last executing test programs: 9m15.781815536s ago: executing program 32 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000340)=0xc5) 7m22.834553373s ago: executing program 33 (id=314): userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7m19.155125404s ago: executing program 6 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') 7m17.022159237s ago: executing program 6 (id=332): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b"], 0x120}}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r2], 0xfe33) 7m15.885972382s ago: executing program 6 (id=336): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r1, &(0x7f0000004000)=ANY=[], 0x1358) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x90) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r3) read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) 7m12.943875333s ago: executing program 6 (id=345): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) open(&(0x7f0000000000)='./file0\x00', 0x4040, 0x24) 7m11.271959247s ago: executing program 6 (id=352): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x265, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 7m9.004397972s ago: executing program 6 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/sync_on_suspend\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='platform\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='freeze\n', 0x7) close(r3) 7m3.229813116s ago: executing program 3 (id=363): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 7m1.25485858s ago: executing program 3 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f", @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 6m59.95394108s ago: executing program 3 (id=367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6m59.412076129s ago: executing program 3 (id=369): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x4080044) ptrace(0x10, r1) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0x5, &(0x7f00000000c0)={0x19, 0x40, 0x7}) 6m57.874542899s ago: executing program 3 (id=371): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6m52.028394835s ago: executing program 34 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/sync_on_suspend\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='platform\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='freeze\n', 0x7) close(r3) 6m51.534101285s ago: executing program 3 (id=377): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x11c) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0) 6m50.726940205s ago: executing program 35 (id=377): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x11c) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0) 6m5.618728343s ago: executing program 2 (id=453): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) listen(r0, 0x9) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r3, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 6m5.308531906s ago: executing program 2 (id=454): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) 6m4.157883171s ago: executing program 2 (id=455): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r5, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350073797a5f74756e000000000077eef46608000a00", @ANYRES32=r1], 0x3c}}, 0x8000) 6m2.688883077s ago: executing program 2 (id=458): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$eJzs3M1vG0UbAPBnN7HbvO3bhFK+Wj4CBVEhSPoF9MABEEgcioQEBzhaSahK3YKaINEqEimHckIIiTviyL/ACS4IcQGJK9yrShXqhZaT0dq7iZ1s7Ka1Y8C/n+T2md21Zx7PjjO7EyeAkTWd/ZNE7I6I3yJislXsPGC69d+N68tzN68vzyXRaLz5R9I87s/ry3PFocXzdrUXIokDJfUuXrh4plavL5zPy7NLZz+YXbxw8ZnTZ6v5phPHjx15/rmjz/Ylz12R5tFr73zx+snPOvJfl0efTHfb+USj0efqhuv/bfH4ENvB1ozl/VVpjv/JGGvrvcl49ZPVwsdDaiAwMI1Go7Fr890rDeA/LInOsiEPo6L4QV9c/5ZdB784sNnH8F17qXUBlOV9I3+09oyv3jGorLu+7afpiHh75a+vskcM5j4EAECH77L5z9PZbGd5Lpt7rM0/0ri37bg9+drQVETcFRF7I+LuOBf7IuKeiOax90XE/Vuou9q5SNKcZm6c/6RX7yjBHrL53wv52lbn/K+Y/cXUWLN0oVWISvLu6frC4fw9ORSVHVn5SJc6vn/l188329c+/8seWf3FXDBvx9XxHZ3Pma8t1W4/407XLkXsHy/LP1ldCUgi4oGI2F/2AmnvOk4/9c2Dm+2bnumVfxd9WGhqfB3xZKv/V2Jd/oWkc32ydmrh1MK5oyeK9cnZnVFfODxbnBUb/fTL5TfKtqe31P+DlfX//0rP/9X8p5L29drFrddx+fdPN72mma7kwRbO/5XaUq2avNWMi8Xij2pLS+ePRFSTk61Gt28/uvbcolwcn+V/6GD5+N8ba+/EgYjITuKHIuLhiHgk77tHI+KxiDjYJf8fX378vfXbJor8u/d/tcvL9kWW//yW+n8tqEbnlrTkmCwYO/PDtx2VTq2Fef43u3/+HW9Gh/Itt/L5t7EV5cGdvn8AAADwb5BGxO5I0pnVOE1nZlq/w7+vtfSd+fDcfOs7AlNRSYs7XZNt90OL3xFolS9FRKOtXF84FmnzvvGXYxPN8szc+/X5oWUNRP5dnbLxn7kyNuzWAQPnC1swuox/GF1dx39l+9oBbL8N47/rmN8x0LYA26vk5//EMNoBbL+y+b+/9wOjYd34t+wHI8T9fxhdxj+MLuMfRtLiRPT+knzXoHil23x6r2Ay4k5beGZn2a6fS/+mQf+CqAzqlf8ZQaQDr6I62FNrYEGStXlP9D74ytCbunkwvM8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfvo7AAD//1yDywo=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) getegid() mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 6m0.858152363s ago: executing program 2 (id=462): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m59.661903229s ago: executing program 2 (id=465): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r2, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="46513ae8f118ac7fa95223442419d9e0", 0x10}], 0x1, 0x0, 0x0, 0x24018000}], 0x1, 0x404c0d1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 5m58.566428253s ago: executing program 36 (id=465): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r2, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="46513ae8f118ac7fa95223442419d9e0", 0x10}], 0x1, 0x0, 0x0, 0x24018000}], 0x1, 0x404c0d1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 5m45.325623226s ago: executing program 4 (id=483): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') syz_fuse_handle_req(r3, &(0x7f0000000cc0)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0xffffffffffffffff, 0x1) 5m43.808550627s ago: executing program 4 (id=486): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) close(r3) syz_usbip_server_init(0x3) 5m41.511395932s ago: executing program 4 (id=488): shutdown(0xffffffffffffffff, 0x2) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 5m40.310115811s ago: executing program 4 (id=489): semget$private(0x0, 0x4, 0xc3) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@quota}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5b7, &(0x7f0000000200)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1d8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) pwrite64(r1, 0x0, 0x0, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 5m38.312653938s ago: executing program 4 (id=492): shutdown(0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 5m36.439848452s ago: executing program 4 (id=495): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/131) 5m35.993695733s ago: executing program 37 (id=495): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/131) 4m32.288096711s ago: executing program 1 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 4m30.414269326s ago: executing program 1 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r3, 0x40104d04, &(0x7f0000000900)) ptrace$pokeuser(0x6, r2, 0x358, 0x0) 4m28.820733677s ago: executing program 1 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf95}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r1], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 4m27.840020859s ago: executing program 1 (id=557): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CEC_G_MODE(r2, 0x80046108, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) 4m25.203523039s ago: executing program 1 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000740)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) 4m23.167117182s ago: executing program 1 (id=563): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x883c1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x401, 0x1, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 4m7.527680302s ago: executing program 38 (id=563): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x883c1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x401, 0x1, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222000101008032090400000103000000092111010001221700070581034000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 4m4.966847288s ago: executing program 7 (id=582): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x1}, 0x8) mknod(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, 0x0, 0x0) 4m2.881768148s ago: executing program 7 (id=587): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x2, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r2, 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x40000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x3) 3m59.100040212s ago: executing program 7 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee44", 0x13, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 3m56.64138257s ago: executing program 7 (id=596): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$autofs(0xffffff9c, 0x0, 0x10000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}], 0x0, 0x0, 0x0}) 3m46.311508468s ago: executing program 7 (id=607): socket(0x11, 0xa, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) pipe(&(0x7f00000007c0)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m42.744835722s ago: executing program 7 (id=613): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xffff, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m26.562538486s ago: executing program 39 (id=613): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xffff, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m10.569998273s ago: executing program 5 (id=659): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x2400, 0x5c, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x50) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x6, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r2, r2, 0x0, 0x1002000ff) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) 3m8.371189769s ago: executing program 5 (id=661): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m0.771037343s ago: executing program 5 (id=668): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000001a40)=ANY=[], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2m57.139760652s ago: executing program 5 (id=675): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) gettid() sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 2m56.174695399s ago: executing program 5 (id=677): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000), 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) ftruncate(r2, 0x100000001) 2m51.573786642s ago: executing program 5 (id=681): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x80, 0x80) read(r3, &(0x7f0000000300), 0x1) read(r3, &(0x7f0000000400), 0x120) 2m49.87970848s ago: executing program 40 (id=681): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x80, 0x80) read(r3, &(0x7f0000000300), 0x1) read(r3, &(0x7f0000000400), 0x120) 13.59284518s ago: executing program 9 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040810) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x9) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r3, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0xfdef}, {0x0}, {0x0}], 0x3) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 12.21787844s ago: executing program 9 (id=855): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='00:02\n\x00', 0x6) write(r1, &(0x7f00000001c0)='00:03\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='disable\n\x00', 0x8) write(r2, &(0x7f0000000280)='auto\n\x00', 0x5) write(r2, &(0x7f00000002c0)='fill\n\x00', 0x5) write(r2, &(0x7f0000000300)='activate\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='disable\n\x00', 0x8) write(r3, &(0x7f00000003c0)='auto\n\x00', 0x5) write(r3, &(0x7f0000000440)='activate\n\x00', 0x9) r4 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='00:02\n\x00', 0x6) write(r4, &(0x7f0000000500)='00:03\n\x00', 0x6) 11.945614973s ago: executing program 8 (id=856): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x4, 0x10001, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) getdents64(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) symlink(0x0, 0x0) fremovexattr(r1, &(0x7f0000000100)=@random={'user.', 'memory.\x86vents.loccl\x007\xa1\x00\xa9\xb7\xd5\x95\xf4v\xeb\xba2aJ\xdd\xda\x8a\xdfu\xc0\x98 \xc2q:\xfc\xbd\xd6#\xcc\xe9\xf6\x9e\x12\xf4\x89\xb1\xf2\xec\xb6\x13\xaa/\x17\x9d\xdf\xab\x05Z\xe9\xa9!1L\xdb\x8c\xb2\x1e\xe1\xab\xbdV\x9cy\vT\xb9\xff\x13\xfc\xce\x0e\xcd\x04\x82\x05\x13\x98mZd\x0e\xf3]%\xdd\b%\x13\xe3\xc9'}) 11.200526084s ago: executing program 0 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) 9.795763964s ago: executing program 0 (id=858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x1e, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x1010002}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) 9.573779587s ago: executing program 8 (id=859): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x52a1, 0x1e}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608}) close_range(r8, 0xffffffffffffffff, 0x0) 8.683477099s ago: executing program 0 (id=860): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) ioctl(r2, 0x8b1a, &(0x7f0000000040)) 8.429774544s ago: executing program 8 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 8.054511005s ago: executing program 9 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.14659933s ago: executing program 8 (id=863): unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x220, 0x258, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'caif0\x00', {0xfffffffffffffffc, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0xd}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x3, 0x4, 0x5}, {0x4, 0x2, 0x4}, 0x80000000, 0x8001}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') 5.181818687s ago: executing program 9 (id=864): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x5338}, {0x0}], 0x10000000000000f0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0xb0}, 0x0) openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004010, &(0x7f00000000c0)=ANY=[], 0x3, 0x204, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000100)={0x4, 0xfffffffffffffffd, 0x1, 0x7fff}) 5.046311279s ago: executing program 8 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 2.854207195s ago: executing program 8 (id=866): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="b13c376fdd66a7d639c02544bf04bd36fa95508917a987b4dc2143ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f59fe388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c39b4eeb2f55a664af0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a32d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a58b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000d40)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x44004000) sendmsg$NFT_BATCH(r2, 0x0, 0x24000840) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x1, r0, 0x4}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file3\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c00073bc934e6304a61a825679f7f47435e772a77a77e69b5db166a9f7745d7245b08574a58340594"], 0x1, 0x152b, &(0x7f0000002f80)="$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") fstat(0xffffffffffffffff, 0x0) 2.853788123s ago: executing program 0 (id=867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 2.819748785s ago: executing program 9 (id=868): socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munlockall() 1.203808327s ago: executing program 0 (id=869): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) r4 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 271.671502ms ago: executing program 9 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000200)=[@exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x200, 0xa, "2ba55600"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 0s ago: executing program 0 (id=871): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)) read$dsp(r1, &(0x7f0000000280)=""/55, 0x37) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'pim6reg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000cb90e2232a4427c68d35f4c7d85705b6088e7cfbb561d969a65c88390acf6d5f41e775ed0fc145444ebdcbfdf277796d5669501ca8ddf4a171640f9578751495eeef7e41ae62cb2de836c430b3209126e9a8e3083bcde7b430cebef551c8b5af65080f9d0c365447110d0a2450c331a25e2ba977028fc9ad805955d24d48bc7d18"], 0x64}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x1001, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2800}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): p4: detected capacity change from 0 to 1024 [ 328.253390][ T8245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.253430][ T8245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.765517][ T4931] Bluetooth: hci7: command tx timeout [ 329.338767][ T8245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.338914][ T8245] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.658587][ T8024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.767493][ T8024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.777976][ T5616] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /106/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 329.802487][ T5616] EXT4-fs (loop4): Remounting filesystem read-only [ 329.986451][ T7468] hsr_slave_0: left promiscuous mode [ 329.988059][ T7468] hsr_slave_1: left promiscuous mode [ 330.002118][ T7468] veth1_macvtap: left promiscuous mode [ 330.002160][ T7468] veth0_macvtap: left promiscuous mode [ 330.002274][ T7468] veth1_vlan: left promiscuous mode [ 330.002349][ T7468] veth0_vlan: left promiscuous mode [ 330.851516][ T5276] 8021q: adding VLAN 0 to HW filter on device eth16 [ 330.901922][ T8024] team0: Port device team_slave_0 added [ 330.976374][ T8024] team0: Port device team_slave_1 added [ 331.186096][ T8270] FAULT_INJECTION: forcing a failure. [ 331.186096][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 331.186141][ T8270] CPU: 1 UID: 0 PID: 8270 Comm: syz.1.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.186177][ T8270] Tainted: [L]=SOFTLOCKUP [ 331.186187][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 331.186203][ T8270] Call Trace: [ 331.186213][ T8270] [ 331.186224][ T8270] dump_stack_lvl+0xe8/0x150 [ 331.186269][ T8270] should_fail_ex+0x410/0x560 [ 331.186307][ T8270] should_failslab+0xa8/0x100 [ 331.186346][ T8270] __kmalloc_cache_noprof+0xa3/0x600 [ 331.186376][ T8270] ? tipc_nametbl_insert_publ+0x64/0x13d0 [ 331.186416][ T8270] ? tipc_nametbl_insert_publ+0x64/0x13d0 [ 331.186466][ T8270] tipc_nametbl_insert_publ+0x64/0x13d0 [ 331.186510][ T8270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.186543][ T8270] ? do_raw_spin_lock+0x12b/0x2f0 [ 331.186587][ T8270] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 331.186627][ T8270] ? tipc_net+0x45/0x270 [ 331.186664][ T8270] ? tipc_net+0x45/0x270 [ 331.186708][ T8270] ? tipc_nametbl_publish+0x9f/0x270 [ 331.186753][ T8270] tipc_nametbl_publish+0x121/0x270 [ 331.186801][ T8270] tipc_sk_publish+0x1cd/0x430 [ 331.186850][ T8270] ? __pfx_tipc_sk_publish+0x10/0x10 [ 331.186894][ T8270] ? tipc_nametbl_build_group+0x4ce/0x500 [ 331.186934][ T8270] ? tipc_nametbl_build_group+0x2e/0x500 [ 331.186986][ T8270] tipc_sk_join+0x3b3/0x6a0 [ 331.187031][ T8270] ? __pfx_tipc_sk_join+0x10/0x10 [ 331.187060][ T8270] ? tipc_setsockopt+0x731/0x9a0 [ 331.187094][ T8270] ? __local_bh_enable_ip+0xd6/0x140 [ 331.187131][ T8270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.187169][ T8270] tipc_setsockopt+0x73e/0x9a0 [ 331.187207][ T8270] ? __pfx_tipc_setsockopt+0x10/0x10 [ 331.187238][ T8270] ? aa_sock_opt_perm+0x142/0x1e0 [ 331.187279][ T8270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.187311][ T8270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.187344][ T8270] ? __pfx_tipc_setsockopt+0x10/0x10 [ 331.187376][ T8270] do_sock_setsockopt+0x17c/0x1b0 [ 331.187420][ T8270] __x64_sys_setsockopt+0x13d/0x1b0 [ 331.187496][ T8270] do_syscall_64+0x166/0x520 [ 331.187531][ T8270] ? trace_irq_disable+0x3b/0x140 [ 331.187560][ T8270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.187595][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.187623][ T8270] RIP: 0033:0x7fe87a39e159 [ 331.187647][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.187671][ T8270] RSP: 002b:00007fe87b21a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.187698][ T8270] RAX: ffffffffffffffda RBX: 00007fe87a625fa0 RCX: 00007fe87a39e159 [ 331.187719][ T8270] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 331.187736][ T8270] RBP: 00007fe87a43506b R08: 0000000000000010 R09: 0000000000000000 [ 331.187753][ T8270] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 331.187770][ T8270] R13: 00007fe87a626038 R14: 00007fe87a625fa0 R15: 00007ffe924c7058 [ 331.187810][ T8270] [ 331.224326][ T5758] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 331.531443][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.531667][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.531832][ T8074] bridge_slave_0: entered allmulticast mode [ 331.533863][ T8074] bridge_slave_0: entered promiscuous mode [ 331.552368][ T8244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 331.623308][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.623332][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.623367][ T8024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.630625][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.630646][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.630681][ T8024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.799950][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.800063][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.800229][ T8074] bridge_slave_1: entered allmulticast mode [ 331.826784][ T8074] bridge_slave_1: entered promiscuous mode [ 332.032541][ T8024] hsr_slave_0: entered promiscuous mode [ 332.033828][ T8024] hsr_slave_1: entered promiscuous mode [ 332.035649][ T8024] debugfs: 'hsr0' already exists in 'hsr' [ 332.035674][ T8024] Cannot create hsr debugfs directory [ 332.076626][ T7468] IPVS: stop unused estimator thread 0... [ 332.109804][ T8074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.128688][ T8074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.506054][ T7816] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 333.188524][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.198472][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.199397][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.200472][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.201335][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.279278][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.391060][ T8074] team0: Port device team_slave_0 added [ 333.392290][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.392514][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.392716][ T8125] bridge_slave_0: entered allmulticast mode [ 333.422974][ T8125] bridge_slave_0: entered promiscuous mode [ 333.442750][ T7816] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 333.455804][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.576930][ T7468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.641955][ T8074] team0: Port device team_slave_1 added [ 333.673413][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.673540][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.673717][ T8125] bridge_slave_1: entered allmulticast mode [ 333.680391][ T8125] bridge_slave_1: entered promiscuous mode [ 333.729487][ T7816] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 333.742196][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.828504][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.832130][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.930118][ T7816] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 333.940312][ T7816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.958478][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.958501][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.958559][ T8074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.960407][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.960423][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.960448][ T8074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.080742][ T7468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.137995][ T8125] team0: Port device team_slave_0 added [ 334.162321][ T8125] team0: Port device team_slave_1 added [ 334.236906][ T7468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.291561][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.291584][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.291619][ T8125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.367651][ T8074] hsr_slave_0: entered promiscuous mode [ 334.368853][ T8074] hsr_slave_1: entered promiscuous mode [ 334.369709][ T8074] debugfs: 'hsr0' already exists in 'hsr' [ 334.369733][ T8074] Cannot create hsr debugfs directory [ 334.370769][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.370786][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.370822][ T8125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.532509][ T7468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.252451][ T8125] hsr_slave_0: entered promiscuous mode [ 335.258704][ T8125] hsr_slave_1: entered promiscuous mode [ 335.267219][ T8125] debugfs: 'hsr0' already exists in 'hsr' [ 335.267248][ T8125] Cannot create hsr debugfs directory [ 335.378917][ T5631] Bluetooth: hci0: command tx timeout [ 336.144817][ T5276] 8021q: adding VLAN 0 to HW filter on device eth20 [ 336.421814][ T8337] bridge_slave_0: left allmulticast mode [ 336.421848][ T8337] bridge_slave_0: left promiscuous mode [ 336.425168][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.460432][ T8337] bridge_slave_1: left allmulticast mode [ 336.460459][ T8337] bridge_slave_1: left promiscuous mode [ 336.460651][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.492380][ T8337] bond0: (slave bond_slave_0): Releasing backup interface [ 336.505904][ T8337] bond0: (slave bond_slave_1): Releasing backup interface [ 336.518994][ T8337] team0: Port device team_slave_0 removed [ 336.530507][ T8337] team0: Port device team_slave_1 removed [ 336.531566][ T8337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.531597][ T8337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.533720][ T8337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.644348][ T5631] Bluetooth: hci0: command tx timeout [ 338.208497][ T7816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.233331][ T7816] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.492153][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.492279][ T7460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.527931][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.528055][ T7460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.654646][ T5631] Bluetooth: hci0: command tx timeout [ 340.128679][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.128878][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.129012][ T8285] bridge_slave_0: entered allmulticast mode [ 340.131149][ T8285] bridge_slave_0: entered promiscuous mode [ 340.133633][ T8024] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.163476][ T8024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.167285][ T8024] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.180953][ T8024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.343369][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.343516][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.343726][ T8285] bridge_slave_1: entered allmulticast mode [ 340.347495][ T8285] bridge_slave_1: entered promiscuous mode [ 340.354586][ T8024] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.369408][ T8024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.372136][ T8024] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.425422][ T8024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.556741][ T7816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.645772][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.322427][ T8024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.338296][ T8024] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.429189][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.429318][ T7460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.432109][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.432230][ T7460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.551282][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.724107][ T8285] team0: Port device team_slave_0 added [ 341.731313][ T8285] team0: Port device team_slave_1 added [ 341.734410][ T5631] Bluetooth: hci0: command tx timeout [ 341.877734][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.877760][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.877796][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.920046][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.920070][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.920104][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.307939][ T8285] hsr_slave_0: entered promiscuous mode [ 342.309335][ T8285] hsr_slave_1: entered promiscuous mode [ 342.310408][ T8285] debugfs: 'hsr0' already exists in 'hsr' [ 342.310431][ T8285] Cannot create hsr debugfs directory [ 342.509516][ T7468] bridge_slave_1: left allmulticast mode [ 342.509552][ T7468] bridge_slave_1: left promiscuous mode [ 342.509788][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.539220][ T7468] bridge_slave_0: left allmulticast mode [ 342.539252][ T7468] bridge_slave_0: left promiscuous mode [ 342.539465][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.587995][ T7468] bridge_slave_1: left allmulticast mode [ 342.588034][ T7468] bridge_slave_1: left promiscuous mode [ 342.588286][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.592562][ T7468] bridge_slave_0: left allmulticast mode [ 342.592588][ T7468] bridge_slave_0: left promiscuous mode [ 342.592797][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.642026][ T7468] bridge_slave_1: left allmulticast mode [ 342.642065][ T7468] bridge_slave_1: left promiscuous mode [ 342.642313][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.652580][ T7468] bridge_slave_0: left allmulticast mode [ 342.652615][ T7468] bridge_slave_0: left promiscuous mode [ 342.652869][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.166094][ T7468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.190162][ T7468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.203476][ T7468] bond0 (unregistering): Released all slaves [ 343.577664][ T7468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.582222][ T7468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.584054][ T7468] bond0 (unregistering): Released all slaves [ 343.783715][ T7468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.796181][ T7468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.799166][ T7468] bond0 (unregistering): Released all slaves [ 344.161998][ T7468] IPVS: stopping backup sync thread 6782 ... [ 344.516073][ T7816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.560701][ T8074] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 345.573725][ T8074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.730061][ T7468] hsr_slave_0: left promiscuous mode [ 345.730940][ T7468] hsr_slave_1: left promiscuous mode [ 345.731950][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.731975][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.733030][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.733052][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.815676][ T7468] hsr_slave_0: left promiscuous mode [ 345.816520][ T7468] hsr_slave_1: left promiscuous mode [ 345.817492][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.819362][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.830022][ T7468] hsr_slave_0: left promiscuous mode [ 345.830881][ T7468] hsr_slave_1: left promiscuous mode [ 345.831947][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.832691][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.511859][ T7468] veth1_macvtap: left promiscuous mode [ 346.511909][ T7468] veth0_macvtap: left promiscuous mode [ 346.512047][ T7468] veth1_vlan: left promiscuous mode [ 346.514358][ T7468] veth0_vlan: left promiscuous mode [ 346.913034][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.929894][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.942081][ T4931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.943916][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.959547][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.096017][ T5631] Bluetooth: hci2: command tx timeout [ 349.198584][ T7468] team0 (unregistering): Port device team_slave_1 removed [ 349.231920][ T7468] team0 (unregistering): Port device team_slave_0 removed [ 350.132332][ T7468] team0 (unregistering): Port device team_slave_1 removed [ 350.219884][ T7468] team0 (unregistering): Port device team_slave_0 removed [ 351.223569][ T5631] Bluetooth: hci2: command tx timeout [ 351.388303][ T7468] team0 (unregistering): Port device team_slave_1 removed [ 351.670892][ T7468] team0 (unregistering): Port device team_slave_0 removed [ 352.264126][ T8074] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 352.271686][ T8074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.272963][ T8074] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 352.358062][ T8074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.122667][ T8074] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 353.188966][ T8074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.268699][ T5631] Bluetooth: hci2: command tx timeout [ 353.499957][ T8024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.988516][ T8024] veth0_vlan: entered promiscuous mode [ 354.055265][ T8024] veth1_vlan: entered promiscuous mode [ 354.498603][ T8466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.415669][ T5631] Bluetooth: hci2: command tx timeout [ 355.663117][ T8024] veth0_macvtap: entered promiscuous mode [ 355.748273][ T8024] veth1_macvtap: entered promiscuous mode [ 355.882570][ T8074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.242742][ T8024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.271999][ T8074] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.291063][ T8024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.359736][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.359881][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.491922][ T7468] IPVS: stop unused estimator thread 0... [ 358.344589][ T186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.407151][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.411504][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.411627][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.426387][ T7465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.427359][ T7465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.423390][ T7464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.423430][ T7464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.532057][ T7464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.532087][ T7464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.144648][ T8512] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 366.365231][ T8125] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 366.369834][ T8125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.372018][ T8125] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 366.414937][ T8125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.424880][ T8125] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 366.459126][ T8125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.459660][ T8421] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.459868][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.460030][ T8421] bridge_slave_0: entered allmulticast mode [ 366.462022][ T8421] bridge_slave_0: entered promiscuous mode [ 366.472846][ T8421] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.472978][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.473156][ T8421] bridge_slave_1: entered allmulticast mode [ 366.482484][ T8421] bridge_slave_1: entered promiscuous mode [ 366.607772][ T8125] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 366.636308][ T8125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.763486][ T8421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.789621][ T8421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.839833][ T8421] team0: Port device team_slave_0 added [ 366.843509][ T8421] team0: Port device team_slave_1 added [ 367.042629][ T8532] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[8024] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[8532] [ 367.887144][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.887169][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.887202][ T8421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.984796][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.984837][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.984875][ T8421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.759631][ T8421] hsr_slave_0: entered promiscuous mode [ 368.764417][ T8421] hsr_slave_1: entered promiscuous mode [ 368.779555][ T8421] debugfs: 'hsr0' already exists in 'hsr' [ 368.781313][ T8421] Cannot create hsr debugfs directory [ 368.872282][ T8285] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.135458][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.141416][ T8285] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 370.052174][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.490199][ T8285] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 373.972653][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.990979][ T8285] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 374.029105][ T8285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.358057][ T7468] bridge_slave_1: left allmulticast mode [ 374.358092][ T7468] bridge_slave_1: left promiscuous mode [ 374.358382][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.362453][ T7468] bridge_slave_0: left allmulticast mode [ 374.362480][ T7468] bridge_slave_0: left promiscuous mode [ 374.366706][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.554480][ T1921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 374.679123][ T7468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.682590][ T7468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.703859][ T7468] bond0 (unregistering): Released all slaves [ 374.719988][ T1921] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 374.737066][ T1921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.737131][ T1921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.737160][ T1921] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 374.737190][ T1921] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 374.737240][ T1921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.825098][ T1921] cxacru 1-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 374.825173][ T1921] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 374.825685][ T1921] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 375.094228][ T5347] usb 1-1: USB disconnect, device number 2 [ 375.161520][ T7468] hsr_slave_0: left promiscuous mode [ 375.162361][ T7468] hsr_slave_1: left promiscuous mode [ 375.163485][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.183583][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.556921][ T7468] team0 (unregistering): Port device team_slave_1 removed [ 375.592427][ T7468] team0 (unregistering): Port device team_slave_0 removed [ 375.905053][ T31] audit: type=1326 audit(1790197112.132:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.537" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87a39e159 code=0x7ffc0000 [ 375.905126][ T31] audit: type=1326 audit(1790197112.132:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.537" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87a39e159 code=0x7ffc0000 [ 375.905184][ T31] audit: type=1326 audit(1790197112.132:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.537" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87a39e159 code=0x7ffc0000 [ 375.905241][ T31] audit: type=1326 audit(1790197112.132:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.537" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87a39e159 code=0x7ffc0000 [ 375.905298][ T31] audit: type=1326 audit(1790197112.132:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.537" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe87a39e159 code=0x7ffc0000 [ 375.905354][ T31] audit: type=1326 audit(1790197112.132:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.537" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87a39e159 code=0x7ffc0000 [ 375.999219][ T31] audit: type=1326 audit(1790197112.212:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.537" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe87a35e98e code=0x7ffc0000 [ 375.999291][ T31] audit: type=1326 audit(1790197112.232:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.537" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe87a35e98e code=0x7ffc0000 [ 375.999349][ T31] audit: type=1326 audit(1790197112.232:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.537" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe87a35e98e code=0x7ffc0000 [ 377.315493][ T8074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.023527][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.023609][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.119850][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.379204][ T4931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.384029][ T4931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.421094][ T4931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.432673][ T4931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.444604][ T4931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.890411][ T4931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.893471][ T4931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.894820][ T4931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.918472][ T4931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.925087][ T4931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.998433][ T5276] 8021q: adding VLAN 0 to HW filter on device eth21 [ 379.028878][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.053668][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.333473][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.333622][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.491235][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.491363][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.347701][ T8421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 380.352144][ T8421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.411457][ T8421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 380.429268][ T8421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.454545][ T5631] Bluetooth: hci4: command tx timeout [ 380.463787][ T8421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 380.484619][ T8421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.485778][ T8421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 380.510476][ T8421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.982644][ T7468] bridge_slave_1: left allmulticast mode [ 380.982681][ T7468] bridge_slave_1: left promiscuous mode [ 380.982941][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.000457][ T7468] bridge_slave_0: left allmulticast mode [ 381.000494][ T7468] bridge_slave_0: left promiscuous mode [ 381.004038][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.025713][ T5631] Bluetooth: hci3: command tx timeout [ 381.252863][ T7468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.272537][ T7468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.275095][ T7468] bond0 (unregistering): Released all slaves [ 381.510284][ T7468] hsr_slave_0: left promiscuous mode [ 381.512925][ T7468] hsr_slave_1: left promiscuous mode [ 381.513983][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.537410][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.772802][ T7468] team0 (unregistering): Port device team_slave_1 removed [ 381.792965][ T7468] team0 (unregistering): Port device team_slave_0 removed [ 382.411906][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.533087][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.533305][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.533456][ T8631] bridge_slave_0: entered allmulticast mode [ 382.540398][ T8631] bridge_slave_0: entered promiscuous mode [ 382.543013][ T5631] Bluetooth: hci4: command tx timeout [ 382.543890][ T8631] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.544017][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.545705][ T8631] bridge_slave_1: entered allmulticast mode [ 382.550116][ T8631] bridge_slave_1: entered promiscuous mode [ 382.616459][ T8631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.716829][ T8631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.836840][ T8631] team0: Port device team_slave_0 added [ 382.900519][ T8631] team0: Port device team_slave_1 added [ 383.096588][ T5631] Bluetooth: hci3: command tx timeout [ 383.141190][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.141335][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.141541][ T8625] bridge_slave_0: entered allmulticast mode [ 383.144040][ T8625] bridge_slave_0: entered promiscuous mode [ 383.152925][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.153091][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.153249][ T8625] bridge_slave_1: entered allmulticast mode [ 383.160521][ T8625] bridge_slave_1: entered promiscuous mode [ 383.226016][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.226042][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.226078][ T8631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.351495][ T8421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.353832][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.353851][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.353887][ T8631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.363574][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.392756][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.527196][ T8625] team0: Port device team_slave_0 added [ 383.530333][ T8625] team0: Port device team_slave_1 added [ 383.625380][ T8631] hsr_slave_0: entered promiscuous mode [ 383.627312][ T8631] hsr_slave_1: entered promiscuous mode [ 383.685450][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.685477][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.685513][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.807823][ T8421] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.810538][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.810559][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.810593][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.954169][ T3254] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.954298][ T3254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.010131][ T8285] veth0_vlan: entered promiscuous mode [ 384.068885][ T3254] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.069018][ T3254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.085236][ T8625] hsr_slave_0: entered promiscuous mode [ 384.087788][ T8625] hsr_slave_1: entered promiscuous mode [ 384.088897][ T8625] debugfs: 'hsr0' already exists in 'hsr' [ 384.088922][ T8625] Cannot create hsr debugfs directory [ 384.192212][ T8285] veth1_vlan: entered promiscuous mode [ 384.574106][ T5276] 8021q: adding VLAN 0 to HW filter on device eth22 [ 384.606687][ T7468] bridge_slave_1: left allmulticast mode [ 384.606724][ T7468] bridge_slave_1: left promiscuous mode [ 384.606992][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.615530][ T5631] Bluetooth: hci4: command tx timeout [ 384.620921][ T7468] bridge_slave_0: left allmulticast mode [ 384.624440][ T7468] bridge_slave_0: left promiscuous mode [ 384.624711][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.844890][ T7468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.847866][ T7468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.849388][ T7468] bond0 (unregistering): Released all slaves [ 384.938249][ T8421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.938275][ T8421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.993282][ T7468] hsr_slave_0: left promiscuous mode [ 385.000231][ T7468] hsr_slave_1: left promiscuous mode [ 385.001361][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.021137][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.174315][ T5631] Bluetooth: hci3: command tx timeout [ 385.368442][ T7468] team0 (unregistering): Port device team_slave_1 removed [ 385.410851][ T7468] team0 (unregistering): Port device team_slave_0 removed [ 386.211771][ T5276] 8021q: adding VLAN 0 to HW filter on device eth23 [ 386.240890][ T8285] veth0_macvtap: entered promiscuous mode [ 386.274100][ T8285] veth1_macvtap: entered promiscuous mode [ 386.471050][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.499714][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.584535][ T7453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.584613][ T7453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.584672][ T7453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.584715][ T7453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.695896][ T5631] Bluetooth: hci4: command tx timeout [ 386.986696][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.067822][ T8631] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 387.093908][ T8631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.189867][ T8631] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 387.204628][ T8631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.206978][ T7453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.207007][ T7453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.215406][ T8631] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 387.255030][ T5631] Bluetooth: hci3: command tx timeout [ 387.260314][ T8631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.282470][ T8631] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 387.308656][ T8631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.412640][ T3254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.412670][ T3254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.196582][ T8789] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 389.641386][ T8421] veth0_vlan: entered promiscuous mode [ 389.700920][ T8631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.710448][ T8421] veth1_vlan: entered promiscuous mode [ 389.791883][ T8631] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.728099][ T8804] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[8285] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[8804] [ 391.684171][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.684320][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.798171][ T3254] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.798400][ T3254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.073575][ T8625] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 392.125294][ T8625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.133195][ T8421] veth0_macvtap: entered promiscuous mode [ 392.173562][ T8625] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 392.217964][ T8625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.261048][ T8625] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 392.330631][ T8625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.331557][ T8625] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 392.411172][ T8625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.412015][ T8421] veth1_macvtap: entered promiscuous mode [ 392.746839][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.867260][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.970833][ T7464] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.971308][ T7464] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.971890][ T7464] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.977486][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 393.238039][ T8828] loop5: detected capacity change from 0 to 512 [ 393.248448][ T8828] EXT4-fs: Ignoring removed mblk_io_submit option [ 393.848443][ T8828] EXT4-fs: Invalid want_extra_isize 32768 [ 393.856643][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 394.991458][ T8812] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 395.011682][ T8812] batman_adv: batadv0: Adding interface: gretap1 [ 395.011705][ T8812] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.011745][ T8812] batman_adv: batadv0: Interface activated: gretap1 [ 395.084516][ T1033] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.230843][ T5837] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.230908][ T5837] usb 1-1: New USB device found, idVendor=147f, idProduct=2758, bcdDevice=be.e6 [ 395.231805][ T5837] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 395.231841][ T5837] usb 1-1: can't read configurations, error -71 [ 395.742462][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.742492][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.970296][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.400246][ T7464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.400275][ T7464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.182911][ T8625] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.288460][ T3254] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.288592][ T3254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.376779][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.376901][ T7460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.097643][ T8880] team0: Port device vxlan0 added [ 400.114512][ T1033] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.122549][ T5896] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.136898][ T139] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.137936][ T139] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.048121][ T8631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.743759][ T8922] loop5: detected capacity change from 0 to 64 [ 407.074995][ T8919] Bluetooth: MGMT ver 1.23 [ 407.255922][ T8931] ªªªªªª: renamed from vlan0 (while UP) [ 407.663445][ T8936] syzkaller0: entered promiscuous mode [ 407.663477][ T8936] syzkaller0: entered allmulticast mode [ 411.424990][ T8631] veth0_vlan: entered promiscuous mode [ 411.500305][ T8631] veth1_vlan: entered promiscuous mode [ 412.582037][ T8631] veth0_macvtap: entered promiscuous mode [ 412.620610][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.640748][ T8967] tipc: Started in network mode [ 412.640786][ T8967] tipc: Node identity 9e4e42d95be1, cluster identity 4711 [ 412.640964][ T8967] tipc: Enabled bearer , priority 0 [ 412.679671][ T8631] veth1_macvtap: entered promiscuous mode [ 412.704505][ T8966] syzkaller0: entered promiscuous mode [ 412.704549][ T8966] syzkaller0: entered allmulticast mode [ 412.771111][ T8966] tipc: Resetting bearer [ 413.649884][ T8631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.668344][ T8631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.776071][ T8965] tipc: Resetting bearer [ 414.000435][ T8965] tipc: Disabling bearer [ 414.319810][ T5619] tipc: Node number set to 3316597465 [ 415.052041][ T7453] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.139834][ T7453] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.170802][ T7441] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.215170][ T7465] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.543793][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.543818][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.625361][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 415.967805][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 415.998525][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.998579][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.920876][ T6577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.920929][ T6577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.596313][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 418.596439][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 418.653027][ T10] usb 2-1: USB disconnect, device number 9 [ 419.525893][ T8625] veth0_vlan: entered promiscuous mode [ 420.555396][ T8625] veth1_vlan: entered promiscuous mode [ 422.413857][ T8625] veth0_macvtap: entered promiscuous mode [ 422.447736][ T8625] veth1_macvtap: entered promiscuous mode [ 422.767687][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.792875][ T4931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.808346][ T4931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.809229][ T4931] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.810818][ T4931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.812565][ T4931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 422.951229][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.294472][ T3254] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.294556][ T3254] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.294605][ T3254] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.294652][ T3254] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.117719][ T4931] Bluetooth: hci5: command tx timeout [ 427.009955][ T7468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.009994][ T7468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.174287][ T4931] Bluetooth: hci5: command tx timeout [ 427.899691][ T7468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.899742][ T7468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.228924][ T9081] loop9: detected capacity change from 0 to 512 [ 428.240275][ T9081] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.677721][ T9081] EXT4-fs: Invalid want_extra_isize 32768 [ 428.883698][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.883730][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.255611][ T4931] Bluetooth: hci5: command tx timeout [ 429.367717][ T9096] loop9: detected capacity change from 0 to 256 [ 429.492747][ T9096] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.220294][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 430.220322][ T31] audit: type=1800 audit(1790197166.402:139): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.593" name="file1" dev="loop9" ino=1048637 res=0 errno=0 [ 430.480406][ T7468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.480460][ T7468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.334403][ T4931] Bluetooth: hci5: command tx timeout [ 431.593370][ T9108] loop5: detected capacity change from 0 to 4096 [ 431.607337][ T9108] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 431.656959][ T9108] ntfs3(loop5): Failed to load $MFT (-22). [ 432.241458][ T9112] sctp: [Deprecated]: syz.5.595 (pid 9112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.241458][ T9112] Use struct sctp_sack_info instead [ 433.215230][ T7468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.216763][ T7468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.457659][ T7436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.457691][ T7436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.382043][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 440.785024][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.785102][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.657762][ T9114] syz.7.596 (9114): drop_caches: 2 [ 442.564377][ T9170] loop8: detected capacity change from 0 to 512 [ 442.574490][ T9170] EXT4-fs: Ignoring removed mblk_io_submit option [ 443.148177][ T9170] EXT4-fs: Invalid want_extra_isize 32768 [ 447.375158][ T9192] loop5: detected capacity change from 0 to 128 [ 447.447204][ T9192] ufs: ufstype=nextstep-cd is supported read-only [ 449.297374][ T7468] bond1 (unregistering): (slave geneve2): Releasing active interface [ 449.995406][ T8005] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 450.358822][ T7468] team0: Port device vxlan0 removed [ 450.543354][ T8005] usb 6-1: device descriptor read/all, error -71 [ 450.562111][ T9222] FAULT_INJECTION: forcing a failure. [ 450.562111][ T9222] name failslab, interval 1, probability 0, space 0, times 0 [ 450.562156][ T9222] CPU: 1 UID: 0 PID: 9222 Comm: syz.8.617 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.562194][ T9222] Tainted: [L]=SOFTLOCKUP [ 450.562205][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 450.562232][ T9222] Call Trace: [ 450.562243][ T9222] [ 450.562254][ T9222] dump_stack_lvl+0xe8/0x150 [ 450.562303][ T9222] should_fail_ex+0x410/0x560 [ 450.562344][ T9222] should_failslab+0xa8/0x100 [ 450.562380][ T9222] ? copy_mm+0xda/0x480 [ 450.562417][ T9222] kmem_cache_alloc_noprof+0xa1/0x600 [ 450.562466][ T9222] ? copy_mm+0xda/0x480 [ 450.562512][ T9222] copy_mm+0xda/0x480 [ 450.562560][ T9222] copy_process+0x1e79/0x4400 [ 450.562615][ T9222] ? copy_process+0xd16/0x4400 [ 450.562677][ T9222] ? __pfx_copy_process+0x10/0x10 [ 450.562734][ T9222] kernel_clone+0x2d7/0x940 [ 450.562783][ T9222] ? __pfx_kernel_clone+0x10/0x10 [ 450.562822][ T9222] ? futex_wait+0x2a2/0x390 [ 450.562892][ T9222] __se_sys_clone3+0x33c/0x360 [ 450.562939][ T9222] ? __pfx___se_sys_clone3+0x10/0x10 [ 450.562980][ T9222] ? do_futex+0x3e7/0x4e0 [ 450.563040][ T9222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.563092][ T9222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.563141][ T9222] do_syscall_64+0x166/0x520 [ 450.563178][ T9222] ? trace_irq_disable+0x3b/0x140 [ 450.563220][ T9222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.563257][ T9222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.563286][ T9222] RIP: 0033:0x7f6f8599e159 [ 450.563312][ T9222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.563336][ T9222] RSP: 002b:00007f6f868edef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 450.563367][ T9222] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6f8599e159 [ 450.563388][ T9222] RDX: 00007f6f868edf10 RSI: 0000000000000058 RDI: 00007f6f868edf10 [ 450.563407][ T9222] RBP: 00007f6f85a3506b R08: 0000000000000000 R09: 0000000000000058 [ 450.563425][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.563443][ T9222] R13: 00007f6f85c26038 R14: 00007f6f85c25fa0 R15: 00007fff8ef92478 [ 450.563487][ T9222] [ 450.807413][ T9227] vivid-000: disconnect [ 451.241082][ T9219] vivid-000: reconnect [ 453.022427][ T7468] bond0 (unregistering): Released all slaves [ 453.176283][ T31] audit: type=1326 audit(1790197189.412:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.0.621" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b5e19e159 code=0x0 [ 453.576963][ T7468] bond1 (unregistering): Released all slaves [ 456.854276][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 461.732333][ T9285] loop8: detected capacity change from 0 to 164 [ 462.883301][ T9289] rock: directory entry would overflow storage [ 462.883379][ T9289] rock: sig=0x4f50, size=4, remaining=3 [ 462.883434][ T9289] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 465.230017][ T7468] hsr_slave_0: left promiscuous mode [ 465.488023][ T7468] hsr_slave_1: left promiscuous mode [ 466.400787][ T9306] mmap: syz.8.634 (9306) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 466.462654][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 466.488544][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 466.501336][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 466.513997][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 466.530926][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 466.685276][ T7468] veth1_macvtap: left promiscuous mode [ 466.685329][ T7468] veth0_macvtap: left promiscuous mode [ 466.685433][ T7468] veth1_vlan: left promiscuous mode [ 466.685494][ T7468] veth0_vlan: left promiscuous mode [ 468.614426][ T5624] Bluetooth: hci6: command tx timeout [ 470.704217][ T4931] Bluetooth: hci6: command tx timeout [ 471.762105][ T9366] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 473.108634][ T4931] Bluetooth: hci6: command tx timeout [ 473.184355][ T9368] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 475.174499][ T5624] Bluetooth: hci6: command tx timeout [ 475.538838][ T9391] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 477.111318][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.113401][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.113641][ T9031] bridge_slave_0: entered allmulticast mode [ 477.144349][ T9031] bridge_slave_0: entered promiscuous mode [ 477.172605][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.172732][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.172877][ T9031] bridge_slave_1: entered allmulticast mode [ 477.202308][ T9031] bridge_slave_1: entered promiscuous mode [ 477.404212][ T9031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.430814][ T9031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.628725][ T9031] team0: Port device team_slave_0 added [ 477.645972][ T9031] team0: Port device team_slave_1 added [ 477.703872][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.703898][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.703933][ T9031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.752437][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.752458][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.752489][ T9031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.424717][ T9031] hsr_slave_0: entered promiscuous mode [ 479.447015][ T9031] hsr_slave_1: entered promiscuous mode [ 479.646720][ T9031] debugfs: 'hsr0' already exists in 'hsr' [ 479.646750][ T9031] Cannot create hsr debugfs directory [ 479.666394][ T31] audit: type=1326 audit(1790197215.882:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 479.666464][ T31] audit: type=1326 audit(1790197215.882:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 479.931338][ T31] audit: type=1326 audit(1790197216.142:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 479.942204][ T31] audit: type=1326 audit(1790197216.172:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 480.010422][ T31] audit: type=1326 audit(1790197216.222:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 480.132685][ T31] audit: type=1326 audit(1790197216.332:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 480.133206][ T31] audit: type=1326 audit(1790197216.362:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 480.134596][ T31] audit: type=1326 audit(1790197216.362:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 480.138326][ T31] audit: type=1326 audit(1790197216.362:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 480.187075][ T31] audit: type=1326 audit(1790197216.372:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.8.658" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 480.523900][ T9411] loop8: detected capacity change from 0 to 512 [ 482.096057][ T9411] EXT4-fs warning (device loop8): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop8. [ 486.034984][ T139] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.470744][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.487529][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.490624][ T4931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.523371][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.537548][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 488.648111][ T9463] ip_tables: iptables: counters copy to user failed while replacing table [ 489.227423][ T139] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.273890][ T9466] loop9: detected capacity change from 0 to 128 [ 489.322112][ T9466] EXT4-fs (loop9): Test dummy encryption mode enabled [ 489.417998][ T9466] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.476573][ T9466] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 489.576360][ T4931] Bluetooth: hci2: command tx timeout [ 490.891029][ T8631] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.207925][ T139] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.233494][ T9486] loop9: detected capacity change from 0 to 128 [ 491.249029][ T9486] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 491.249071][ T9486] FAT-fs (loop9): data area starts beyond volume (36 > 11) [ 491.249090][ T9486] FAT-fs (loop9): Can't find a valid FAT filesystem [ 491.611142][ T9488] loop5: detected capacity change from 0 to 4096 [ 491.683995][ T9488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.687164][ T4931] Bluetooth: hci2: command tx timeout [ 491.906337][ T9482] sch_tbf: burst 6 is lower than device ip6tnl0 mtu (1452) ! [ 491.906365][ T9482] FAULT_INJECTION: forcing a failure. [ 491.906365][ T9482] name failslab, interval 1, probability 0, space 0, times 0 [ 491.906399][ T9482] CPU: 0 UID: 0 PID: 9482 Comm: syz.0.674 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.906431][ T9482] Tainted: [L]=SOFTLOCKUP [ 491.906440][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 491.906455][ T9482] Call Trace: [ 491.906465][ T9482] [ 491.906475][ T9482] dump_stack_lvl+0xe8/0x150 [ 491.906517][ T9482] should_fail_ex+0x410/0x560 [ 491.906553][ T9482] should_failslab+0xa8/0x100 [ 491.906597][ T9482] __kmalloc_node_noprof+0x100/0x720 [ 491.906625][ T9482] ? qdisc_alloc+0x92/0x9d0 [ 491.906659][ T9482] ? qdisc_alloc+0x92/0x9d0 [ 491.906702][ T9482] qdisc_alloc+0x92/0x9d0 [ 491.906745][ T9482] qdisc_create_dflt+0x8e/0x4e0 [ 491.906786][ T9482] fifo_create_dflt+0x71/0x2c0 [ 491.906823][ T9482] ? tbf_change+0x83f/0x1670 [ 491.906857][ T9482] tbf_change+0x861/0x1670 [ 491.906886][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.906915][ T9482] ? __lock_acquire+0x747/0x2de0 [ 491.906957][ T9482] ? __pfx_tbf_change+0x10/0x10 [ 491.906998][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.907028][ T9482] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.907073][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.907129][ T9482] ? lockdep_hardirqs_on+0x7b/0x110 [ 491.907165][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.907197][ T9482] ? seqcount_lockdep_reader_access+0xea/0x100 [ 491.907228][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.907265][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.907297][ T9482] ? __pfx_tbf_init+0x10/0x10 [ 491.907329][ T9482] qdisc_create+0x7b5/0xf00 [ 491.907364][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.907403][ T9482] tc_modify_qdisc+0x17af/0x2390 [ 491.907455][ T9482] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 491.907516][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.907591][ T9482] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 491.907620][ T9482] rtnetlink_rcv_msg+0x7b9/0xc00 [ 491.907658][ T9482] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 491.907689][ T9482] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 491.907720][ T9482] ? ref_tracker_free+0x689/0x830 [ 491.907755][ T9482] ? __pfx_ref_tracker_free+0x10/0x10 [ 491.907786][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.907814][ T9482] ? __asan_memcpy+0x40/0x70 [ 491.907838][ T9482] ? __skb_clone+0x5c/0x6c0 [ 491.907881][ T9482] netlink_rcv_skb+0x226/0x4a0 [ 491.907923][ T9482] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 491.907958][ T9482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.908012][ T9482] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.908051][ T9482] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.908098][ T9482] netlink_unicast+0x7bd/0x940 [ 491.908147][ T9482] netlink_sendmsg+0x813/0xb40 [ 491.908182][ T9482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.908216][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.908245][ T9482] ? apparmor_socket_sendmsg+0x18b/0x360 [ 491.908272][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.908305][ T9482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.908328][ T9482] sock_sendmsg_nosec+0x13a/0x180 [ 491.908359][ T9482] ____sys_sendmsg+0x54e/0x850 [ 491.908401][ T9482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.908440][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.908475][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.908503][ T9482] ? import_iovec+0x73/0xa0 [ 491.908540][ T9482] ___sys_sendmsg+0x2a5/0x360 [ 491.908579][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.908608][ T9482] ? __lock_acquire+0x747/0x2de0 [ 491.908642][ T9482] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.908683][ T9482] ? futex_wait+0x2a2/0x390 [ 491.908762][ T9482] ? __fget_files+0x2a/0x420 [ 491.908800][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.908830][ T9482] ? __fget_files+0x3a2/0x420 [ 491.908881][ T9482] __x64_sys_sendmsg+0x1b1/0x290 [ 491.908920][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.908956][ T9482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.909007][ T9482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.909056][ T9482] do_syscall_64+0x166/0x520 [ 491.909092][ T9482] ? trace_irq_disable+0x3b/0x140 [ 491.909121][ T9482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.909157][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.909183][ T9482] RIP: 0033:0x7f6b5e19e159 [ 491.909209][ T9482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.909231][ T9482] RSP: 002b:00007f6b5f01d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.909261][ T9482] RAX: ffffffffffffffda RBX: 00007f6b5e425fa0 RCX: 00007f6b5e19e159 [ 491.909283][ T9482] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007 [ 491.909301][ T9482] RBP: 00007f6b5e23506b R08: 0000000000000000 R09: 0000000000000000 [ 491.909319][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.909336][ T9482] R13: 00007f6b5e426038 R14: 00007f6b5e425fa0 R15: 00007ffe152b5f98 [ 491.909379][ T9482] [ 491.937472][ T8285] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 491.953434][ T8285] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 492.428756][ T9498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.101079][ T139] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.741408][ T4931] Bluetooth: hci2: command tx timeout [ 494.151240][ T9509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.814483][ T4931] Bluetooth: hci2: command tx timeout [ 498.197547][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.197714][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.197868][ T9317] bridge_slave_0: entered allmulticast mode [ 498.215706][ T9317] bridge_slave_0: entered promiscuous mode [ 498.279869][ T9527] loop8: detected capacity change from 0 to 128 [ 498.290971][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.291092][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.291257][ T9317] bridge_slave_1: entered allmulticast mode [ 498.301237][ T9317] bridge_slave_1: entered promiscuous mode [ 498.371645][ T9527] EXT4-fs (loop8): Test dummy encryption mode enabled [ 498.404815][ T9527] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 498.419964][ T9527] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 498.604279][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 498.604307][ T31] audit: type=1800 audit(1790197234.752:173): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.688" name=08 dev="sda1" ino=2075 res=0 errno=0 [ 499.763083][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.819745][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.821632][ T139] bridge_slave_1: left allmulticast mode [ 499.821660][ T139] bridge_slave_1: left promiscuous mode [ 499.821923][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.854958][ T8625] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 499.858260][ T139] bridge_slave_0: left allmulticast mode [ 499.858288][ T139] bridge_slave_0: left promiscuous mode [ 499.858581][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.953512][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 499.964921][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 499.966826][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 499.970513][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 499.971315][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 500.214841][ T31] audit: type=1326 audit(1790197236.432:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.690" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 500.223631][ T31] audit: type=1326 audit(1790197236.432:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.690" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 500.223720][ T31] audit: type=1326 audit(1790197236.452:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.690" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 500.223779][ T31] audit: type=1326 audit(1790197236.452:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.690" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 500.223836][ T31] audit: type=1326 audit(1790197236.452:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.690" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 500.410664][ T31] audit: type=1326 audit(1790197236.602:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.690" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 500.430933][ T9545] loop9: detected capacity change from 0 to 40427 [ 500.461404][ T9545] F2FS-fs (loop9): invalid crc value [ 500.496772][ T31] audit: type=1326 audit(1790197236.732:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.690" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 500.497031][ T31] audit: type=1326 audit(1790197236.732:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.690" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 500.498682][ T31] audit: type=1326 audit(1790197236.732:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.690" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6f8599e159 code=0x7ffc0000 [ 500.599381][ T9545] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 500.605015][ T9545] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0 [ 500.605047][ T9545] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 500.606667][ T9545] F2FS-fs (loop9): Start checkpoint disabled! [ 500.639731][ T9545] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0 [ 500.641036][ T9545] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 500.824909][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 500.824954][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 500.858466][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.858528][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.313705][ T9558] syz.9.689: attempt to access beyond end of device [ 501.313705][ T9558] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 501.926945][ T7441] kworker/u8:32: attempt to access beyond end of device [ 501.926945][ T7441] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 501.964775][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: kworker/u8:32 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.964823][ T7441] Tainted: [L]=SOFTLOCKUP [ 501.964833][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 501.964853][ T7441] Workqueue: writeback wb_workfn (flush-7:9) [ 501.964898][ T7441] Call Trace: [ 501.964909][ T7441] [ 501.964921][ T7441] dump_stack_lvl+0xe8/0x150 [ 501.964964][ T7441] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 501.965011][ T7441] f2fs_write_end_bio+0x1211/0x16e0 [ 501.965045][ T7441] ? blkg_put+0x22/0x240 [ 501.965104][ T7441] __submit_merged_bio+0x258/0x6a0 [ 501.965144][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.965182][ T7441] ? rcu_is_watching+0x16/0xb0 [ 501.965223][ T7441] __submit_merged_write_cond+0x3c9/0x4e0 [ 501.965274][ T7441] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 501.965332][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.965376][ T7441] f2fs_write_data_pages+0x2a27/0x36f0 [ 501.965467][ T7441] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 501.965576][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.965608][ T7441] ? __lock_acquire+0x747/0x2de0 [ 501.965641][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.965703][ T7441] ? lock_acquire+0x115/0x350 [ 501.965737][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.965789][ T7441] ? ktime_get+0x45/0x220 [ 501.965815][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.965848][ T7441] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 501.965895][ T7441] do_writepages+0x338/0x560 [ 501.965934][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.965966][ T7441] ? reacquire_held_locks+0x117/0x1a0 [ 501.966000][ T7441] ? writeback_sb_inodes+0x450/0x1b00 [ 501.966047][ T7441] __writeback_single_inode+0x136/0x1220 [ 501.966088][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.966121][ T7441] ? do_raw_spin_unlock+0xf5/0x200 [ 501.966167][ T7441] writeback_sb_inodes+0x9de/0x1b00 [ 501.966203][ T7441] ? __lock_acquire+0x747/0x2de0 [ 501.966251][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.966296][ T7441] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 501.966389][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.966421][ T7441] ? rcu_is_watching+0x16/0xb0 [ 501.966456][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.966488][ T7441] ? queue_io+0x2d3/0x470 [ 501.966530][ T7441] wb_writeback+0x41c/0xad0 [ 501.966582][ T7441] ? queue_io+0x231/0x470 [ 501.966627][ T7441] ? __pfx_wb_writeback+0x10/0x10 [ 501.966661][ T7441] ? do_raw_spin_lock+0x12b/0x2f0 [ 501.966723][ T7441] wb_workfn+0x431/0x10f0 [ 501.966779][ T7441] ? __pfx_wb_workfn+0x10/0x10 [ 501.966818][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.966857][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.966893][ T7441] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 501.966927][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.966967][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.967000][ T7441] ? lock_acquire+0x115/0x350 [ 501.967030][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.967071][ T7441] ? rcu_is_watching+0x16/0xb0 [ 501.967105][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.967140][ T7441] ? process_scheduled_works+0x97a/0x1630 [ 501.967180][ T7441] process_scheduled_works+0xc3d/0x1630 [ 501.967218][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.967291][ T7441] ? __pfx_process_scheduled_works+0x10/0x10 [ 501.967337][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.967369][ T7441] ? assign_work+0x3cf/0x5d0 [ 501.967414][ T7441] worker_thread+0xa47/0xfb0 [ 501.967490][ T7441] kthread+0x38b/0x480 [ 501.967519][ T7441] ? __pfx_worker_thread+0x10/0x10 [ 501.967587][ T7441] ? __pfx_kthread+0x10/0x10 [ 501.967618][ T7441] ret_from_fork+0x514/0xb70 [ 501.967649][ T7441] ? __pfx_ret_from_fork+0x10/0x10 [ 501.967676][ T7441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.967708][ T7441] ? __switch_to+0xc89/0x1420 [ 501.967753][ T7441] ? __pfx_kthread+0x10/0x10 [ 501.967784][ T7441] ret_from_fork_asm+0x1a/0x30 [ 501.967850][ T7441] [ 501.982631][ T7441] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 502.054450][ T5617] Bluetooth: hci0: command tx timeout [ 502.222324][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.273495][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.292964][ T139] bond0 (unregistering): Released all slaves [ 502.608121][ T9546] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 503.000736][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 503.001024][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 503.257576][ T9317] team0: Port device team_slave_0 added [ 503.327362][ T9317] team0: Port device team_slave_1 added [ 503.724841][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.724867][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.724903][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.732161][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.732185][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.732222][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.134498][ T4931] Bluetooth: hci0: command tx timeout [ 505.150080][ T9317] hsr_slave_0: entered promiscuous mode [ 505.151795][ T9317] hsr_slave_1: entered promiscuous mode [ 505.152893][ T9317] debugfs: 'hsr0' already exists in 'hsr' [ 505.152918][ T9317] Cannot create hsr debugfs directory [ 506.337520][ T4931] Bluetooth: hci0: command tx timeout [ 506.608968][ T139] hsr_slave_0: left promiscuous mode [ 506.610403][ T139] hsr_slave_1: left promiscuous mode [ 506.611465][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.611486][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.612315][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.612338][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.626887][ T5837] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 506.629968][ T139] veth1_macvtap: left promiscuous mode [ 506.630012][ T139] veth0_macvtap: left promiscuous mode [ 506.630161][ T139] veth1_vlan: left promiscuous mode [ 506.630275][ T139] veth0_vlan: left promiscuous mode [ 506.795080][ T5837] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 506.796629][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.832033][ T5837] usb 9-1: config 0 descriptor?? [ 507.068041][ T5837] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 507.111610][ T139] team0 (unregistering): Port device team_slave_1 removed [ 507.135103][ T139] team0 (unregistering): Port device team_slave_0 removed [ 507.346163][ T5837] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 507.346199][ T5837] [drm] Initialized udl on minor 1 [ 507.587278][ T7466] IPVS: starting estimator thread 0... [ 507.602689][ T9608] loop8: detected capacity change from 0 to 512 [ 507.613288][ T9608] ext4: Unknown parameter 'nogrpid"errors' [ 507.675110][ T9611] IPVS: using max 24 ests per chain, 57600 per kthread [ 507.884497][ T9449] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.884671][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.884897][ T9449] bridge_slave_0: entered allmulticast mode [ 507.888754][ T9449] bridge_slave_0: entered promiscuous mode [ 507.945034][ T9449] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.945195][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.945390][ T9449] bridge_slave_1: entered allmulticast mode [ 508.005072][ T9449] bridge_slave_1: entered promiscuous mode [ 508.374255][ T4931] Bluetooth: hci0: command tx timeout [ 510.130723][ T9449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.159729][ T9449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.642906][ T5837] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 512.785516][ T5837] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 512.829649][ T9593] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 512.905296][ T5632] usb 9-1: USB disconnect, device number 2 [ 513.695296][ T139] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.082072][ T9449] team0: Port device team_slave_0 added [ 515.448167][ T9655] loop9: detected capacity change from 0 to 128 [ 515.501320][ T9655] EXT4-fs (loop9): Test dummy encryption mode enabled [ 518.395685][ T9655] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 518.396257][ T9655] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 519.375455][ T8631] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 519.530139][ T9449] team0: Port device team_slave_1 added [ 519.842068][ T9677] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 520.592799][ T139] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.051156][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.051183][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.051219][ T9449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.053231][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.053248][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.053277][ T9449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.892902][ T139] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.511978][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.518951][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.520298][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.521466][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.523037][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.591511][ T139] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.979178][ T9449] hsr_slave_0: entered promiscuous mode [ 525.013722][ T9449] hsr_slave_1: entered promiscuous mode [ 525.876105][ T9449] debugfs: 'hsr0' already exists in 'hsr' [ 525.876135][ T9449] Cannot create hsr debugfs directory [ 526.140986][ T9719] jffs2: notice: (9719) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 526.775417][ T4931] Bluetooth: hci5: command tx timeout [ 528.928845][ T4931] Bluetooth: hci5: command tx timeout [ 529.301646][ T9738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.324437][ T4931] Bluetooth: hci5: command tx timeout [ 531.610285][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.610422][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.610645][ T9539] bridge_slave_0: entered allmulticast mode [ 531.653143][ T9539] bridge_slave_0: entered promiscuous mode [ 531.676430][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.676588][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.683833][ T9539] bridge_slave_1: entered allmulticast mode [ 531.725473][ T9539] bridge_slave_1: entered promiscuous mode [ 532.189932][ T9539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.256462][ T9539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.986903][ T9746] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 532.993747][ T9746] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 533.074932][ T9746] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 533.075027][ T9746] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 533.141333][ T9746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 533.141436][ T9746] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 533.172884][ T9746] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 533.173624][ T9746] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 533.212123][ T9746] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 533.297722][ T9746] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 533.297799][ T9746] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 533.339740][ T9539] team0: Port device team_slave_0 added [ 533.342092][ T9746] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 533.373966][ T9539] team0: Port device team_slave_1 added [ 533.394454][ T5631] Bluetooth: hci5: command tx timeout [ 533.444015][ T9746] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 533.444220][ T9746] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 533.493121][ T9746] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 533.531430][ T9746] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 533.531513][ T9746] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 533.638799][ T9746] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 535.014348][ T4931] Bluetooth: hci1: command 0x0406 tx timeout [ 535.094421][ T4931] Bluetooth: hci4: command 0x0406 tx timeout [ 535.188543][ T4931] Bluetooth: hci6: command 0x0c1a tx timeout [ 535.188787][ T4931] Bluetooth: hci3: command 0x0406 tx timeout [ 535.340928][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 535.494513][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 535.644582][ T5631] Bluetooth: hci5: command 0x0c1a tx timeout [ 537.135162][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 537.193385][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 537.268497][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 537.424678][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 537.839110][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 537.839269][ T5631] Bluetooth: hci5: command 0x0c1a tx timeout [ 539.421880][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.421904][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.421940][ T9539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.428396][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.428418][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.428454][ T9539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.510652][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout [ 539.895395][ T4931] Bluetooth: hci5: command 0x0c1a tx timeout [ 539.895446][ T4931] Bluetooth: hci0: command 0x0c1a tx timeout [ 543.069530][ T9815] loop9: detected capacity change from 0 to 1024 [ 543.080156][ T9815] hfsplus: Unknown parameter '00000000000000000000ÿ0x0000000000000000' [ 543.486917][ T139] bridge_slave_1: left allmulticast mode [ 543.487041][ T139] bridge_slave_1: left promiscuous mode [ 543.487318][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.848968][ T139] bridge_slave_0: left allmulticast mode [ 543.849290][ T139] bridge_slave_0: left promiscuous mode [ 543.853285][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.233724][ T4931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 544.243720][ T4931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 544.254146][ T4931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 544.258693][ T4931] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 544.261605][ T4931] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 544.316266][ T139] bridge_slave_1: left allmulticast mode [ 544.316303][ T139] bridge_slave_1: left promiscuous mode [ 544.316526][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.321449][ T139] bridge_slave_0: left allmulticast mode [ 544.321476][ T139] bridge_slave_0: left promiscuous mode [ 544.321718][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.180033][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.250442][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.274486][ T139] bond0 (unregistering): Released all slaves [ 545.855870][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.880538][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.897409][ T139] bond0 (unregistering): Released all slaves [ 546.039149][ T9855] nvmet: adding nsid 1 to subsystem testsubsys [ 546.267178][ T9837] syzkaller0: entered promiscuous mode [ 546.267207][ T9837] syzkaller0: entered allmulticast mode [ 546.394285][ T5631] Bluetooth: hci6: command tx timeout [ 546.493001][ T9539] hsr_slave_0: entered promiscuous mode [ 546.512082][ T9539] hsr_slave_1: entered promiscuous mode [ 546.512951][ T9539] debugfs: 'hsr0' already exists in 'hsr' [ 546.512975][ T9539] Cannot create hsr debugfs directory [ 546.918604][ T9865] loop9: detected capacity change from 0 to 1024 [ 546.925010][ T9865] hfsplus: Unknown parameter '00000000000000000000ÿ0x0000000000000000' [ 549.593003][ T4931] Bluetooth: hci6: command tx timeout [ 550.463784][ T9885] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 552.817554][ T5631] Bluetooth: hci6: command tx timeout [ 553.375586][ T9894] loop9: detected capacity change from 0 to 32768 [ 553.382874][ T9894] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.753 (9894) [ 553.417326][ T9894] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 553.417366][ T9894] BTRFS info (device loop9): using sha256 checksum algorithm [ 553.563462][ T9894] BTRFS info (device loop9): enabling ssd optimizations [ 553.563500][ T9894] BTRFS info (device loop9): turning on sync discard [ 553.563522][ T9894] BTRFS info (device loop9): enabling free space tree [ 553.563546][ T9894] BTRFS info (device loop9): use zlib compression, level 3 [ 554.272320][ T31] kauditd_printk_skb: 97 callbacks suppressed [ 554.272373][ T31] audit: type=1800 audit(1790197290.432:280): pid=9915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.753" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 554.874256][ T5631] Bluetooth: hci6: command tx timeout [ 555.252320][ T139] hsr_slave_0: left promiscuous mode [ 555.267012][ T139] hsr_slave_1: left promiscuous mode [ 555.268196][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.268222][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.272186][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.272209][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.329676][ T139] hsr_slave_0: left promiscuous mode [ 555.347493][ T139] hsr_slave_1: left promiscuous mode [ 555.348793][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.364988][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.429817][ T139] veth1_macvtap: left promiscuous mode [ 555.429863][ T139] veth0_macvtap: left promiscuous mode [ 555.430006][ T139] veth1_vlan: left promiscuous mode [ 555.430087][ T139] veth0_vlan: left promiscuous mode [ 558.275243][ T8631] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 560.489875][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.499046][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.510088][ T4931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.511199][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 560.511975][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 562.586718][ T4931] Bluetooth: hci2: command tx timeout [ 562.588695][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.588767][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.179789][ T139] team0 (unregistering): Port device team_slave_1 removed [ 563.550061][ T139] team0 (unregistering): Port device team_slave_0 removed [ 563.767550][ T5632] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 564.428056][ T5632] usb 1-1: Using ep0 maxpacket: 32 [ 564.428802][ T5632] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 564.431891][ T5632] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 564.484092][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.484138][ T5632] usb 1-1: Product: syz [ 564.484159][ T5632] usb 1-1: Manufacturer: syz [ 564.484179][ T5632] usb 1-1: SerialNumber: syz [ 564.614599][ T4931] Bluetooth: hci2: command tx timeout [ 564.793469][ T5632] usb 1-1: selecting invalid altsetting 1 [ 564.812998][ T5632] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 564.832638][ T5632] usb 1-1: selecting invalid altsetting 1 [ 564.833652][ T5632] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 564.860371][ T5632] usb 1-1: selecting invalid altsetting 1 [ 564.961396][ T5632] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 564.987944][ T5632] usb 1-1: USB disconnect, device number 5 [ 565.086082][ T8058] udevd[8058]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.371700][ T139] team0 (unregistering): Port device team_slave_1 removed [ 565.431503][ T139] team0 (unregistering): Port device team_slave_0 removed [ 566.863372][ T4931] Bluetooth: hci2: command tx timeout [ 568.990895][ T4931] Bluetooth: hci2: command tx timeout [ 569.831211][ T9984] bridge0: port 3(syz_tun) entered blocking state [ 569.831345][ T9984] bridge0: port 3(syz_tun) entered disabled state [ 569.831533][ T9984] syz_tun: entered allmulticast mode [ 569.873296][ T9984] syz_tun: entered promiscuous mode [ 569.888472][ T9984] bridge0: port 3(syz_tun) entered blocking state [ 569.890532][ T9984] bridge0: port 3(syz_tun) entered forwarding state [ 570.281049][T10010] use of bytesused == 0 is deprecated and will be removed in the future, [ 570.281121][T10010] use the actual size instead. [ 575.208222][ T9702] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.212396][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.212602][ T9702] bridge_slave_0: entered allmulticast mode [ 575.249394][T10047] Bluetooth: MGMT ver 1.23 [ 575.251381][ T9702] bridge_slave_0: entered promiscuous mode [ 575.303879][ T9702] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.304032][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.304799][ T9702] bridge_slave_1: entered allmulticast mode [ 575.343241][ T9702] bridge_slave_1: entered promiscuous mode [ 576.166687][ T8005] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 576.479574][ T8005] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 576.482185][ T8005] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 576.482206][ T8005] usb 1-1: config 1 has no interface number 0 [ 576.510932][ T8005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.510956][ T8005] usb 1-1: Product: syz [ 576.510969][ T8005] usb 1-1: Manufacturer: syz [ 576.510983][ T8005] usb 1-1: SerialNumber: syz [ 576.581809][ T8005] usb 1-1: 3:0 : does not exist [ 576.581840][ T8005] usb 1-1: 3:0 : does not exist [ 578.661148][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 578.668477][ T5631] Bluetooth: hci2: command 0x0401 tx timeout [ 578.668557][ T5631] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 578.668579][ T5631] Bluetooth: hci1: unexpected event for opcode 0x206e [ 578.760362][ T8005] usb 1-1: USB disconnect, device number 6 [ 578.778603][ T9702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.846975][ T9702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.175361][ T8058] udevd[8058]: setting mode of /dev/bus/usb/001/006 to 020664 failed: No such file or directory [ 579.175493][ T8058] udevd[8058]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 579.183525][ T139] bridge_slave_1: left allmulticast mode [ 579.183552][ T139] bridge_slave_1: left promiscuous mode [ 579.183773][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.972075][ T139] bridge_slave_0: left allmulticast mode [ 579.972111][ T139] bridge_slave_0: left promiscuous mode [ 580.006251][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.013037][ T8058] udevd[8058]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.150407][ T139] bridge_slave_1: left allmulticast mode [ 580.150440][ T139] bridge_slave_1: left promiscuous mode [ 580.150769][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.207580][ T139] bridge_slave_0: left allmulticast mode [ 580.207644][ T139] bridge_slave_0: left promiscuous mode [ 580.207880][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.371217][ T139] bridge_slave_1: left allmulticast mode [ 580.371255][ T139] bridge_slave_1: left promiscuous mode [ 580.371499][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.403895][ T139] bridge_slave_0: left allmulticast mode [ 580.403930][ T139] bridge_slave_0: left promiscuous mode [ 580.410651][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.713297][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.801375][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.849028][ T139] bond0 (unregistering): Released all slaves [ 586.579445][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.582508][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.583276][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.606520][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.611368][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.830340][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.906081][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.939109][ T139] bond0 (unregistering): Released all slaves [ 587.018916][T10109] loop9: detected capacity change from 0 to 1024 [ 587.035189][T10109] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 587.040352][T10109] JBD2: no valid journal superblock found [ 587.082906][T10109] EXT4-fs (loop9): Could not load journal inode [ 588.794867][ T5631] Bluetooth: hci0: command tx timeout [ 589.482928][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.559525][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.602204][ T139] bond0 (unregistering): Released all slaves [ 590.857347][ T5631] Bluetooth: hci0: command tx timeout [ 591.069382][ T139] hsr_slave_0: left promiscuous mode [ 591.140174][ T139] hsr_slave_1: left promiscuous mode [ 591.199096][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.295495][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.220828][ T139] hsr_slave_0: left promiscuous mode [ 592.246090][ T139] hsr_slave_1: left promiscuous mode [ 592.246904][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.282364][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.485776][ T139] hsr_slave_0: left promiscuous mode [ 592.514388][ T139] hsr_slave_1: left promiscuous mode [ 592.515492][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.403756][ T5631] Bluetooth: hci0: command tx timeout [ 596.281151][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.454209][ T5631] Bluetooth: hci0: command tx timeout [ 600.131594][ T139] team0 (unregistering): Port device team_slave_1 removed [ 600.182299][ T139] team0 (unregistering): Port device team_slave_0 removed [ 601.248312][ T139] team0 (unregistering): Port device team_slave_1 removed [ 601.312247][ T139] team0 (unregistering): Port device team_slave_0 removed [ 606.074476][ T4931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 606.081318][ T4931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 606.109395][ T4931] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 606.125797][ T4931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 606.133837][ T4931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.476254][ T139] team0 (unregistering): Port device team_slave_1 removed [ 607.586456][ T139] team0 (unregistering): Port device team_slave_0 removed [ 608.219009][ T4931] Bluetooth: hci5: command tx timeout [ 608.938531][ T9823] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 611.857202][ T4931] Bluetooth: hci5: command tx timeout [ 612.409766][T10254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.894174][ T4931] Bluetooth: hci5: command tx timeout [ 615.974490][ T4931] Bluetooth: hci5: command tx timeout [ 617.201233][T10276] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 617.765754][T10281] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 617.765853][T10281] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 617.772325][T10281] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 617.776811][T10281] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 621.164625][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 621.191078][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 621.766956][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 621.781819][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 621.803999][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 622.539185][T10327] loop9: detected capacity change from 0 to 512 [ 622.558467][T10327] EXT4-fs (loop9): Test dummy encryption mode enabled [ 622.584235][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 622.627253][T10327] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.803: bg 0: block 7: invalid block bitmap [ 622.627301][T10327] loop9: lost filesystem error report for type 5 error -117 [ 622.634106][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 622.634133][ C1] EXT4-fs (loop9): initial error at time 1790197358: ext4_validate_block_bitmap:436 [ 622.634164][ C1] EXT4-fs (loop9): last error at time 1790197358: ext4_validate_block_bitmap:436 [ 622.724723][T10327] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 622.724755][T10327] loop9: lost filesystem error report for type 5 error -117 [ 622.727732][T10327] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2933: inode #11: comm syz.9.803: corrupted xattr block 95: invalid header [ 622.727773][T10327] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 622.732805][T10327] EXT4-fs warning (device loop9): ext4_evict_inode:288: xattr delete (err -117) [ 622.732935][T10327] EXT4-fs (loop9): 1 orphan inode deleted [ 622.739653][T10327] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.745515][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 622.748238][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.813255][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.821046][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.929864][T10327] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 624.054159][ T5631] Bluetooth: hci6: command tx timeout [ 624.434569][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.601550][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.867083][ T10] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 624.908719][T10343] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 624.908754][T10343] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 624.996361][ T8631] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.003701][ T10] usb 1-1: USB disconnect, device number 7 [ 626.134152][ T5631] Bluetooth: hci6: command tx timeout [ 626.190927][ T139] bridge_slave_1: left allmulticast mode [ 626.190962][ T139] bridge_slave_1: left promiscuous mode [ 626.191209][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.202787][ T139] bridge_slave_0: left allmulticast mode [ 626.202812][ T139] bridge_slave_0: left promiscuous mode [ 626.206353][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.236029][T10359] loop8: detected capacity change from 0 to 512 [ 626.248679][T10359] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 626.367605][T10359] EXT4-fs (loop8): 1 truncate cleaned up [ 626.415549][T10359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.912392][T10373] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 628.408765][ T5631] Bluetooth: hci6: command tx timeout [ 628.433957][ T139] bond0 (unregistering): Released all slaves [ 628.651148][ T8625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.690430][ T139] bond0 (unregistering): Released all slaves [ 630.271225][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.291634][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.308252][ T139] bond0 (unregistering): Released all slaves [ 630.464920][ T5631] Bluetooth: hci6: command tx timeout [ 634.781832][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.784601][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.784784][T10098] bridge_slave_0: entered allmulticast mode [ 634.799196][T10098] bridge_slave_0: entered promiscuous mode [ 634.813829][T10210] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.813955][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.814532][T10210] bridge_slave_0: entered allmulticast mode [ 634.851420][T10210] bridge_slave_0: entered promiscuous mode [ 634.974314][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.974544][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.974700][T10098] bridge_slave_1: entered allmulticast mode [ 634.990424][T10098] bridge_slave_1: entered promiscuous mode [ 635.143343][T10210] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.143498][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.143655][T10210] bridge_slave_1: entered allmulticast mode [ 635.154742][T10210] bridge_slave_1: entered promiscuous mode [ 637.299628][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.468528][T10210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.637080][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.679893][T10210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.149298][T10210] team0: Port device team_slave_0 added [ 639.170382][T10098] team0: Port device team_slave_0 added [ 639.255992][T10451] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 640.767191][T10210] team0: Port device team_slave_1 added [ 640.819016][T10098] team0: Port device team_slave_1 added [ 641.116526][T10210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.116550][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.116583][T10210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.118462][T10210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.118480][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.118512][T10210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.227011][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.227034][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.227069][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.296390][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.300683][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.300723][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.660375][T10210] hsr_slave_0: entered promiscuous mode [ 641.668180][T10210] hsr_slave_1: entered promiscuous mode [ 641.669219][T10210] debugfs: 'hsr0' already exists in 'hsr' [ 641.669244][T10210] Cannot create hsr debugfs directory [ 641.850800][T10098] hsr_slave_0: entered promiscuous mode [ 641.853440][T10098] hsr_slave_1: entered promiscuous mode [ 641.858326][T10098] debugfs: 'hsr0' already exists in 'hsr' [ 641.858360][T10098] Cannot create hsr debugfs directory [ 643.770339][T10309] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.770476][T10309] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.770999][T10309] bridge_slave_0: entered allmulticast mode [ 643.805813][T10309] bridge_slave_0: entered promiscuous mode [ 644.333718][T10309] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.347090][T10309] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.464549][T10309] bridge_slave_1: entered allmulticast mode [ 644.783361][T10309] bridge_slave_1: entered promiscuous mode [ 644.855678][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 644.862183][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 644.862997][ T4931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 644.886338][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 644.888615][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 645.463381][T10487] Bluetooth: MGMT ver 1.23 [ 645.480405][T10487] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 645.630999][T10309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.668508][T10309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.953909][T10309] team0: Port device team_slave_0 added [ 645.973387][T10309] team0: Port device team_slave_1 added [ 646.067915][T10309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.067941][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.067977][T10309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.073163][T10309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.073185][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.073653][T10309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.219549][T10493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.219582][T10493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.223249][T10493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.223274][T10493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.182652][ T4931] Bluetooth: hci2: command tx timeout [ 647.235203][T10493] batman_adv: batadv0: Interface deactivated: gretap1 [ 647.235230][T10493] batman_adv: batadv0: Removing interface: gretap1 [ 649.721776][ T4931] Bluetooth: hci2: command tx timeout [ 650.796922][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.847'. [ 651.734137][ T4931] Bluetooth: hci2: command tx timeout [ 652.111053][T10309] hsr_slave_0: entered promiscuous mode [ 652.115579][T10309] hsr_slave_1: entered promiscuous mode [ 652.118112][T10309] debugfs: 'hsr0' already exists in 'hsr' [ 652.118135][T10309] Cannot create hsr debugfs directory [ 652.273134][ T139] bridge_slave_1: left allmulticast mode [ 652.273167][ T139] bridge_slave_1: left promiscuous mode [ 652.273445][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.304742][ T139] bridge_slave_0: left allmulticast mode [ 652.304777][ T139] bridge_slave_0: left promiscuous mode [ 652.305176][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.649927][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.666764][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.671660][ T139] bond0 (unregistering): Released all slaves [ 653.083329][ T139] hsr_slave_0: left promiscuous mode [ 653.098141][ T139] hsr_slave_1: left promiscuous mode [ 653.099294][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.100240][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.397057][T10550] loop9: detected capacity change from 0 to 256 [ 653.692941][ T139] team0 (unregistering): Port device team_slave_1 removed [ 653.739083][ T139] team0 (unregistering): Port device team_slave_0 removed [ 653.822000][ T4931] Bluetooth: hci2: command tx timeout [ 654.966407][T10565] FAULT_INJECTION: forcing a failure. [ 654.966407][T10565] name fail_futex, interval 1, probability 0, space 0, times 1 [ 654.966454][T10565] CPU: 0 UID: 0 PID: 10565 Comm: syz.8.853 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.966494][T10565] Tainted: [L]=SOFTLOCKUP [ 654.966505][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 654.966523][T10565] Call Trace: [ 654.966534][T10565] [ 654.966547][T10565] dump_stack_lvl+0xe8/0x150 [ 654.966596][T10565] should_fail_ex+0x410/0x560 [ 654.966639][T10565] get_futex_key+0x1b4/0x1580 [ 654.966673][T10565] ? __entry_text_end+0x102035/0x102039 [ 654.966708][T10565] ? __lock_acquire+0x747/0x2de0 [ 654.966749][T10565] ? kasan_save_track+0x3e/0x80 [ 654.966780][T10565] ? __kasan_slab_free+0x5c/0x80 [ 654.966813][T10565] ? kmem_cache_free+0x182/0x650 [ 654.966849][T10565] ? __pfx_get_futex_key+0x10/0x10 [ 654.966910][T10565] futex_wake+0x119/0x5f0 [ 654.966966][T10565] ? __pfx_futex_wake+0x10/0x10 [ 654.967036][T10565] do_futex+0x458/0x4e0 [ 654.967076][T10565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.967118][T10565] ? __pfx_do_futex+0x10/0x10 [ 654.967155][T10565] ? kmem_cache_free+0x182/0x650 [ 654.967198][T10565] __se_sys_futex+0x3a8/0x450 [ 654.967248][T10565] ? __pfx___se_sys_futex+0x10/0x10 [ 654.967289][T10565] ? rcu_is_watching+0x16/0xb0 [ 654.967336][T10565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.967368][T10565] ? __x64_sys_futex+0x21/0xf0 [ 654.967409][T10565] do_syscall_64+0x166/0x520 [ 654.967447][T10565] ? trace_irq_disable+0x3b/0x140 [ 654.967477][T10565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.967514][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.967546][T10565] RIP: 0033:0x7f6f8599e159 [ 654.967572][T10565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.967598][T10565] RSP: 002b:00007f6f868cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 654.967646][T10565] RAX: ffffffffffffffda RBX: 00007f6f85c26098 RCX: 00007f6f8599e159 [ 654.967670][T10565] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6f85c2609c [ 654.967695][T10565] RBP: 00007f6f85c26090 R08: 3fffffffffffffff R09: 0000000000000000 [ 654.967717][T10565] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 654.967737][T10565] R13: 00007f6f85c26128 R14: 00007fff8ef92390 R15: 00007fff8ef92478 [ 654.967781][T10565] [ 655.734838][T10210] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 655.775880][T10210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.941154][T10210] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 655.993142][T10210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.001387][T10210] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 656.039112][T10210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.056687][T10571] CIFS: Attempting to mount //127.0.0.1/share [ 656.160630][T10574] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 656.180218][T10574] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 656.234482][T10574] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 656.246531][T10210] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 656.266100][T10571] CIFS: VFS: cifs_mount failed w/return code = -112 [ 656.282941][T10210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.442273][T10585] serial 00:02: in use; can't configure [ 656.442830][T10585] serial 00:02: in use; can't configure [ 656.443087][T10585] serial 00:02: in use; can't configure [ 656.443284][T10585] serial 00:02: in use; can't configure [ 656.478539][T10585] serial 00:03: in use; can't configure [ 656.478712][T10585] serial 00:03: in use; can't configure [ 656.497556][T10585] serial 00:03: in use; can't configure [ 656.533647][T10575] printk: console [ttyS0] disabled [ 659.468946][T10585] printk: console [ttyS0] enabled [ 659.726365][T10590] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 662.451956][T10636] xt_hashlimit: max too large, truncated to 1048576 [ 662.452057][T10636] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 663.090066][T10210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.261621][T10641] loop9: detected capacity change from 0 to 16 [ 663.454914][T10641] erofs (device loop9): mounted with root inode @ nid 36. [ 664.073958][T10210] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.135658][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.135786][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.383048][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.383193][ T7466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.475900][T10647] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 666.174234][T10656] loop8: detected capacity change from 0 to 256 [ 667.883116][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.912564][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.913937][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.937597][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.940536][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 668.191756][T10671] ================================================================== [ 668.191778][T10671] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 668.191811][T10671] Read of size 1 at addr ffff88802603a380 by task syz.9.870/10671 [ 668.191834][T10671] [ 668.191852][T10671] CPU: 1 UID: 0 PID: 10671 Comm: syz.9.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.191891][T10671] Tainted: [L]=SOFTLOCKUP [ 668.191901][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 668.191918][T10671] Call Trace: [ 668.191928][T10671] [ 668.191939][T10671] dump_stack_lvl+0xe8/0x150 [ 668.191979][T10671] print_address_description+0x55/0x1e0 [ 668.192015][T10671] ? string+0x216/0x2d0 [ 668.192040][T10671] print_report+0x58/0x70 [ 668.192073][T10671] kasan_report+0x117/0x150 [ 668.192109][T10671] ? string+0x216/0x2d0 [ 668.192139][T10671] string+0x216/0x2d0 [ 668.192168][T10671] vsnprintf+0x74a/0xef0 [ 668.192202][T10671] vprintk_store+0x3be/0xd90 [ 668.192254][T10671] ? __pfx_vprintk_store+0x10/0x10 [ 668.192289][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.192322][T10671] ? stack_trace_save+0xa9/0x100 [ 668.192350][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.192380][T10671] ? __mutex_trylock_common+0x15f/0x270 [ 668.192419][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.192455][T10671] vprintk_emit+0x192/0x560 [ 668.192490][T10671] ? __pfx_vprintk_emit+0x10/0x10 [ 668.192530][T10671] _printk+0xdd/0x130 [ 668.192562][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.192597][T10671] ? __pfx__printk+0x10/0x10 [ 668.192624][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.192655][T10671] ? rcu_is_watching+0x16/0xb0 [ 668.192692][T10671] __setup_irq+0x1015/0x2100 [ 668.192730][T10671] request_threaded_irq+0x2c1/0x3a0 [ 668.192757][T10671] ? __pfx_pcl812_interrupt+0x10/0x10 [ 668.192794][T10671] pcl812_attach+0x254/0x22b0 [ 668.192834][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.192865][T10671] ? __raw_spin_lock_init+0x45/0x100 [ 668.192906][T10671] comedi_device_attach+0x52d/0x720 [ 668.192946][T10671] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 668.192984][T10671] ? kasan_quarantine_put+0xbb/0x1f0 [ 668.193012][T10671] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 668.193050][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.193081][T10671] ? do_vfs_ioctl+0x116f/0x1530 [ 668.193113][T10671] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 668.193149][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.193180][T10671] ? hook_file_ioctl+0x1f2/0x600 [ 668.193213][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.193269][T10671] ? __fget_files+0x2a/0x420 [ 668.193309][T10671] ? __fget_files+0x2a/0x420 [ 668.193345][T10671] ? __fget_files+0x3a2/0x420 [ 668.193380][T10671] ? __fget_files+0x2a/0x420 [ 668.193419][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.193450][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.193482][T10671] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 668.193510][T10671] __se_sys_ioctl+0xfc/0x170 [ 668.193539][T10671] do_syscall_64+0x166/0x520 [ 668.193573][T10671] ? trace_irq_disable+0x3b/0x140 [ 668.193601][T10671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.193632][T10671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.193659][T10671] RIP: 0033:0x7f2867d9e159 [ 668.193682][T10671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.193706][T10671] RSP: 002b:00007f2868c4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.193735][T10671] RAX: ffffffffffffffda RBX: 00007f2868025fa0 RCX: 00007f2867d9e159 [ 668.193755][T10671] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000005 [ 668.193774][T10671] RBP: 00007f2867e3506b R08: 0000000000000000 R09: 0000000000000000 [ 668.193791][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.193808][T10671] R13: 00007f2868026038 R14: 00007f2868025fa0 R15: 00007ffd881f7be8 [ 668.193840][T10671] [ 668.193850][T10671] [ 668.193857][T10671] Allocated by task 1: [ 668.193869][T10671] kasan_save_track+0x3e/0x80 [ 668.193896][T10671] __kasan_kmalloc+0x93/0xb0 [ 668.193923][T10671] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 668.193950][T10671] kvasprintf+0xeb/0x1a0 [ 668.193982][T10671] kasprintf+0xe2/0x140 [ 668.194013][T10671] serial_core_register_port+0x611/0x2b60 [ 668.194052][T10671] serial8250_register_8250_port+0x17fb/0x21d0 [ 668.194089][T10671] serial_pnp_probe+0x576/0x800 [ 668.194129][T10671] pnp_device_probe+0x30b/0x4c0 [ 668.194165][T10671] really_probe+0x254/0xae0 [ 668.194196][T10671] __driver_probe_device+0x1e8/0x360 [ 668.194226][T10671] driver_probe_device+0x4f/0x240 [ 668.194363][T10671] __driver_attach+0x339/0x600 [ 668.194394][T10671] bus_for_each_dev+0x23b/0x2c0 [ 668.194431][T10671] bus_add_driver+0x345/0x670 [ 668.194468][T10671] driver_register+0x23a/0x320 [ 668.194499][T10671] serial8250_init+0x8f/0x160 [ 668.194537][T10671] do_one_initcall+0x250/0x870 [ 668.194572][T10671] do_initcall_level+0x10a/0x1a0 [ 668.194610][T10671] do_initcalls+0x59/0xa0 [ 668.194646][T10671] kernel_init_freeable+0x29d/0x3e0 [ 668.194683][T10671] kernel_init+0x22/0x1d0 [ 668.194721][T10671] ret_from_fork+0x514/0xb70 [ 668.194744][T10671] ret_from_fork_asm+0x1a/0x30 [ 668.194782][T10671] [ 668.194789][T10671] Freed by task 10575: [ 668.194803][T10671] kasan_save_track+0x3e/0x80 [ 668.194830][T10671] kasan_save_free_info+0x40/0x50 [ 668.194868][T10671] __kasan_slab_free+0x5c/0x80 [ 668.194895][T10671] kfree+0x1c5/0x650 [ 668.194930][T10671] serial_core_unregister_port+0x490/0xb40 [ 668.194971][T10671] serial8250_unregister_port+0x27d/0x720 [ 668.195008][T10671] pnp_device_remove+0x82/0x260 [ 668.195045][T10671] device_release_driver_internal+0x48b/0x880 [ 668.195077][T10671] unbind_store+0x1a1/0x1d0 [ 668.195102][T10671] kernfs_fop_write_iter+0x3a4/0x540 [ 668.195134][T10671] vfs_write+0x612/0xba0 [ 668.195171][T10671] ksys_write+0x150/0x270 [ 668.195208][T10671] do_syscall_64+0x166/0x520 [ 668.195250][T10671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.195275][T10671] [ 668.195282][T10671] The buggy address belongs to the object at ffff88802603a380 [ 668.195282][T10671] which belongs to the cache kmalloc-8 of size 8 [ 668.195305][T10671] The buggy address is located 0 bytes inside of [ 668.195305][T10671] freed 8-byte region [ffff88802603a380, ffff88802603a388) [ 668.195332][T10671] [ 668.195339][T10671] The buggy address belongs to the physical page: [ 668.195352][T10671] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2603a [ 668.195376][T10671] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 668.195398][T10671] page_type: f5(slab) [ 668.195422][T10671] raw: 00fff00000000000 ffff88801b041500 dead000000000100 dead000000000122 [ 668.195446][T10671] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 668.195461][T10671] page dumped because: kasan: bad access detected [ 668.195475][T10671] page_owner tracks the page as allocated [ 668.195485][T10671] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5251889917 [ 668.195526][T10671] post_alloc_hook+0x1f9/0x250 [ 668.195564][T10671] get_page_from_freelist+0x2209/0x2280 [ 668.195592][T10671] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 668.195620][T10671] allocate_slab+0x7d/0x620 [ 668.195652][T10671] refill_objects+0x2d5/0x350 [ 668.195685][T10671] __pcs_replace_empty_main+0x2c8/0x6c0 [ 668.195716][T10671] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 668.195741][T10671] kstrdup+0x42/0x100 [ 668.195765][T10671] __kernfs_new_node+0xa9/0x980 [ 668.195788][T10671] kernfs_new_node+0xea/0x140 [ 668.195811][T10671] kernfs_create_link+0xa7/0x200 [ 668.195844][T10671] sysfs_do_create_link_sd+0x83/0x110 [ 668.195883][T10671] device_create_sys_dev_entry+0x122/0x190 [ 668.195911][T10671] device_add+0x71e/0xb80 [ 668.195934][T10671] tty_register_device_attr+0x425/0x990 [ 668.195962][T10671] tty_register_driver+0x868/0xe50 [ 668.195989][T10671] page_owner free stack trace missing [ 668.195999][T10671] [ 668.196004][T10671] Memory state around the buggy address: [ 668.196017][T10671] ffff88802603a280: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 668.196034][T10671] ffff88802603a300: 05 fc fc fc 07 fc fc fc 05 fc fc fc 05 fc fc fc [ 668.196052][T10671] >ffff88802603a380: fa fc fc fc 07 fc fc fc fa fc fc fc fa fc fc fc [ 668.196066][T10671] ^ [ 668.196079][T10671] ffff88802603a400: 05 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 668.196097][T10671] ffff88802603a480: 04 fc fc fc 00 fc fc fc 00 fc fc fc 06 fc fc fc [ 668.196110][T10671] ================================================================== [ 668.196123][T10671] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 669.063343][T10671] CPU: 1 UID: 0 PID: 10671 Comm: syz.9.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.074319][T10671] Tainted: [L]=SOFTLOCKUP [ 669.078640][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 669.088704][T10671] Call Trace: [ 669.091999][T10671] [ 669.094946][T10671] vpanic+0x56d/0xa60 [ 669.098959][T10671] ? __pfx_vpanic+0x10/0x10 [ 669.103476][T10671] panic+0xc5/0xd0 [ 669.107207][T10671] ? __pfx_panic+0x10/0x10 [ 669.111651][T10671] ? string+0x216/0x2d0 [ 669.115805][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.121450][T10671] ? rcu_is_watching+0x16/0xb0 [ 669.126221][T10671] ? string+0x216/0x2d0 [ 669.130392][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.136053][T10671] ? string+0x216/0x2d0 [ 669.140231][T10671] check_panic_on_warn+0x89/0xb0 [ 669.145188][T10671] ? string+0x216/0x2d0 [ 669.149348][T10671] end_report+0x73/0x170 [ 669.153678][T10671] ? string+0x216/0x2d0 [ 669.157883][T10671] kasan_report+0x128/0x150 [ 669.162395][T10671] ? string+0x216/0x2d0 [ 669.166553][T10671] string+0x216/0x2d0 [ 669.170540][T10671] vsnprintf+0x74a/0xef0 [ 669.174783][T10671] vprintk_store+0x3be/0xd90 [ 669.179406][T10671] ? __pfx_vprintk_store+0x10/0x10 [ 669.184546][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.190421][T10671] ? stack_trace_save+0xa9/0x100 [ 669.195391][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.201053][T10671] ? __mutex_trylock_common+0x15f/0x270 [ 669.206642][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.212300][T10671] vprintk_emit+0x192/0x560 [ 669.216916][T10671] ? __pfx_vprintk_emit+0x10/0x10 [ 669.221980][T10671] _printk+0xdd/0x130 [ 669.226074][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.231774][T10671] ? __pfx__printk+0x10/0x10 [ 669.236375][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.242036][T10671] ? rcu_is_watching+0x16/0xb0 [ 669.246843][T10671] __setup_irq+0x1015/0x2100 [ 669.251637][T10671] request_threaded_irq+0x2c1/0x3a0 [ 669.256856][T10671] ? __pfx_pcl812_interrupt+0x10/0x10 [ 669.262248][T10671] pcl812_attach+0x254/0x22b0 [ 669.266968][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.272634][T10671] ? __raw_spin_lock_init+0x45/0x100 [ 669.277950][T10671] comedi_device_attach+0x52d/0x720 [ 669.283176][T10671] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 669.288570][T10671] ? kasan_quarantine_put+0xbb/0x1f0 [ 669.293880][T10671] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 669.299796][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.305463][T10671] ? do_vfs_ioctl+0x116f/0x1530 [ 669.310342][T10671] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 669.315404][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.321070][T10671] ? hook_file_ioctl+0x1f2/0x600 [ 669.326036][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.331710][T10671] ? __fget_files+0x2a/0x420 [ 669.336481][T10671] ? __fget_files+0x2a/0x420 [ 669.341107][T10671] ? __fget_files+0x3a2/0x420 [ 669.345825][T10671] ? __fget_files+0x2a/0x420 [ 669.350465][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.356133][T10671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 669.361795][T10671] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 669.367624][T10671] __se_sys_ioctl+0xfc/0x170 [ 669.372355][T10671] do_syscall_64+0x166/0x520 [ 669.376977][T10671] ? trace_irq_disable+0x3b/0x140 [ 669.382022][T10671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.388360][T10671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.394393][T10671] RIP: 0033:0x7f2867d9e159 [ 669.398824][T10671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.420351][T10671] RSP: 002b:00007f2868c4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.428789][T10671] RAX: ffffffffffffffda RBX: 00007f2868025fa0 RCX: 00007f2867d9e159 [ 669.436779][T10671] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000005 [ 669.444768][T10671] RBP: 00007f2867e3506b R08: 0000000000000000 R09: 0000000000000000 [ 669.452754][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.460729][T10671] R13: 00007f2868026038 R14: 00007f2868025fa0 R15: 00007ffd881f7be8 [ 669.468726][T10671] [ 669.472047][T10671] Kernel Offset: disabled [ 669.476370][T10671] Rebooting in 86400 seconds..