T11045] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 794.823359][T11056] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 798.195496][T11081] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 798.513069][T11084] wlan0 speed is unknown, defaulting to 1000 [ 798.522618][T11084] wlan0 speed is unknown, defaulting to 1000 [ 798.537591][T11084] wlan0 speed is unknown, defaulting to 1000 [ 798.632546][T11084] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 799.719179][T11084] wlan0 speed is unknown, defaulting to 1000 [ 799.727473][T11084] wlan0 speed is unknown, defaulting to 1000 [ 799.734661][T11084] wlan0 speed is unknown, defaulting to 1000 [ 799.743093][T11084] wlan0 speed is unknown, defaulting to 1000 [ 806.752019][T11123] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 806.839515][T11124] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 807.410842][T11127] loop1: detected capacity change from 0 to 8192 [ 807.481613][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 809.723247][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.730992][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.773561][T11142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 811.563814][T11158] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 811.610654][T11159] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 812.613481][T11170] loop4: detected capacity change from 0 to 2048 [ 812.627289][T11170] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 816.743976][T11197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 820.224163][T11211] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 820.323674][T11212] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 823.378687][T11238] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 823.576106][T11246] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 829.132361][T11289] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 833.059773][T11334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 839.314665][T11379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 839.323126][T11379] IPv6: NLM_F_CREATE should be set when creating new route [ 839.330783][T11379] IPv6: NLM_F_CREATE should be set when creating new route [ 839.339271][T11379] IPv6: NLM_F_CREATE should be set when creating new route [ 840.404169][T11387] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 841.130747][T11389] loop1: detected capacity change from 0 to 16 [ 841.184924][T11389] erofs: (device loop1): mounted with root inode @ nid 36. [ 845.001901][T11419] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 847.141564][T11439] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 854.142237][T11478] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 864.615006][T11538] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 866.522180][T11552] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 868.396365][T11561] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 870.362179][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.368690][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.524881][T11641] bridge0: port 1(vlan2) entered blocking state [ 876.531843][T11641] bridge0: port 1(vlan2) entered disabled state [ 876.539348][T11641] vlan2: entered allmulticast mode [ 876.544693][T11641] bridge_slave_0: entered allmulticast mode [ 876.558739][T11641] vlan2: entered promiscuous mode [ 876.564103][T11641] bridge_slave_0: entered promiscuous mode [ 879.705064][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 881.576605][T11665] nbd: socks must be embedded in a SOCK_ITEM attr [ 882.403160][T11464] block nbd64: NBD_DISCONNECT [ 883.209663][T11685] binder: BINDER_SET_CONTEXT_MGR already set [ 883.216735][T11685] binder: 11679:11685 ioctl 4018620d 200000004a80 returned -16 [ 883.689602][T11464] udevd[11464]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 885.276562][T11707] loop1: detected capacity change from 0 to 256 [ 885.288285][T11707] exfat: Deprecated parameter 'utf8' [ 885.984725][T11707] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 886.023973][ T2983] Bluetooth: hci2: Frame reassembly failed (-84) [ 888.035905][T11713] Bluetooth: hci2: command 0x1003 tx timeout [ 888.049333][ T9302] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 888.191769][T11737] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 890.237091][T11750] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 893.184402][T11780] NILFS (nullb0): couldn't find nilfs on the device [ 893.286939][T11779] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 895.392780][T11791] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 896.691201][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 897.981610][T11787] tmpfs: Bad value for 'mpol' [ 901.445201][T11830] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 903.980987][T11836] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 904.861962][T11841] random: crng reseeded on system resumption [ 907.283828][T11857] loop1: detected capacity change from 0 to 1024 [ 907.696580][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1348'. [ 912.483172][T11882] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 912.537830][T11880] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 913.948900][T11890] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 914.579795][T11894] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 919.538370][T11920] IPv6: NLM_F_REPLACE set, but no existing node found! [ 919.905959][T11930] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 921.819779][T11935] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 924.835974][T11958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 925.711326][T11963] Error parsing options; rc = [-22] [ 925.760041][T11963] loop1: detected capacity change from 0 to 64 [ 929.524164][T11999] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 929.662947][T11998] loop1: detected capacity change from 0 to 128 [ 930.458860][T11998] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 930.478398][T11998] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 930.814370][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 932.003310][T12014] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 933.425461][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.431906][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.885138][T12019] (syz.1.1389,12019,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 935.000024][T12034] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 940.030173][T12054] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 940.738424][T12053] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 940.782525][T12055] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 943.067947][T12076] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 944.962684][T12093] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 945.275480][T12098] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 946.122527][T12113] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 948.012220][T12122] tmpfs: Bad value for 'mpol' [ 949.803109][T12134] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 950.800332][T12144] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 960.255509][T12181] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 961.974455][T12202] loop4: detected capacity change from 0 to 256 [ 961.985683][T12202] exfat: Deprecated parameter 'utf8' [ 962.434588][T12204] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 963.117752][T12202] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 963.293300][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 963.330887][T12198] nbd: socks must be embedded in a SOCK_ITEM attr [ 963.658264][T12208] udevd[12208]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 964.005507][T12164] udevd[12164]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 966.590592][T12247] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 970.702250][T12286] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 970.802774][T12289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1455'. [ 973.957887][T12305] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 974.939081][T12312] loop1: detected capacity change from 0 to 512 [ 974.955927][T12312] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 974.992414][T12312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 975.001255][T12312] System zones: 1-12 [ 975.029226][T12312] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 975.074614][T12312] EXT4-fs (loop1): 1 truncate cleaned up [ 975.081674][T12312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.611406][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.714139][T12334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 979.848563][T12343] loop1: detected capacity change from 0 to 2048 [ 979.862658][T12343] UDF-fs: bad mount option "noadinicb@&°"w¤8¬êˆx7" or missing value [ 981.421510][T12164] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 981.862686][T12353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 984.070721][T12363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 984.078018][T12363] IPv6: NLM_F_CREATE should be set when creating new route [ 984.085295][T12363] IPv6: NLM_F_CREATE should be set when creating new route [ 984.092522][T12363] IPv6: NLM_F_CREATE should be set when creating new route [ 985.412285][T12386] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 985.623930][T12387] ipip0: entered promiscuous mode [ 985.629078][T12387] ipip0: entered allmulticast mode [ 986.633397][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 988.209020][T12403] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 990.422286][T12431] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 991.529913][T12444] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 991.724817][T12445] ipip0: entered promiscuous mode [ 991.730052][T12445] ipip0: entered allmulticast mode [ 998.660765][T12484] loop4: detected capacity change from 0 to 512 [ 998.700498][T12484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 998.814039][T12492] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 999.463136][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.469617][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.493349][T12484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 999.501932][T12484] System zones: 1-12 [ 999.520442][T12495] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 999.550618][T12484] EXT4-fs (loop4): 1 truncate cleaned up [ 999.566120][T12484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.501802][ T8266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.198616][T12550] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1008.589723][T12565] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 1011.280445][T12582] loop4: detected capacity change from 0 to 8192 [ 1012.665068][T12587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1524'. [ 1012.913633][T12582] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1013.854598][T12599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1527'. [ 1014.961441][T12609] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1017.308520][T12623] loop1: detected capacity change from 0 to 256 [ 1017.319528][T12623] exfat: Deprecated parameter 'utf8' [ 1017.372768][T12623] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1017.941791][T12628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1535'. [ 1018.809391][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1536'. [ 1020.285487][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1020.383740][T12646] o2cb: This node has not been configured. [ 1020.389601][T12646] o2cb: Cluster check failed. Fix errors before retrying. [ 1020.396853][T12646] (syz.2.1539,12646,0):user_dlm_register:674 ERROR: status = -22 [ 1020.404658][T12646] (syz.2.1539,12646,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1021.135299][ T5841] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1021.146126][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.167559][ T5841] usb 2-1: config 0 descriptor?? [ 1021.194251][ T5841] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1021.846556][ T5841] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 1022.632606][T12671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1022.677975][ T5841] gspca_cpia1: usb_control_msg 02, error -71 [ 1022.684285][ T5841] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1022.699345][ T5841] usb 2-1: USB disconnect, device number 8 [ 1024.653404][T12683] loop1: detected capacity change from 0 to 256 [ 1024.708998][T12683] exfat: Deprecated parameter 'utf8' [ 1027.016937][T12683] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1027.822338][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1549'. [ 1028.873696][T12695] loop4: detected capacity change from 0 to 128 [ 1030.502153][T12695] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1031.835314][T12695] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.938662][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 1032.070507][ T8266] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1032.555105][T12712] loop1: detected capacity change from 0 to 8192 [ 1032.633214][T12712] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1033.208288][T12725] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1033.483587][T12729] loop1: detected capacity change from 0 to 512 [ 1033.995650][T12729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1034.008455][T12729] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.143364][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 1036.250923][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1039.104181][T12758] loop1: detected capacity change from 0 to 256 [ 1039.393754][T12164] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1039.888419][T12766] netlink: 'syz.1.1566': attribute type 2 has an invalid length. [ 1041.588610][T12775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1042.415136][T12784] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 1043.050244][T12789] loop1: detected capacity change from 0 to 512 [ 1043.061421][T12789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1043.111919][T12789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1043.127220][T12789] System zones: 1-12 [ 1043.141857][T12789] EXT4-fs (loop1): 1 truncate cleaned up [ 1043.150268][T12789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.613486][T12797] xt_connbytes: Forcing CT accounting to be enabled [ 1044.521430][T12801] loop4: detected capacity change from 0 to 128 [ 1045.176057][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.178342][T12819] NILFS (nullb0): couldn't find nilfs on the device [ 1049.478154][T12825] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1049.586338][T12829] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 1050.686945][T12841] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1052.720147][T12855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1586'. [ 1053.436851][T12853] loop4: detected capacity change from 0 to 512 [ 1053.450110][T12853] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1053.515118][T12853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1053.625208][T12853] System zones: 1-12 [ 1054.457305][T12853] EXT4-fs (loop4): 1 truncate cleaned up [ 1054.465232][T12853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.661233][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 1054.670660][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 1055.003999][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 1057.324041][T12892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1595'. [ 1063.923077][ T8266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.736250][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.742734][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.816120][T12936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1607'. [ 1067.503422][T12942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1609'. [ 1072.261354][T12993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'. [ 1073.796124][T13005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1620'. [ 1073.901974][T13006] netlink: 'syz.1.1621': attribute type 3 has an invalid length. [ 1073.909867][T13006] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 1075.070078][T13018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1077.148032][T13036] loop4: detected capacity change from 0 to 8 [ 1077.637445][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1628'. [ 1077.743388][T13029] SQUASHFS error: Failed to read block 0x29b: -5 [ 1077.750192][T13029] SQUASHFS error: Unable to read metadata cache entry [299] [ 1080.927113][T13059] loop1: detected capacity change from 0 to 128 [ 1085.507158][T13086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1637'. [ 1087.625841][T13096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1638'. [ 1088.565226][T13103] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1088.576134][T13103] VFS: Can't find a romfs filesystem on dev nullb0. [ 1088.576134][T13103] [ 1089.580946][T13111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1642'. [ 1091.106746][T13105] siw: device registration error -23 [ 1091.126600][T13105] smc: removing ib device syz2 [ 1091.552981][T13105] ------------[ cut here ]------------ [ 1091.558469][T13105] WARNING: CPU: 0 PID: 13105 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x42/0x50 [ 1091.569297][T13105] Modules linked in: [ 1091.573257][T13105] CPU: 0 PID: 13105 Comm: syz.3.1639 Not tainted syzkaller #0 [ 1091.580710][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1091.590807][T13105] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 1091.596309][T13105] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 76 05 fa 48 83 3b 00 75 07 e8 35 37 ad f9 5b c3 e8 2e 37 ad f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 1091.615972][T13105] RSP: 0018:ffffc90004c67148 EFLAGS: 00010246 [ 1091.622028][T13105] RAX: ffffffff87d9f4c2 RBX: ffff88807c9bd298 RCX: 0000000000080000 [ 1091.630016][T13105] RDX: ffffc9000dd2a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1091.638029][T13105] RBP: 0000000000000002 R08: ffff88807c9bc743 R09: 1ffff1100f9378e8 [ 1091.645994][T13105] R10: dffffc0000000000 R11: ffffed100f9378e9 R12: dffffc0000000000 [ 1091.654163][T13105] R13: 0000000000000008 R14: ffffffff87d833c0 R15: dffffc0000000000 [ 1091.662176][T13105] FS: 00007f0c7d0a16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1091.671139][T13105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1091.677715][T13105] CR2: 00007f809994d000 CR3: 0000000050162000 CR4: 00000000003506f0 [ 1091.685735][T13105] Call Trace: [ 1091.689007][T13105] [ 1091.692026][T13105] rxe_dealloc+0x33/0x100 [ 1091.696354][T13105] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 1091.703154][T13105] ib_dealloc_device+0x4e/0x1f0 [ 1091.708003][T13105] __ib_unregister_device+0x120/0x170 [ 1091.713419][T13105] ib_unregister_device_and_put+0xb8/0xf0 [ 1091.719133][T13105] nldev_dellink+0x293/0x320 [ 1091.723788][T13105] ? nldev_newlink+0x610/0x610 [ 1091.728545][T13105] ? __lock_acquire+0x1347/0x7d40 [ 1091.733655][T13105] ? apparmor_capable+0x137/0x1a0 [ 1091.738675][T13105] ? bpf_lsm_capable+0x9/0x10 [ 1091.743346][T13105] ? security_capable+0x89/0xb0 [ 1091.748249][T13105] ? nldev_newlink+0x610/0x610 [ 1091.753028][T13105] rdma_nl_rcv+0x6e3/0xa20 [ 1091.757518][T13105] ? rdma_nl_net_init+0x190/0x190 [ 1091.762559][T13105] ? __lock_acquire+0x7d40/0x7d40 [ 1091.767644][T13105] ? net_generic+0x1e/0x240 [ 1091.772144][T13105] ? netlink_deliver_tap+0x2e/0x1b0 [ 1091.777371][T13105] netlink_unicast+0x751/0x8d0 [ 1091.782234][T13105] netlink_sendmsg+0x8d0/0xbf0 [ 1091.787040][T13105] ? netlink_getsockopt+0x590/0x590 [ 1091.792240][T13105] ? aa_sock_msg_perm+0x94/0x150 [ 1091.797183][T13105] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1091.802509][T13105] ? security_socket_sendmsg+0x80/0xa0 [ 1091.807979][T13105] ? netlink_getsockopt+0x590/0x590 [ 1091.813214][T13105] ____sys_sendmsg+0x5ba/0x960 [ 1091.817976][T13105] ? __asan_memset+0x22/0x40 [ 1091.822679][T13105] ? __sys_sendmsg_sock+0x30/0x30 [ 1091.827700][T13105] ? __import_iovec+0x5f2/0x850 [ 1091.832613][T13105] ? import_iovec+0x73/0xa0 [ 1091.837110][T13105] ___sys_sendmsg+0x2a6/0x360 [ 1091.841830][T13105] ? __sys_sendmsg+0x2a0/0x2a0 [ 1091.846625][T13105] __se_sys_sendmsg+0x1c2/0x2b0 [ 1091.851540][T13105] ? __x64_sys_sendmsg+0x80/0x80 [ 1091.856487][T13105] ? lockdep_hardirqs_on+0x98/0x150 [ 1091.861711][T13105] do_syscall_64+0x55/0xb0 [ 1091.866124][T13105] ? clear_bhb_loop+0x40/0x90 [ 1091.870797][T13105] ? clear_bhb_loop+0x40/0x90 [ 1091.875514][T13105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1091.881407][T13105] RIP: 0033:0x7f0c7c19ce59 [ 1091.885840][T13105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.905644][T13105] RSP: 002b:00007f0c7d0a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.914054][T13105] RAX: ffffffffffffffda RBX: 00007f0c7c415fa0 RCX: 00007f0c7c19ce59 [ 1091.922049][T13105] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1091.930050][T13105] RBP: 00007f0c7c232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1091.938072][T13105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.946040][T13105] R13: 00007f0c7c416038 R14: 00007f0c7c415fa0 R15: 00007fffb89b1038 [ 1091.954240][T13105] [ 1091.957254][T13105] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1091.964522][T13105] CPU: 0 PID: 13105 Comm: syz.3.1639 Not tainted syzkaller #0 [ 1091.971968][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1091.982012][T13105] Call Trace: [ 1091.985284][T13105] [ 1091.988203][T13105] dump_stack_lvl+0x18c/0x250 [ 1091.992880][T13105] ? show_regs_print_info+0x20/0x20 [ 1091.998071][T13105] ? load_image+0x420/0x420 [ 1092.002579][T13105] panic+0x2dc/0x730 [ 1092.006474][T13105] ? bpf_jit_dump+0xd0/0xd0 [ 1092.010976][T13105] __warn+0x2e0/0x470 [ 1092.014952][T13105] ? rxe_pool_cleanup+0x42/0x50 [ 1092.019815][T13105] ? rxe_pool_cleanup+0x42/0x50 [ 1092.024653][T13105] report_bug+0x2be/0x4f0 [ 1092.028986][T13105] ? rxe_pool_cleanup+0x42/0x50 [ 1092.033840][T13105] ? rxe_pool_cleanup+0x42/0x50 [ 1092.038685][T13105] ? rxe_pool_cleanup+0x44/0x50 [ 1092.043530][T13105] handle_bug+0xcf/0x120 [ 1092.047767][T13105] exc_invalid_op+0x1a/0x50 [ 1092.052259][T13105] asm_exc_invalid_op+0x1a/0x20 [ 1092.057103][T13105] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 1092.062555][T13105] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 76 05 fa 48 83 3b 00 75 07 e8 35 37 ad f9 5b c3 e8 2e 37 ad f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 1092.082155][T13105] RSP: 0018:ffffc90004c67148 EFLAGS: 00010246 [ 1092.088212][T13105] RAX: ffffffff87d9f4c2 RBX: ffff88807c9bd298 RCX: 0000000000080000 [ 1092.096176][T13105] RDX: ffffc9000dd2a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1092.104142][T13105] RBP: 0000000000000002 R08: ffff88807c9bc743 R09: 1ffff1100f9378e8 [ 1092.112106][T13105] R10: dffffc0000000000 R11: ffffed100f9378e9 R12: dffffc0000000000 [ 1092.120082][T13105] R13: 0000000000000008 R14: ffffffff87d833c0 R15: dffffc0000000000 [ 1092.128051][T13105] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 1092.134822][T13105] ? rxe_pool_cleanup+0x42/0x50 [ 1092.139672][T13105] ? rxe_pool_cleanup+0x42/0x50 [ 1092.144515][T13105] rxe_dealloc+0x33/0x100 [ 1092.148836][T13105] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 1092.155592][T13105] ib_dealloc_device+0x4e/0x1f0 [ 1092.160441][T13105] __ib_unregister_device+0x120/0x170 [ 1092.165807][T13105] ib_unregister_device_and_put+0xb8/0xf0 [ 1092.171533][T13105] nldev_dellink+0x293/0x320 [ 1092.176135][T13105] ? nldev_newlink+0x610/0x610 [ 1092.180893][T13105] ? __lock_acquire+0x1347/0x7d40 [ 1092.185947][T13105] ? apparmor_capable+0x137/0x1a0 [ 1092.190968][T13105] ? bpf_lsm_capable+0x9/0x10 [ 1092.195640][T13105] ? security_capable+0x89/0xb0 [ 1092.200483][T13105] ? nldev_newlink+0x610/0x610 [ 1092.205240][T13105] rdma_nl_rcv+0x6e3/0xa20 [ 1092.209662][T13105] ? rdma_nl_net_init+0x190/0x190 [ 1092.214688][T13105] ? __lock_acquire+0x7d40/0x7d40 [ 1092.219700][T13105] ? net_generic+0x1e/0x240 [ 1092.224185][T13105] ? netlink_deliver_tap+0x2e/0x1b0 [ 1092.229370][T13105] netlink_unicast+0x751/0x8d0 [ 1092.234127][T13105] netlink_sendmsg+0x8d0/0xbf0 [ 1092.238878][T13105] ? netlink_getsockopt+0x590/0x590 [ 1092.244064][T13105] ? aa_sock_msg_perm+0x94/0x150 [ 1092.248995][T13105] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1092.254269][T13105] ? security_socket_sendmsg+0x80/0xa0 [ 1092.259720][T13105] ? netlink_getsockopt+0x590/0x590 [ 1092.264912][T13105] ____sys_sendmsg+0x5ba/0x960 [ 1092.269676][T13105] ? __asan_memset+0x22/0x40 [ 1092.274254][T13105] ? __sys_sendmsg_sock+0x30/0x30 [ 1092.279275][T13105] ? __import_iovec+0x5f2/0x850 [ 1092.284131][T13105] ? import_iovec+0x73/0xa0 [ 1092.288647][T13105] ___sys_sendmsg+0x2a6/0x360 [ 1092.293332][T13105] ? __sys_sendmsg+0x2a0/0x2a0 [ 1092.298242][T13105] __se_sys_sendmsg+0x1c2/0x2b0 [ 1092.303097][T13105] ? __x64_sys_sendmsg+0x80/0x80 [ 1092.308034][T13105] ? lockdep_hardirqs_on+0x98/0x150 [ 1092.313230][T13105] do_syscall_64+0x55/0xb0 [ 1092.317640][T13105] ? clear_bhb_loop+0x40/0x90 [ 1092.322311][T13105] ? clear_bhb_loop+0x40/0x90 [ 1092.326985][T13105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1092.332874][T13105] RIP: 0033:0x7f0c7c19ce59 [ 1092.337280][T13105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.356881][T13105] RSP: 002b:00007f0c7d0a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1092.365285][T13105] RAX: ffffffffffffffda RBX: 00007f0c7c415fa0 RCX: 00007f0c7c19ce59 [ 1092.373244][T13105] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1092.381207][T13105] RBP: 00007f0c7c232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1092.389169][T13105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.397152][T13105] R13: 00007f0c7c416038 R14: 00007f0c7c415fa0 R15: 00007fffb89b1038 [ 1092.405135][T13105] [ 1092.408525][T13105] Kernel Offset: disabled [ 1092.412942][T13105] Rebooting in 86400 seconds..