last executing test programs: 14m18.018283698s ago: executing program 32 (id=280): fsync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 13m57.332453173s ago: executing program 33 (id=363): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab597233001000006db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000680)=[@decrefs={0x40086315}, @decrefs], 0x0, 0x0, 0x0}) 13m15.811521577s ago: executing program 34 (id=489): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000001580)="03a30aa8", 0xfdef}], 0x20) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0x0, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m28.817554165s ago: executing program 6 (id=1049): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 11m26.388092751s ago: executing program 6 (id=1057): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = fanotify_init(0x4, 0x1000) r2 = fanotify_init(0x20, 0x1) r3 = fanotify_init(0x2, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r3, 0x451, 0x8000000, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r2, 0x1, 0x4800001a, r5, 0x0) fanotify_mark(r1, 0x141, 0x40001029, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) 11m25.216387617s ago: executing program 6 (id=1059): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 11m20.418856797s ago: executing program 6 (id=1073): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e4638f863f2887a03f9aa6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x2, 0x6e2, &(0x7f0000000c80)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/174, 0xae) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) 11m19.796212752s ago: executing program 6 (id=1078): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x10000, 0x10003, 0x65, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103041, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 11m19.152820932s ago: executing program 6 (id=1081): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 11m18.225632415s ago: executing program 35 (id=1081): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 10m35.328434921s ago: executing program 9 (id=1219): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) 10m33.847428308s ago: executing program 9 (id=1229): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, 0x0, 0x2) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f00000001c0), 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) shutdown(r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 10m31.919362476s ago: executing program 9 (id=1235): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000140)="ee40119c8d31") r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) 10m30.788814797s ago: executing program 9 (id=1237): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc840) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 10m29.815512775s ago: executing program 9 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 10m28.448260681s ago: executing program 9 (id=1244): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYRESOCT], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffff28, 0x3, 0x0, 0x0, 0x0, 0x100000, 0xc000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0xa042, &(0x7f00000005c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}, {@default_permissions}], [{@smackfsroot={'smackfsroot', 0x3d, '*.&'}}, {@fsname={'fsname', 0x3d, '/dev/ppp\x00'}}, {@flag='dirsync'}, {@uid_gt}]}}, 0x1, 0x0, &(0x7f0000000380)="4b63aea13232e26122e7cfe5ebb59391de4092b3217569fa6ccd60a191456c3d081c112aa264673abdd216edd2b42b280794c1144f2ff715afdccd8aae3c2c6ecf27bc47399a64ff7a4d8180e5c4d1257e801ff66f6613da2d9fa20ff7ad3ba58173bb9bf1314ff181afa38f912da4ea118be56169b54fd7f55fbe7b3a019405a655cba639808d33d25940ec458a48d3") writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 10m26.827440091s ago: executing program 36 (id=1244): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYRESOCT], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffff28, 0x3, 0x0, 0x0, 0x0, 0x100000, 0xc000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0xa042, &(0x7f00000005c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}, {@default_permissions}], [{@smackfsroot={'smackfsroot', 0x3d, '*.&'}}, {@fsname={'fsname', 0x3d, '/dev/ppp\x00'}}, {@flag='dirsync'}, {@uid_gt}]}}, 0x1, 0x0, &(0x7f0000000380)="4b63aea13232e26122e7cfe5ebb59391de4092b3217569fa6ccd60a191456c3d081c112aa264673abdd216edd2b42b280794c1144f2ff715afdccd8aae3c2c6ecf27bc47399a64ff7a4d8180e5c4d1257e801ff66f6613da2d9fa20ff7ad3ba58173bb9bf1314ff181afa38f912da4ea118be56169b54fd7f55fbe7b3a019405a655cba639808d33d25940ec458a48d3") writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6m39.2177926s ago: executing program 5 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x25, 0x301, 0x670bd24, 0x25dfdffb, {0x15}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x24008002) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) socket$inet6(0xa, 0x1, 0x800) 6m37.960706921s ago: executing program 5 (id=1928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x8800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 6m36.789058989s ago: executing program 5 (id=1932): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) chmod(&(0x7f0000000140)='./file0\x00', 0x101) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) 6m33.620644793s ago: executing program 5 (id=1938): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x400c0, &(0x7f00000001c0)={0xa, 0xcaa1, 0x0, @loopback, 0x200000c}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6m30.85195966s ago: executing program 5 (id=1945): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) r3 = eventfd2(0xffff5faa, 0x80000) close(0x3) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r5, 0x1000) sendfile(r3, r5, 0x0, 0x10000000000c352) splice(r1, 0x0, r0, 0x0, 0x100, 0x0) 6m29.508739572s ago: executing program 5 (id=1947): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m12.630600434s ago: executing program 37 (id=1947): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m5.814219402s ago: executing program 1 (id=2244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="2f825f669ccd"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240400c1}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m3.82908744s ago: executing program 1 (id=2252): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x0) 4m3.599594177s ago: executing program 1 (id=2253): chdir(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 4m1.748976643s ago: executing program 1 (id=2256): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='aufs\x00', 0x9010, &(0x7f0000000300)='eth0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) 4m0.820505285s ago: executing program 1 (id=2259): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010102, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78e}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 3m58.27719311s ago: executing program 1 (id=2263): openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 3m43.233242196s ago: executing program 38 (id=2263): openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 39.316442801s ago: executing program 0 (id=2584): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000600)) prlimit64(0x0, 0x6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x18) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000000c0)={[{@subsystem='cpuset'}]}) open$dir(&(0x7f0000000040)='./file0\x00', 0x80800, 0x1) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,measure,permit_directio,fow', @ANYRESDEC, @ANYBLOB='\x00']) 37.113144605s ago: executing program 0 (id=2591): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x10}) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) open(0x0, 0x64842, 0x389b0d52417bb201) openat$fuse(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 31.038207194s ago: executing program 7 (id=2600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 29.119895762s ago: executing program 7 (id=2604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000001080)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x4, 0xffffffff, 0x5}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x25) 27.038918347s ago: executing program 7 (id=2609): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000700)=""/124) add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r3, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 26.480455066s ago: executing program 0 (id=2610): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 24.248458413s ago: executing program 7 (id=2614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) close(r5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 21.55281506s ago: executing program 7 (id=2617): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 20.369838669s ago: executing program 2 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x5c}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) msgget$private(0x0, 0x4) setuid(0xee01) msgctl$MSG_STAT(0x0, 0xb, 0x0) 20.363631799s ago: executing program 8 (id=2620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) get_robust_list(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) timerfd_create(0x9, 0x80800) close_range(r3, r4, 0x0) 19.998678018s ago: executing program 0 (id=2621): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x840, 0xd5) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000d80)=ANY=[@ANYBLOB="696f636861727365743d52703836342c757466383d312c756e695f786c6174653d312c666c7573682c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030353537322c73686f72746e616d653d6d697865642c756e695f786c6174653d302c756e695f786c6174653d312c6572726f72733d72656d6f756e742d726f2c637f4265706167653d3836302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c756e695f786c6174653d302c00"], 0x3, 0x36b, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x4000000) clock_getres(0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000", @ANYRES64=0x0, @ANYRESDEC=r1], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) 17.900910391s ago: executing program 2 (id=2624): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) pipe2(&(0x7f0000000200), 0x84000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000300440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 17.895034626s ago: executing program 8 (id=2625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xa}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffff7, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x33, 0x0, @loopback, @loopback}}}}}}, 0x0) 16.522149059s ago: executing program 4 (id=2627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) geteuid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 15.954225291s ago: executing program 0 (id=2628): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_macvtap\x00', &(0x7f0000000280)=@ethtool_cmd={0x37, 0xd35, 0x9, 0x8, 0x0, 0x5, 0x0, 0xa0, 0x7, 0xfa, 0x0, 0x5, 0xc, 0x6, 0x9, 0xa5aa, [0x4, 0x7]}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) r5 = userfaultfd(0x1) close(0x3) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1) 14.047018316s ago: executing program 3 (id=2629): r0 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblcr\x00', 0xd, 0x4, 0x5d}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 13.876271724s ago: executing program 8 (id=2630): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f0000001a40), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 12.817214671s ago: executing program 3 (id=2631): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40844) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 12.812876327s ago: executing program 2 (id=2632): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x40000) r0 = gettid() sigaltstack(0x0, 0x0) rt_sigqueueinfo(r0, 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 11.462877325s ago: executing program 8 (id=2633): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, 0x0) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r5, 0x1c, &(0x7f00000003c0)=""/28}) 11.400500346s ago: executing program 3 (id=2634): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/222, 0xde}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002180)=ANY=[], 0x1580}, 0x1, 0x0, 0x0, 0x4}, 0x40) 10.069938737s ago: executing program 8 (id=2635): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) 10.011216119s ago: executing program 4 (id=2636): setuid(0xee00) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x67f, 0x64, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x802, 0x207, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x4, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) 8.769129006s ago: executing program 3 (id=2637): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fsopen(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$inet6(0xa, 0x5, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5b, 0xaa, 0x7f, 0x20, 0x458, 0x706e, 0x3564, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.477092467s ago: executing program 2 (id=2638): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xa}, 0x1c) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) shutdown(r3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40000) 7.576739053s ago: executing program 4 (id=2639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800", @ANYRES32, @ANYBLOB="0400"/19, @ANYRES32=0x0], 0x50) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 6.226827159s ago: executing program 3 (id=2640): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002d) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x17, r0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x10040, &(0x7f0000001140)=ANY=[@ANYBLOB="757466383d312c757466383d302c71756965742c7379735f696d6ddb41a8ac757461626c652c636f6465706167653d313235302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c696f636861727365743d6d61636963656c616e642c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c6572726f72733d72656d6f756e742d"], 0x26, 0x347, &(0x7f00000006c0)="$eJzs3T9oJNUfAPDvZpJsLnC/TfGDQ6vVTpDjErHQKuE44TCFniz+awxezj/Z9SCLC7HIXhrFUrERtLK7QsurxULEzsLWE+RUbLzu4IIjuzvZ2dndmATcPT0/nyJ8+b73nffezJCZJOTtK6uxdXkurty+fSsWFkoxu3p+Ne6UYilmIomeawEA3E/upGn8nvYUGpJxvT9cPIjmpzA3AGAyus//107nifK9nA0AMA2H/vxf9MzY7NWJTQsAmKCR5//DheahX/PPjv+zAADwr/Lciy89vbYecalaXYhovNeqtWrxZN6+diXeiHpsxrmoxH5E70Wh97bQ+frUxfUL56odPy9FrVPRqkU02q1a701hLenWl2M5KrGU1af9+qRTv9ytr0bEtXZ3/GiUWrW5WMzG/2ExNmMlKvH/kfqIi+sXVqrZAWqNg/p2xF4sHCyiM/+zUYnvXo2rUY/L0anN57+7XK2eT9cL9a3r5W6/I8xN5KIAAAAAAAAAAAAAAAAAAAAAAHDfO1vtW+rvf5M22q13Lw13WCrsj1PrNWf7A+3FYlRiPy0f7M7zfjK8P1Bxf55WbTZm7unKAQAAAAAAAAAAAAAAAAAA4J+juTMfG/X65nZz552twaA9kHnrm8+/OhXDfd5M8kzM9g5X6JPlYqAqiX552i9Pk0KfLEgi8s7Xb2THmikMUe6vYqS8E5RHmkrZnDbq9dMP/fTJuKo/8kwSI6elGJSy8QeaGv/rpf6i6vBg5Yg+N9M0Pax89+PRqihFzI5cuL8j+PrW6w881jzzeDfzZbbpwyOPVp6/+dFnv25t1CM7NfX6/HZzPz3JEKudsvwS5PdGKTvPB2f96APu5Zm97ebORvL9by88+MG3Q52T8fdPOph5+/CxvhjOzPeCzjSPs+S5MTf/+ODlu/279+QX7synqxs3dn/85bhVA98kbNQBAAAAAAAAAAAAAAAAAABTMfC/4ifwxLOTmxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATF/++f8Dwd5I5jjB3XaMNpU3t5uHDn5qqksFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/7M8AAAD//8jnd14=") fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) r3 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240), 0x0, 0x3000, 0x0, 0x3) 6.047094335s ago: executing program 4 (id=2641): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@cache_fscache}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) recvfrom$l2tp(r1, &(0x7f0000000100)=""/57, 0x39, 0x40000002, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200001, &(0x7f0000000180), 0xfa, 0x231, &(0x7f0000000780)="$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") 5.601075517s ago: executing program 7 (id=2642): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) openat$nvram(0xffffff9c, 0x0, 0x101000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x85, &(0x7f0000002100)=""/4051, &(0x7f00000010c0)=0xfd3) 3.952898962s ago: executing program 8 (id=2643): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f00000005c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x151a, &(0x7f0000003f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_clone3(&(0x7f0000000700)={0x6110000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x2d}, &(0x7f0000000500)=""/228, 0xe4, &(0x7f0000000600)=""/195, 0x0}, 0x58) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd2(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) 3.174598811s ago: executing program 3 (id=2644): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x1000b, &(0x7f00000000c0)=ANY=[], 0x21, 0x1c5, &(0x7f00000002c0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 3.026074379s ago: executing program 0 (id=2645): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2501000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) close(0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808082, &(0x7f00000002c0)={[{@uid}, {@gid}, {@gid}, {@uid}, {@nls={'nls', 0x3d, 'cp437'}}, {@part={'part', 0x3d, 0x2}}, {@nodecompose}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) cachestat(r5, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) 2.930487609s ago: executing program 4 (id=2646): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000100)) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) io_setup(0x1, &(0x7f0000002500)) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 1.208737966s ago: executing program 2 (id=2647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) listen(r4, 0x7) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r3, 0x3) listen(r3, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 128.429617ms ago: executing program 2 (id=2648): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}, @struct={0x4}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00ab08653904030401c50900000009c5000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 0s ago: executing program 4 (id=2649): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ridge1: port 1(vlan2) entered disabled state [ 399.836142][T10440] vlan2: entered promiscuous mode [ 399.844893][T10440] bridge0: entered promiscuous mode [ 400.260576][T10216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.302912][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.429075][T10216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.453531][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 400.482546][T10216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.517120][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.587651][T10216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.739267][T10456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.597985][T10216] hsr_slave_0: entered promiscuous mode [ 401.630973][T10216] hsr_slave_1: entered promiscuous mode [ 404.752033][T10216] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 404.811192][T10216] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 405.230583][T10216] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 406.321536][T10216] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 407.356157][T10562] loop7: detected capacity change from 0 to 131072 [ 407.396289][T10562] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 407.404484][T10562] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 407.413731][T10562] F2FS-fs (loop7): invalid crc value [ 407.516840][T10562] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 407.575829][T10562] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 407.582900][T10562] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 407.646810][T10216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.761315][T10216] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.885707][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.892870][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.306202][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.313366][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.870725][T10216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.847678][T10216] veth0_vlan: entered promiscuous mode [ 415.862601][T10216] veth1_vlan: entered promiscuous mode [ 416.697568][T10216] veth0_macvtap: entered promiscuous mode [ 416.765129][T10216] veth1_macvtap: entered promiscuous mode [ 416.863214][T10216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.946416][T10216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.027132][ T1091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.081776][ T6138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.209375][ T6138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.221114][ T6138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.257986][ T6138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.274789][ T6138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.828249][T10682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.949681][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.005855][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.104953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 422.164729][ T31] audit: type=1804 audit(1774316621.666:61): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1363" name="file0" dev="tmpfs" ino=1228 res=1 errno=0 [ 427.420636][T10774] netlink: 'syz.5.1375': attribute type 6 has an invalid length. [ 427.610273][T10775] mmap: syz.4.1376 (10775) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 428.319239][T10778] loop5: detected capacity change from 0 to 512 [ 428.388227][T10778] EXT4-fs: inline encryption not supported [ 428.416641][T10781] binder: BINDER_SET_CONTEXT_MGR already set [ 428.442682][T10781] binder: 10780:10781 ioctl 4018620d 200000004a80 returned -16 [ 428.456917][T10781] binder: 10780:10781 unknown command 0 [ 428.474696][T10778] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 428.480959][T10781] binder: 10780:10781 ioctl c0306201 200000004a40 returned -22 [ 428.573914][T10778] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 428.824955][T10778] System zones: 1-12 [ 428.882519][T10778] EXT4-fs (loop5): 1 truncate cleaned up [ 429.566183][T10778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.897950][T10767] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full [ 429.990114][T10798] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1379'. [ 430.560922][T10216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.440886][ T92] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.458390][T10811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.629368][T10819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.725410][T10819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.768219][T10819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.353707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 432.890666][ T92] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.742899][ T92] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.921221][ T92] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.368927][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.386683][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.444746][T10914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.147863][T10911] netlink: 'syz.7.1409': attribute type 1 has an invalid length. [ 442.523661][T10924] dvmrp1: entered allmulticast mode [ 442.677405][T10911] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 442.817288][T10919] veth0_virt_wifi: entered promiscuous mode [ 443.073910][ T92] bridge_slave_1: left allmulticast mode [ 443.094201][ T92] bridge_slave_1: left promiscuous mode [ 443.274977][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.079324][ T92] bridge_slave_0: left allmulticast mode [ 444.109479][ T92] bridge_slave_0: left promiscuous mode [ 444.135330][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.215191][T10966] netlink: 'syz.4.1420': attribute type 10 has an invalid length. [ 445.740138][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1422'. [ 445.830898][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1422'. [ 445.891393][ T6019] IPVS: starting estimator thread 0... [ 445.998634][T10975] IPVS: using max 23 ests per chain, 55200 per kthread [ 446.039033][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.070495][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.093119][ T92] bond0 (unregistering): Released all slaves [ 446.135691][T10966] bond0: (slave wlan1): Opening slave failed [ 446.253507][T10971] team1: entered promiscuous mode [ 446.287263][T10971] team1: entered allmulticast mode [ 446.299692][T10971] 8021q: adding VLAN 0 to HW filter on device team1 [ 446.342912][T10972] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 446.479826][T10972] team2: entered promiscuous mode [ 446.494575][T10972] team2: entered allmulticast mode [ 446.509583][T10972] 8021q: adding VLAN 0 to HW filter on device team2 [ 447.823910][T10997] binder: 10990:10997 ioctl c0306201 2000000003c0 returned -14 [ 448.453759][T11012] loop7: detected capacity change from 0 to 64 [ 448.577387][T11012] minix: Unknown parameter 'èè' [ 448.783130][ T92] hsr_slave_0: left promiscuous mode [ 448.894278][ T92] hsr_slave_1: left promiscuous mode [ 448.955749][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.004814][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.043412][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.074725][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.137674][ T92] veth1_macvtap: left promiscuous mode [ 449.149910][ T92] veth0_macvtap: left promiscuous mode [ 449.189918][ T92] veth1_vlan: left promiscuous mode [ 449.222554][ T92] veth0_vlan: left promiscuous mode [ 451.148600][T11056] loop4: detected capacity change from 0 to 32768 [ 452.011605][ T92] team0 (unregistering): Port device team_slave_1 removed [ 452.103910][ T92] team0 (unregistering): Port device team_slave_0 removed [ 452.608261][T11072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1447'. [ 454.938494][T11106] loop7: detected capacity change from 0 to 4096 [ 456.063511][T11116] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 456.723994][T11118] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 463.871991][T11173] uprobe: syz.4.1473:11173 failed to unregister, leaking uprobe [ 465.275450][T11192] bridge0: port 3(erspan0) entered blocking state [ 465.354961][T11192] bridge0: port 3(erspan0) entered disabled state [ 465.366407][T11192] erspan0: entered allmulticast mode [ 465.452567][T11192] erspan0: entered promiscuous mode [ 465.465988][T11192] bridge0: port 3(erspan0) entered blocking state [ 465.472965][T11192] bridge0: port 3(erspan0) entered forwarding state [ 465.910760][T11200] netlink: 'syz.7.1479': attribute type 1 has an invalid length. [ 466.193000][T11200] bond1: entered promiscuous mode [ 466.230334][T11200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.393423][T11203] bond1: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 466.465018][T11203] bond1: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 466.548536][T11203] bond1: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 469.196506][ T31] audit: type=1804 audit(1774316668.696:62): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1498" name="file0" dev="ramfs" ino=32260 res=1 errno=0 [ 472.624963][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1511'. [ 472.883479][ T31] audit: type=1326 audit(1774316672.386:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9c799 code=0x7fc00000 [ 472.940876][ T31] audit: type=1326 audit(1774316672.386:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f68f4d9c799 code=0x7fc00000 [ 473.088647][T11327] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 473.394987][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1515'. [ 473.520970][T11343] overlayfs: failed to clone upperpath [ 473.944746][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 476.155031][ T9] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 476.214875][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 476.284889][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.784518][T11348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.794088][T11348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.702430][ T9] ath6kl: Unsupported hardware version: 0x7f6ddd4a [ 477.737119][ T9] ath6kl: Failed to init ath6kl core: -22 [ 477.743518][ T9] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -22 [ 477.869205][T11385] net_ratelimit: 10 callbacks suppressed [ 477.869223][T11385] openvswitch: netlink: IP tunnel dst address not specified [ 477.974859][T10701] usb 6-1: USB disconnect, device number 7 [ 478.502274][T11399] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1528'. [ 480.130021][T11401] batman_adv: batadv0: Removing interface: dummy0 [ 480.256540][T11401] bridge_slave_0: left allmulticast mode [ 480.262223][T11401] bridge_slave_0: left promiscuous mode [ 480.444602][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.242584][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1531'. [ 481.752388][T11401] bridge_slave_1: left allmulticast mode [ 481.789801][T11401] bridge_slave_1: left promiscuous mode [ 481.845606][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.027027][T11401] bond0: (slave bond_slave_0): Releasing backup interface [ 483.033188][T11401] bond0: (slave bond_slave_1): Releasing backup interface [ 483.254005][T11401] team0: Port device team_slave_0 removed [ 483.281105][T11401] team0: Port device team_slave_1 removed [ 483.312425][T11401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.338166][T11401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.354452][T11401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 483.606952][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 483.671401][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 484.421176][T11468] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1550'. [ 485.995439][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1556'. [ 486.044766][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1556'. [ 487.218302][T11499] loop5: detected capacity change from 0 to 64 [ 487.310099][T11502] tipc: Started in network mode [ 487.324829][T11502] tipc: Node identity 84e, cluster identity 4711 [ 487.364709][T11502] tipc: Node number set to 2126 [ 489.603539][T11520] syzkaller0: entered promiscuous mode [ 489.624737][T11520] syzkaller0: entered allmulticast mode [ 489.699048][T11537] loop7: detected capacity change from 0 to 1024 [ 489.865268][T11537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.023867][ T7212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.170124][ T24] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 494.178603][T11589] openvswitch: netlink: Flow actions attr not present in new flow. [ 494.218129][T11589] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1581'. [ 494.342320][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1581'. [ 494.392388][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.420227][ T24] usb 6-1: config 0 has no interface number 0 [ 494.457020][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 494.495802][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 494.544874][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 494.568111][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 494.605203][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.649660][ T24] usb 6-1: config 0 descriptor?? [ 494.675589][T11581] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 494.720447][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 494.768939][ T9] usb 5-1: config 0 has no interfaces? [ 494.805560][ T9] usb 5-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.3e [ 494.845071][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.881099][ T9] usb 5-1: Product: syz [ 494.913776][ T9] usb 5-1: Manufacturer: syz [ 495.166771][ T9] usb 5-1: SerialNumber: syz [ 495.253351][ T29] usb 6-1: USB disconnect, device number 8 [ 495.254848][ T9] usb 5-1: config 0 descriptor?? [ 496.284801][ T9] usb 5-1: USB disconnect, device number 12 [ 497.116081][T11618] overlayfs: upper fs does not support tmpfile. [ 500.822143][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.840166][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.140668][T11674] loop4: detected capacity change from 0 to 2048 [ 502.344855][T11683] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 505.272122][T11722] fuse: Bad value for 'fd' [ 507.086028][T11749] virtio-fs: tag not found [ 507.999172][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 508.130407][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 508.593977][T11768] bond5: entered promiscuous mode [ 508.638334][T11768] 8021q: adding VLAN 0 to HW filter on device bond5 [ 509.139226][T11796] tmpfs: Bad value for 'nr_blocks' [ 509.572757][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1634'. [ 509.622253][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1634'. [ 512.214477][T11843] loop4: detected capacity change from 0 to 256 [ 512.294966][T11843] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 512.383697][T11843] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 515.517753][T11878] loop5: detected capacity change from 0 to 128 [ 516.587885][T11889] syz.5.1654: attempt to access beyond end of device [ 516.587885][T11889] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 516.984940][T11889] syz.5.1654: attempt to access beyond end of device [ 516.984940][T11889] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 517.163786][T11889] syz.5.1654: attempt to access beyond end of device [ 517.163786][T11889] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 517.692957][T11889] syz.5.1654: attempt to access beyond end of device [ 517.692957][T11889] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 517.758042][T11889] syz.5.1654: attempt to access beyond end of device [ 517.758042][T11889] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 519.255681][T11916] netlink: 'syz.1.1665': attribute type 14 has an invalid length. [ 519.310076][T11918] loop5: detected capacity change from 0 to 64 [ 519.663973][T11924] netlink: 'syz.1.1667': attribute type 83 has an invalid length. [ 521.275855][T11959] netlink: 'syz.1.1676': attribute type 11 has an invalid length. [ 521.402490][ T50] Bluetooth: (null): Invalid header checksum [ 522.897824][T11981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.975875][T11981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.093696][T11981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.198601][T11984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.264817][T11981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.172472][T11995] loop5: detected capacity change from 0 to 16 [ 525.184523][T11995] erofs (device loop5): invalid ishare xattr prefix id 0 [ 527.706551][T12018] netlink: 63 bytes leftover after parsing attributes in process `syz.1.1695'. [ 534.414938][T12118] loop5: detected capacity change from 0 to 256 [ 536.274938][T12146] Cannot find add_set index 0 as target [ 538.138827][T12159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1722'. [ 538.268781][T12159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1722'. [ 538.496708][T12159] bridge0: entered promiscuous mode [ 538.575847][T12159] ip6gretap0: entered promiscuous mode [ 538.732977][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.801272][T12192] batadv0: mtu less than device minimum [ 538.865112][T12192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 538.877486][T12192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 538.889251][T12192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 538.900754][T12192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 538.912470][T12192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 538.923990][T12192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 538.935838][T12192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 538.947316][T12192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 538.958847][T12192] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 539.371867][T12192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.560074][T12198] ip_vti0: entered promiscuous mode [ 539.596045][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 541.245059][ T31] audit: type=1804 audit(1774316996.728:65): pid=12220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1727" name="file0" dev="tmpfs" ino=1807 res=1 errno=0 [ 541.245304][T12220] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 541.385686][T12220] ref_ctr increment failed for inode: 0x70f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888036dc8c40 [ 543.106338][T12231] uprobe: syz.1.1727:12231 failed to unregister, leaking uprobe [ 544.013369][T12244] loop7: detected capacity change from 0 to 40427 [ 544.086289][T12244] F2FS-fs (loop7): Image doesn't support compression [ 544.093062][T12244] F2FS-fs (loop7): build fault injection rate: 690 [ 544.121568][T12244] F2FS-fs (loop7): invalid crc value [ 544.566268][T12244] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 544.577572][T12244] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 547.565561][T12271] netlink: 'syz.1.1740': attribute type 10 has an invalid length. [ 547.818631][T12271] bond0: (slave wlan1): Opening slave failed [ 548.764789][T12271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.280699][T12300] loop5: detected capacity change from 0 to 128 [ 549.321060][T12300] vfat: Unknown parameter '18446744073709551615ÿÿÿ' [ 550.904767][T12332] net_ratelimit: 10 callbacks suppressed [ 550.904849][T12332] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 551.742501][T12338] 9pnet: p9_errstr2errno: server reported unknown error .{ù>šà"K” [ 557.528358][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1774'. [ 559.679952][T12422] IPVS: Unknown mcast interface: syz_tun [ 561.936745][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1783'. [ 562.156572][ T31] audit: type=1326 audit(1774317017.628:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.1783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f7319c799 code=0x0 [ 562.215166][ T5834] block nbd4: Receive control failed (result -32) [ 562.305424][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.313081][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.457957][T12443] block nbd4: shutting down sockets [ 563.529400][T12462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.537227][T12462] batadv_slave_0: entered promiscuous mode [ 564.519369][T12472] loop7: detected capacity change from 0 to 32768 [ 564.587922][ T31] audit: type=1326 audit(1774317020.038:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77599c799 code=0x7ffc0000 [ 564.669567][ T31] audit: type=1326 audit(1774317020.038:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77599c799 code=0x7ffc0000 [ 564.704740][T12472] JBD2: Ignoring recovery information on journal [ 564.727773][ T31] audit: type=1326 audit(1774317020.128:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fa77599c799 code=0x7ffc0000 [ 564.755551][ T31] audit: type=1326 audit(1774317020.158:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77599c799 code=0x7ffc0000 [ 564.780222][ T31] audit: type=1326 audit(1774317020.158:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa77599c799 code=0x7ffc0000 [ 564.836379][ T31] audit: type=1326 audit(1774317020.158:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77599c799 code=0x7ffc0000 [ 564.922258][T12472] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 565.013716][ T31] audit: type=1326 audit(1774317020.158:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77599c799 code=0x7ffc0000 [ 565.994271][ T31] audit: type=1326 audit(1774317020.158:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa77599c799 code=0x7ffc0000 [ 566.036562][ T31] audit: type=1326 audit(1774317020.158:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77599c799 code=0x7ffc0000 [ 566.534395][T12502] bridge_slave_0: left allmulticast mode [ 566.571140][T12501] loop5: detected capacity change from 0 to 256 [ 566.585111][T12502] bridge_slave_0: left promiscuous mode [ 566.618696][T12502] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.731180][T12501] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 566.810885][T12472] syz.7.1791 (12472) used greatest stack depth: 17896 bytes left [ 566.977306][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 567.036289][T12502] bridge_slave_1: left allmulticast mode [ 567.152876][T12511] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 567.166832][T12511] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 567.823090][T12502] bridge_slave_1: left promiscuous mode [ 567.857080][T12502] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.007489][T12502] bond0: (slave bond_slave_0): Releasing backup interface [ 568.321356][T12502] bond0: (slave bond_slave_1): Releasing backup interface [ 568.336085][ T7212] ocfs2: Unmounting device (7,7) on (node local) [ 568.811208][T12502] team0: Port device team_slave_0 removed [ 568.986032][T12502] team0: Port device team_slave_1 removed [ 569.025210][T12502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.115763][T12502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.417811][T12507] team0: Mode changed to "loadbalance" [ 570.963219][T12555] syzkaller0: entered promiscuous mode [ 570.984679][T12555] syzkaller0: entered allmulticast mode [ 576.889619][T12617] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 578.619631][T12627] bond3: (slave gretap1): making interface the new active one [ 578.692443][T12627] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 580.201883][T12651] ip6t_rpfilter: unknown options [ 581.794745][ T5814] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 583.179144][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 583.233721][ T5814] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 583.294264][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.346641][ T5814] usb 5-1: config 0 descriptor?? [ 583.379060][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1845'. [ 583.401933][ T5814] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 583.506724][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1845'. [ 583.520261][T12682] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1847'. [ 585.264614][ T5814] gspca_sonixj: reg_w1 err -110 [ 585.294747][ T5814] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 585.496894][ T30] usb 5-1: USB disconnect, device number 13 [ 585.517413][T12681] comedi comedi1: pcl711: I/O port conflict (0x2002f00,16) [ 586.275173][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1854'. [ 586.540492][T12714] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 587.058436][T12714] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 587.304258][T12709] macvlan2: entered promiscuous mode [ 587.313241][T12709] macvlan2: entered allmulticast mode [ 587.323884][T12709] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 592.791524][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'. [ 592.941615][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 592.941666][ T31] audit: type=1326 audit(1774317048.428:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.8.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 593.500246][ T31] audit: type=1326 audit(1774317048.428:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.8.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 593.575122][ T31] audit: type=1326 audit(1774317048.438:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.8.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 593.599543][ T31] audit: type=1326 audit(1774317048.438:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.8.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 593.635261][T12801] binder: 12800:12801 ioctl c0306201 200000000c00 returned -14 [ 593.643714][ T31] audit: type=1326 audit(1774317048.438:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.8.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 593.742552][ T31] audit: type=1326 audit(1774317048.438:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.8.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 593.750729][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1874'. [ 594.066432][T12810] bridge2: port 1(veth5) entered blocking state [ 594.076463][T12810] bridge2: port 1(veth5) entered disabled state [ 594.085265][T12810] veth5: entered allmulticast mode [ 594.110840][T12810] veth5: entered promiscuous mode [ 594.866865][T12803] bridge2: port 2(veth0_to_bond) entered blocking state [ 594.875056][T12803] bridge2: port 2(veth0_to_bond) entered disabled state [ 594.944315][T12803] veth0_to_bond: entered allmulticast mode [ 594.990138][T12803] veth0_to_bond: entered promiscuous mode [ 595.170337][T12829] syzkaller0: entered promiscuous mode [ 595.195327][T12829] syzkaller0: entered allmulticast mode [ 595.224664][T12829] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 595.346514][T12837] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1884'. [ 600.090213][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1894'. [ 600.146257][T12881] ip6gre1: entered promiscuous mode [ 600.161280][T12881] ip6gre1: entered allmulticast mode [ 600.181412][T12887] netlink: 'syz.8.1894': attribute type 6 has an invalid length. [ 600.211372][T12887] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1894'. [ 600.927037][T12900] Invalid source name [ 604.606794][T12945] ptrace attach of "./syz-executor exec"[5827] was attempted by " [ 605.665184][T12952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.225274][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 606.273968][T12961] loop7: detected capacity change from 0 to 512 [ 606.286200][T12966] tipc: Enabling of bearer rejected, failed to enable media [ 606.414676][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 606.439126][T12961] msdos: Unknown parameter '/dev/comedi5' [ 606.756143][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.981961][T12957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.026030][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.036489][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 607.043194][ T29] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 607.052576][T12971] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 607.052576][T12971] The task syz.7.1915 (12971) triggered the difference, watch for misbehavior. [ 607.070689][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.105775][ T29] usb 5-1: config 0 descriptor?? [ 608.672620][ T29] hid (null): global environment stack underflow [ 609.778526][T12984] netlink: 'syz.8.1918': attribute type 5 has an invalid length. [ 610.009908][T10701] usb 5-1: USB disconnect, device number 14 [ 610.465178][T13002] netlink: 'syz.5.1923': attribute type 8 has an invalid length. [ 616.096508][T13040] syz.7.1935 (13040): drop_caches: 2 [ 616.730241][T13051] batman_adv: batadv0: Adding interface: dummy0 [ 616.768262][T13051] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.949748][T13051] batman_adv: batadv0: Interface activated: dummy0 [ 618.131268][T13050] batadv0: mtu less than device minimum [ 618.138141][T13050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.149903][T13050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.161586][T13050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.173265][T13050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.184855][T13050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.196393][T13050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.207890][T13050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.219495][T13050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.231172][T13050] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 619.915003][T13083] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1946'. [ 621.907400][T13101] qnx4: unable to read the superblock [ 622.632113][T13101] loop7: detected capacity change from 0 to 32768 [ 623.011634][T13104] input: syz1 as /devices/virtual/input/input11 [ 623.693170][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.699840][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.673782][ T5814] IPVS: starting estimator thread 0... [ 625.774699][T13123] IPVS: using max 24 ests per chain, 57600 per kthread [ 630.651721][T13157] fuse: Bad value for 'fd' [ 637.797589][T13196] loop4: detected capacity change from 0 to 1024 [ 638.348912][T13207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 639.087520][T13207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 639.096244][T13207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 639.105795][T13207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 639.113575][T13207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 641.212885][T13207] Bluetooth: hci4: command tx timeout [ 641.394886][T13228] syz_tun: entered allmulticast mode [ 641.444417][T13227] syz_tun: left allmulticast mode [ 643.544578][T13207] Bluetooth: hci4: command tx timeout [ 643.615188][T13204] chnl_net:caif_netlink_parms(): no params data found [ 645.014447][T13204] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.037132][T13204] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.074800][T13204] bridge_slave_0: entered allmulticast mode [ 645.104235][T13204] bridge_slave_0: entered promiscuous mode [ 645.145654][T13204] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.153679][T13204] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.177044][T13204] bridge_slave_1: entered allmulticast mode [ 645.203961][T13204] bridge_slave_1: entered promiscuous mode [ 645.250309][T13258] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 645.944669][T13207] Bluetooth: hci4: command tx timeout [ 646.612596][T13267] xt_hashlimit: max too large, truncated to 1048576 [ 648.394615][T13207] Bluetooth: hci4: command tx timeout [ 650.275040][T13204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.291111][T13204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.445842][T13204] team0: Port device team_slave_0 added [ 650.503797][T13204] team0: Port device team_slave_1 added [ 651.691564][T13301] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 654.153102][T13322] loop7: detected capacity change from 0 to 4096 [ 654.163809][ T173] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.247572][T13330] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 654.277658][T13204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.312702][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.384778][T13204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.907163][T13334] cgroup: Unknown subsys name 'cpuset' [ 655.364840][ T173] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.263695][T13204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.277403][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.315256][T13204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.660490][ T173] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.881189][ T173] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.981033][T13204] hsr_slave_0: entered promiscuous mode [ 657.019949][T13204] hsr_slave_1: entered promiscuous mode [ 657.037249][T13204] debugfs: 'hsr0' already exists in 'hsr' [ 657.052771][T13204] Cannot create hsr debugfs directory [ 658.212362][T13373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2028'. [ 658.493339][T13373] unsupported nlmsg_type 40 [ 660.545052][T13377] orangefs_mount: mount request failed with -4 [ 660.854360][ T173] erspan0: left allmulticast mode [ 660.891390][ T173] erspan0: left promiscuous mode [ 660.917085][ T173] bridge0: port 3(erspan0) entered disabled state [ 660.925487][ T31] audit: type=1326 audit(1774317116.438:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.1.2031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68f4d9c799 code=0x0 [ 660.983556][ T173] bridge_slave_1: left allmulticast mode [ 660.994093][ T173] bridge_slave_1: left promiscuous mode [ 661.001361][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.481743][ T173] bridge_slave_0: left allmulticast mode [ 661.518009][T13391] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2033'. [ 661.535250][ T173] bridge_slave_0: left promiscuous mode [ 661.542094][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.574785][T13391] loop7: detected capacity change from 0 to 512 [ 661.667807][T13391] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.2033: corrupted in-inode xattr: invalid size in ea xattr [ 661.685414][T13391] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 661.694555][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 661.710243][ C1] EXT4-fs (loop7): initial error at time 1774317117: ext4_iget_extra_inode:5025: inode 15 [ 661.720196][ C1] EXT4-fs (loop7): last error at time 1774317117: ext4_iget_extra_inode:5025: inode 15 [ 661.738187][T13391] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2033: couldn't read orphan inode 15 (err -117) [ 661.750864][T13391] loop7: lost filesystem error report for type 5 error -117 [ 661.770277][T13391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.963293][T13391] xt_hashlimit: size too large, truncated to 1048576 [ 662.160379][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2038'. [ 662.169510][T13403] netlink: 'syz.8.2038': attribute type 18 has an invalid length. [ 662.177428][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2038'. [ 662.732073][ T7212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.776933][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.887759][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.925564][ T173] bond0 (unregistering): Released all slaves [ 662.952568][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 663.601103][ T31] audit: type=1800 audit(1774317119.108:102): pid=13419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2044" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 663.660154][T13418] syzkaller0: entered promiscuous mode [ 663.697976][T13418] syzkaller0: entered allmulticast mode [ 665.380752][T13434] loop4: detected capacity change from 0 to 512 [ 665.427550][T13434] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2048: inode has both inline data and extents flags [ 665.645562][T13434] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 665.646082][T13434] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2048: couldn't read orphan inode 15 (err -117) [ 665.655340][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 665.655368][ C1] EXT4-fs (loop4): initial error at time 1774317121: ext4_orphan_get:1391: inode 15 [ 665.655408][ C1] EXT4-fs (loop4): last error at time 1774317121: ext4_orphan_get:1391: inode 15 [ 665.815173][T13434] loop4: lost filesystem error report for type 5 error -117 [ 666.308161][T13434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.967530][ T173] hsr_slave_0: left promiscuous mode [ 668.992790][ T173] hsr_slave_1: left promiscuous mode [ 669.003825][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.749764][ T173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.822692][ T173] net_ratelimit: 10 callbacks suppressed [ 669.822713][ T173] batadv0: mtu less than device minimum [ 669.899339][ T173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.911731][ T173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.923715][ T173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.935683][ T173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.947627][ T173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.959264][ T173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.970894][ T173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.982462][ T173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.993966][ T173] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 670.124016][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.137303][T13485] loop7: detected capacity change from 0 to 1024 [ 670.148701][ T173] batman_adv: batadv0: Interface deactivated: dummy0 [ 670.195606][T13485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 670.323148][ T173] batman_adv: batadv0: Removing interface: dummy0 [ 670.375882][ T173] veth1_macvtap: left promiscuous mode [ 671.080252][ T173] veth0_macvtap: left promiscuous mode [ 671.096814][ T173] veth1_vlan: left promiscuous mode [ 671.102104][ T173] veth0_vlan: left promiscuous mode [ 671.127707][T13485] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.262169][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.941009][ T7212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.204274][T13508] kexec: Could not allocate control_code_buffer [ 675.272196][ T173] team0 (unregistering): Port device team_slave_1 removed [ 675.455129][ T173] team0 (unregistering): Port device team_slave_0 removed [ 678.460448][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2078'. [ 684.537932][T13204] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 684.997155][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'. [ 685.566321][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.582912][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.636731][T13204] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 686.613914][T13204] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 686.728195][T13204] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 690.290134][T13647] loop7: detected capacity change from 0 to 128 [ 690.409592][T13647] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 690.470256][T13647] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 691.482123][T13204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.568021][T13204] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.584218][T12200] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.591383][T12200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.785737][T13647] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 691.870646][T12200] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.877836][T12200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.609632][T13204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.737714][ T7212] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 694.402916][T13204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.862844][T13690] loop7: detected capacity change from 0 to 1024 [ 695.880860][T13690] EXT4-fs: Ignoring removed bh option [ 695.996849][T13690] EXT4-fs: inline encryption not supported [ 696.004096][T13690] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 696.014518][T13690] EXT4-fs (loop7): group descriptors corrupted! [ 696.181275][T13204] veth0_vlan: entered promiscuous mode [ 696.313195][T13204] veth1_vlan: entered promiscuous mode [ 697.192598][T13204] veth0_macvtap: entered promiscuous mode [ 697.238974][T13204] veth1_macvtap: entered promiscuous mode [ 697.488622][T13204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.508711][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'. [ 700.995836][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 701.084170][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 701.093541][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.102350][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.110428][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 703.467357][T13207] Bluetooth: hci3: command tx timeout [ 704.488585][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2131'. [ 704.874735][T13803] loop4: detected capacity change from 0 to 512 [ 704.988363][T13803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.001174][T13803] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.121271][T13803] binder: 13801:13803 ioctl c0306201 200000000040 returned -22 [ 706.034816][T13207] Bluetooth: hci3: command tx timeout [ 706.053992][T13803] binder: 13801:13803 ioctl c0306201 200000000640 returned -22 [ 707.487247][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.059516][T13765] chnl_net:caif_netlink_parms(): no params data found [ 708.075190][T13207] Bluetooth: hci3: command tx timeout [ 708.841207][T13851] loop7: detected capacity change from 0 to 1024 [ 708.940080][T13851] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 708.982666][T13851] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8040e019, mo2=0000] [ 709.046682][T13851] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.2141: lblock 2 mapped to illegal pblock 2 (length 1) [ 709.119026][T13851] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 709.124517][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 709.140242][ C1] EXT4-fs (loop7): initial error at time 1774317164: ext4_map_blocks:776: inode 3: block 2 [ 709.150318][ C1] EXT4-fs (loop7): last error at time 1774317164: ext4_map_blocks:776: inode 3: block 2 [ 709.171305][T13851] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 709.203811][T13851] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.2141: lblock 0 mapped to illegal pblock 48 (length 1) [ 709.277614][T13851] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 709.277972][T13851] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 709.376290][T13851] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2141: Failed to acquire dquot type 0 [ 709.644581][T13851] loop7: lost filesystem error report for type 5 error -117 [ 709.659541][T13851] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 709.671214][T13851] loop7: lost filesystem error report for type 5 error -117 [ 709.677971][T13851] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.2141: mark_inode_dirty error [ 710.164808][T13207] Bluetooth: hci3: command tx timeout [ 710.410391][T13851] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 710.444636][T13851] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 710.694930][T13851] EXT4-fs (loop7): 1 orphan inode deleted [ 710.702350][T13851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.758659][ T173] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 711.722543][ T173] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 712.384404][ T173] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 712.547072][ T7212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.605230][ T7212] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 712.787630][ T7212] loop7: lost filesystem error report for type 5 error -117 [ 712.803228][ T7212] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 713.049645][ T7212] loop7: lost filesystem error report for type 5 error -117 [ 713.588755][ T7212] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 713.667691][ T7212] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 713.671100][T13898] netlink: 'syz.3.2151': attribute type 1 has an invalid length. [ 714.049689][T13765] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.826082][T13765] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.862671][T13765] bridge_slave_0: entered allmulticast mode [ 715.876679][T13765] bridge_slave_0: entered promiscuous mode [ 716.016151][T13765] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.023285][T13765] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.070929][T13765] bridge_slave_1: entered allmulticast mode [ 717.067104][T13765] bridge_slave_1: entered promiscuous mode [ 717.568198][T13765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.745887][T13765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.025013][T13931] kAFS: unable to lookup cell '(' [ 720.997617][T13765] team0: Port device team_slave_0 added [ 721.034903][T13765] team0: Port device team_slave_1 added [ 721.105772][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2161'. [ 721.473850][T13947] o2cb: This node has not been configured. [ 721.480598][T13947] o2cb: Cluster check failed. Fix errors before retrying. [ 721.488942][T13947] (syz.1.2162,13947,0):user_dlm_register:674 ERROR: status = -22 [ 721.497278][T13947] (syz.1.2162,13947,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 722.312221][T13951] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2161'. [ 722.641444][T13765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.651059][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.679964][T13765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.709290][T13765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.779779][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.919084][T13765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.915019][T12200] bridge_slave_1: left allmulticast mode [ 723.946167][T12200] bridge_slave_1: left promiscuous mode [ 724.018601][T12200] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.051457][T12200] bridge_slave_0: left allmulticast mode [ 724.799322][T12200] bridge_slave_0: left promiscuous mode [ 724.830018][T12200] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.997836][T13995] loop4: detected capacity change from 0 to 1024 [ 726.029527][T13995] EXT4-fs: Ignoring removed mblk_io_submit option [ 726.055579][T13995] EXT4-fs: Ignoring removed oldalloc option [ 726.206902][T13995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 726.275718][T12200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.297810][T12200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.043990][T13995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.182196][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.193172][T12200] bond0 (unregistering): Released all slaves [ 727.695366][T14021] overlay: ./file0 is not a directory [ 728.803872][T13765] hsr_slave_0: entered promiscuous mode [ 728.815739][T13765] hsr_slave_1: entered promiscuous mode [ 730.248872][T12200] hsr_slave_0: left promiscuous mode [ 730.505638][T12200] hsr_slave_1: left promiscuous mode [ 731.255831][T12200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.263278][T12200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.618041][T12200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.164415][T12200] veth1_macvtap: left promiscuous mode [ 733.173564][T12200] veth0_macvtap: left promiscuous mode [ 733.183906][T12200] veth1_vlan: left promiscuous mode [ 733.691904][T12200] veth0_vlan: left promiscuous mode [ 733.920716][T14068] delete_channel: no stack [ 734.724898][T14069] sctp: [Deprecated]: syz.7.2188 (pid 14069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.724898][T14069] Use struct sctp_sack_info instead [ 735.608056][T14076] loop4: detected capacity change from 0 to 164 [ 735.856766][T14076] rock: directory entry would overflow storage [ 736.324617][T14076] rock: sig=0x4543, size=28, remaining=18 [ 738.041440][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2197'. [ 738.901349][T12200] team0 (unregistering): Port device team_slave_1 removed [ 739.226139][T12200] team0 (unregistering): Port device team_slave_0 removed [ 740.539983][T14077] net_ratelimit: 10 callbacks suppressed [ 740.540005][T14077] batadv0: mtu less than device minimum [ 740.553073][T14077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 740.565263][T14077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 740.576958][T14077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 740.588391][T14077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 740.599884][T14077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 740.611342][T14077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 740.622611][T14077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 740.634028][T14077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 740.645484][T14077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 740.778438][T14097] macvtap1: entered promiscuous mode [ 740.783900][T14097] macvtap1: entered allmulticast mode [ 740.828172][T14097] syz_tun: entered allmulticast mode [ 742.530284][T14128] loop4: detected capacity change from 0 to 64 [ 742.901714][T14134] overlayfs: failed to clone lowerpath [ 743.941494][T14128] syz.4.2204: attempt to access beyond end of device [ 743.941494][T14128] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 746.033464][T14155] loop7: detected capacity change from 0 to 8 [ 746.387347][ T31] audit: type=1800 audit(1774317201.898:103): pid=14143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2204" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 746.445094][T14143] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 746.565338][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.571761][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.684205][T14143] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 746.716524][T14155] SQUASHFS error: xz decompression failed, data probably corrupt [ 746.732085][T14143] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 747.238425][T14155] SQUASHFS error: Failed to read block 0x108: -5 [ 747.278367][T14155] SQUASHFS error: Unable to read metadata cache entry [106] [ 747.300551][T14155] SQUASHFS error: Unable to read inode 0x11f [ 751.010332][T13765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 751.927641][T13765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 752.126082][T13765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 752.151664][T14205] loop7: detected capacity change from 0 to 24 [ 752.167706][T14205] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 752.221709][T14205] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 752.240355][T13765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 752.377925][T14205] VFS: Lookup of 'file0' in romfs loop7 would have caused loop [ 752.782790][T13765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.806615][T14221] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 752.907406][T14221] tipc: Started in network mode [ 752.926446][T14221] tipc: Node identity 080211000001, cluster identity 4711 [ 752.933992][T14221] tipc: Enabled bearer , priority 0 [ 753.935422][ T30] tipc: Node number set to 134418688 [ 754.776582][T13765] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.851101][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.858288][T12199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.912657][T12199] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.919869][T12199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.242987][T13765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 758.773231][T13765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 761.237564][T14287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2238'. [ 761.352934][T14288] netlink: 'syz.4.2237': attribute type 21 has an invalid length. [ 761.886661][T14290] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 762.153867][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.172536][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.189998][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.198496][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.223097][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 762.885006][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 764.941359][T14317] tipc: Enabling of bearer rejected, already enabled [ 765.044699][ T5834] Bluetooth: hci4: command tx timeout [ 767.134936][ T5834] Bluetooth: hci4: command tx timeout [ 768.024890][T14349] loop4: detected capacity change from 0 to 131072 [ 768.185675][T14349] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 768.199247][T14349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 768.215729][T14349] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 769.311805][ T5834] Bluetooth: hci4: command tx timeout [ 771.788854][ T5834] Bluetooth: hci4: command tx timeout [ 773.857680][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 774.593486][T14293] chnl_net:caif_netlink_parms(): no params data found [ 779.420169][T12199] bridge_slave_1: left allmulticast mode [ 779.554483][T12199] bridge_slave_1: left promiscuous mode [ 779.575293][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.606985][T12199] bridge_slave_0: left allmulticast mode [ 781.627106][T12199] bridge_slave_0: left promiscuous mode [ 781.632926][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.779475][T14478] loop4: detected capacity change from 0 to 64 [ 783.002409][T14488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2282'. [ 783.111173][T14488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2282'. [ 783.203883][ T31] audit: type=1326 audit(1774317238.708:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 783.270742][ T31] audit: type=1326 audit(1774317238.708:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 783.293591][ T31] audit: type=1326 audit(1774317238.708:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 783.320136][ T31] audit: type=1326 audit(1774317238.708:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 783.649629][T12199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.654542][ T31] audit: type=1326 audit(1774317238.708:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 783.750499][T12199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.791925][ T31] audit: type=1326 audit(1774317238.708:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 783.822237][ T1091] kworker/u8:9: attempt to access beyond end of device [ 783.822237][ T1091] loop4: rw=8388609, sector=65, nr_sectors = 1 limit=64 [ 783.823217][ T31] audit: type=1326 audit(1774317238.708:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 783.840061][ T1091] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 783.956984][T12199] bond0 (unregistering): Released all slaves [ 784.035318][ T31] audit: type=1326 audit(1774317238.708:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 784.058353][ T31] audit: type=1326 audit(1774317238.758:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 784.222383][ T1091] kworker/u8:9: attempt to access beyond end of device [ 784.222383][ T1091] loop4: rw=8388609, sector=66, nr_sectors = 1 limit=64 [ 784.761096][ T31] audit: type=1326 audit(1774317238.758:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f4d9c799 code=0x7ffc0000 [ 784.797078][T14293] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.834477][ T1091] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 784.842978][ T1091] kworker/u8:9: attempt to access beyond end of device [ 784.842978][ T1091] loop4: rw=8388609, sector=67, nr_sectors = 1 limit=64 [ 784.854702][T14293] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.876034][T14293] bridge_slave_0: entered allmulticast mode [ 784.893914][T14293] bridge_slave_0: entered promiscuous mode [ 784.911222][T14293] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.925114][ T1091] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 784.933586][ T1091] kworker/u8:9: attempt to access beyond end of device [ 784.933586][ T1091] loop4: rw=8388609, sector=68, nr_sectors = 1 limit=64 [ 784.948077][T14293] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.948344][T14293] bridge_slave_1: entered allmulticast mode [ 784.950492][T14293] bridge_slave_1: entered promiscuous mode [ 784.977162][T14468] tipc: Enabling of bearer rejected, failed to enable media [ 785.784545][ T1091] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 785.818615][ T1091] kworker/u8:9: attempt to access beyond end of device [ 785.818615][ T1091] loop4: rw=8388609, sector=72, nr_sectors = 1 limit=64 [ 785.832767][ T1091] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 785.864997][ T1091] kworker/u8:9: attempt to access beyond end of device [ 785.864997][ T1091] loop4: rw=8388609, sector=73, nr_sectors = 1 limit=64 [ 785.874330][T12199] hsr_slave_0: left promiscuous mode [ 785.918844][ T1091] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 785.935338][ T1091] kworker/u8:9: attempt to access beyond end of device [ 785.935338][ T1091] loop4: rw=8388609, sector=76, nr_sectors = 1 limit=64 [ 785.999326][ T1091] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 786.014717][T12199] hsr_slave_1: left promiscuous mode [ 786.228127][T12199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.244963][ T1091] kworker/u8:9: attempt to access beyond end of device [ 786.244963][ T1091] loop4: rw=8388609, sector=77, nr_sectors = 1 limit=64 [ 786.452275][T12199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.855572][ T1091] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 786.868524][ T1091] kworker/u8:9: attempt to access beyond end of device [ 786.868524][ T1091] loop4: rw=1, sector=78, nr_sectors = 2168 limit=64 [ 786.920913][ T1091] kworker/u8:9: attempt to access beyond end of device [ 786.920913][ T1091] loop4: rw=1, sector=2246, nr_sectors = 1920 limit=64 [ 787.035390][ T1091] Buffer I/O error on dev loop4, logical block 4166, lost async page write [ 787.062372][ T1091] Buffer I/O error on dev loop4, logical block 4167, lost async page write [ 789.036783][T13207] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 789.047326][T13207] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 789.325074][T13207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 789.333012][T13207] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 789.355028][T13207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 790.208640][T14537] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2293'. [ 791.438097][T13207] Bluetooth: hci3: command tx timeout [ 791.719370][T14545] overlayfs: failed to clone lowerpath [ 792.875519][T12199] team0 (unregistering): Port device team_slave_1 removed [ 793.080492][T12199] team0 (unregistering): Port device team_slave_0 removed [ 793.514806][T13207] Bluetooth: hci3: command tx timeout [ 795.595613][T13207] Bluetooth: hci3: command tx timeout [ 795.669196][T13207] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 795.689988][T14581] loop4: detected capacity change from 0 to 128 [ 795.739746][T14293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.759819][T14293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.760069][T14581] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 797.680690][T13207] Bluetooth: hci3: command tx timeout [ 797.739760][T14293] team0: Port device team_slave_0 added [ 797.843322][T14293] team0: Port device team_slave_1 added [ 797.963079][T14293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.975721][T14293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.075006][T14293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.129669][T14293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.145425][T14293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.222445][T14293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.437285][T14293] hsr_slave_0: entered promiscuous mode [ 800.444175][T14293] hsr_slave_1: entered promiscuous mode [ 801.789755][T14630] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 801.809198][T14631] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 802.996611][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2311'. [ 803.007834][T14637] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2311'. [ 803.020030][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2311'. [ 803.034779][T14637] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2311'. [ 803.043844][T14637] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2311'. [ 804.170516][T12199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.334767][T14526] chnl_net:caif_netlink_parms(): no params data found [ 804.727067][T12199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.245612][T14670] loop4: detected capacity change from 0 to 16 [ 806.355824][T14670] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 806.646054][T14670] erofs (device loop4): mounted with root inode @ nid 36. [ 808.145913][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.157743][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.255691][T14679] bio_check_eod: 116 callbacks suppressed [ 808.255743][T14679] syz.4.2321: attempt to access beyond end of device [ 808.255743][T14679] loop4: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 808.277051][T14679] syz.4.2321: attempt to access beyond end of device [ 808.277051][T14679] loop4: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 808.296335][T14679] erofs (device loop4): read error -5 @ 0 of nid 36 [ 808.404171][T12199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.355881][T14672] loop7: detected capacity change from 0 to 32768 [ 809.740480][T12199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.785480][T14689] loop7: detected capacity change from 0 to 256 [ 809.809965][T14689] FAT-fs (loop7): Directory bread(block 64) failed [ 809.816797][T14689] FAT-fs (loop7): Directory bread(block 65) failed [ 809.823488][T14689] FAT-fs (loop7): Directory bread(block 66) failed [ 809.830345][T14689] FAT-fs (loop7): Directory bread(block 67) failed [ 809.836978][T14689] FAT-fs (loop7): Directory bread(block 68) failed [ 809.843508][T14689] FAT-fs (loop7): Directory bread(block 69) failed [ 809.850147][T14689] FAT-fs (loop7): Directory bread(block 70) failed [ 809.856957][T14689] FAT-fs (loop7): Directory bread(block 71) failed [ 809.863570][T14689] FAT-fs (loop7): Directory bread(block 72) failed [ 809.870209][T14689] FAT-fs (loop7): Directory bread(block 73) failed [ 809.875840][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 810.632441][T14686] vlan3: entered promiscuous mode [ 810.650158][T14686] vlan3: entered allmulticast mode [ 810.684585][T14686] hsr_slave_1: entered allmulticast mode [ 810.923752][T14705] loop4: detected capacity change from 0 to 16 [ 811.076511][T14705] erofs (device loop4): mounted with root inode @ nid 36. [ 811.119050][T14705] syz.4.2326: attempt to access beyond end of device [ 811.119050][T14705] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 811.260893][T14705] syz.4.2326: attempt to access beyond end of device [ 811.260893][T14705] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 811.302642][T14705] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 811.314508][T14705] erofs (device loop4): read error -117 @ 1 of nid 89 [ 811.362698][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 811.362755][ T31] audit: type=1800 audit(1774317266.838:121): pid=14705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2326" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 811.656098][T14695] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 811.705746][ T31] audit: type=1800 audit(1774317267.168:122): pid=14695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2324" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 811.745695][T14695] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 811.788008][T14695] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 811.916472][T14526] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.923647][T14526] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.967492][T14526] bridge_slave_0: entered allmulticast mode [ 812.009489][T14526] bridge_slave_0: entered promiscuous mode [ 812.046498][T14526] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.053809][T14526] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.094901][T14526] bridge_slave_1: entered allmulticast mode [ 812.106862][T14526] bridge_slave_1: entered promiscuous mode [ 812.459727][T14526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.473178][T14526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.253278][T14723] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 815.338632][T14738] libceph: resolve '96.' (ret=-3): failed [ 815.600271][T14526] team0: Port device team_slave_0 added [ 815.609109][T14526] team0: Port device team_slave_1 added [ 815.645738][T14526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.272643][T14526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.716058][T14526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.241094][T14526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.249305][T14526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.113404][T14526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.969633][T14526] hsr_slave_0: entered promiscuous mode [ 820.045156][T14526] hsr_slave_1: entered promiscuous mode [ 820.069780][T14526] debugfs: 'hsr0' already exists in 'hsr' [ 821.034732][T14526] Cannot create hsr debugfs directory [ 821.054502][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 821.068002][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 821.076928][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 821.086619][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 821.108383][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 821.288254][T14788] overlayfs: failed to clone lowerpath [ 822.562410][T14799] loop7: detected capacity change from 0 to 4096 [ 823.038555][T14804] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 823.195442][ T5834] Bluetooth: hci2: command tx timeout [ 823.494575][T12199] dvmrp1 (unregistering): left allmulticast mode [ 824.799747][T12199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.061076][T12199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.123419][T12199] bond0 (unregistering): Released all slaves [ 825.307086][ T5834] Bluetooth: hci2: command tx timeout [ 825.523116][T12199] bond1 (unregistering): Released all slaves [ 826.185283][T12199] bond2 (unregistering): Released all slaves [ 826.203918][T12199] bond3 (unregistering): Released all slaves [ 826.244642][T12199] bond4 (unregistering): Released all slaves [ 826.321142][T12199] bond5 (unregistering): Released all slaves [ 826.555222][T14799] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 827.372465][ T5834] Bluetooth: hci2: command tx timeout [ 827.837898][T12199] tipc: Disabling bearer [ 829.174972][T12199] tipc: Left network mode [ 829.495191][ T5834] Bluetooth: hci2: command tx timeout [ 830.382539][T12199] IPVS: stopping master sync thread 13258 ... [ 833.302794][T14888] netlink: 'syz.4.2365': attribute type 3 has an invalid length. [ 834.184486][T13207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 834.200399][T13207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 834.274879][T13207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 834.284867][T13207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 834.292720][T13207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 835.480112][T14904] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 836.909865][T13207] Bluetooth: hci1: command tx timeout [ 837.404203][T14927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2374'. [ 837.500571][T12199] hsr_slave_0: left promiscuous mode [ 837.530835][T12199] hsr_slave_1: left promiscuous mode [ 837.545389][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.574941][T12199] net_ratelimit: 10 callbacks suppressed [ 837.574961][T12199] batadv0: mtu less than device minimum [ 837.588411][T12199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 837.600153][T12199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 837.611846][T12199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 837.623507][T12199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 837.635343][T12199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 837.647031][T12199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 837.658711][T12199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 837.670401][T12199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 837.682153][T12199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 837.932459][T12199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.369876][T12199] batman_adv: batadv0: Interface deactivated: dummy0 [ 838.387243][T12199] batman_adv: batadv0: Removing interface: dummy0 [ 838.401091][T12199] veth1_macvtap: left promiscuous mode [ 838.416666][T12199] veth0_macvtap: left promiscuous mode [ 838.430313][T12199] veth1_vlan: left promiscuous mode [ 838.441128][T12199] veth0_vlan: left promiscuous mode [ 838.955163][T13207] Bluetooth: hci1: command tx timeout [ 841.044568][T13207] Bluetooth: hci1: command tx timeout [ 842.308965][T12199] team0 (unregistering): Port device team_slave_1 removed [ 842.345379][T12199] team0 (unregistering): Port device team_slave_0 removed [ 842.660206][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 843.114648][T13207] Bluetooth: hci1: command tx timeout [ 843.896173][T14782] chnl_net:caif_netlink_parms(): no params data found [ 849.881841][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 849.894175][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 849.904749][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 849.913230][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 849.924102][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 850.283603][T14782] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.309880][T14782] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.317480][T14782] bridge_slave_0: entered allmulticast mode [ 850.326952][T14782] bridge_slave_0: entered promiscuous mode [ 850.965849][T14782] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.973027][T14782] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.994746][T14782] bridge_slave_1: entered allmulticast mode [ 851.003034][T14782] bridge_slave_1: entered promiscuous mode [ 852.086196][ T5834] Bluetooth: hci4: command tx timeout [ 852.173094][T14782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.337702][T14894] chnl_net:caif_netlink_parms(): no params data found [ 853.246508][T14782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.273947][T15041] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2402'. [ 853.283461][T15041] tc_dump_action: action bad kind [ 854.174698][T13207] Bluetooth: hci4: command tx timeout [ 855.326434][T14782] team0: Port device team_slave_0 added [ 855.405730][T15068] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 856.130874][T14782] team0: Port device team_slave_1 added [ 856.536657][T13207] Bluetooth: hci4: command tx timeout [ 858.054652][T14894] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.555866][T13207] Bluetooth: hci4: command tx timeout [ 858.854951][T14894] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.862261][T14894] bridge_slave_0: entered allmulticast mode [ 858.914157][T14894] bridge_slave_0: entered promiscuous mode [ 859.218875][T14782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.923909][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.081664][T14782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.122571][T14894] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.153439][T14894] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.174821][T14894] bridge_slave_1: entered allmulticast mode [ 860.367382][T14894] bridge_slave_1: entered promiscuous mode [ 861.725370][T14782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.774649][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.865404][T14782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.616673][T12199] bridge_slave_1: left allmulticast mode [ 862.622639][T12199] bridge_slave_1: left promiscuous mode [ 863.588317][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.602577][T12199] bridge_slave_0: left allmulticast mode [ 864.494490][T12199] bridge_slave_0: left promiscuous mode [ 864.500382][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.554135][T12199] bridge_slave_1: left allmulticast mode [ 864.560921][T12199] bridge_slave_1: left promiscuous mode [ 864.566816][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.615925][T12199] bridge_slave_0: left allmulticast mode [ 864.624590][T12199] bridge_slave_0: left promiscuous mode [ 864.630409][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.094732][T12199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.142001][T12199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.161545][T12199] bond0 (unregistering): Released all slaves [ 868.342310][T12199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.533835][T12199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.545150][T12199] bond0 (unregistering): Released all slaves [ 869.445052][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.451528][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.643037][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2432'. [ 870.696685][T14894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.001422][T14782] hsr_slave_0: entered promiscuous mode [ 871.024508][T14782] hsr_slave_1: entered promiscuous mode [ 871.031457][T14782] debugfs: 'hsr0' already exists in 'hsr' [ 871.047057][T14782] Cannot create hsr debugfs directory [ 871.055124][T15011] chnl_net:caif_netlink_parms(): no params data found [ 872.987425][T12199] hsr_slave_0: left promiscuous mode [ 873.024840][T12199] hsr_slave_1: left promiscuous mode [ 873.035963][T12199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.069172][T12199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.201058][T12199] hsr_slave_0: left promiscuous mode [ 873.249313][T12199] hsr_slave_1: left promiscuous mode [ 873.266459][T12199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.327990][T12199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.798866][T15227] autofs: Bad value for 'fd' [ 877.810127][T12199] team0 (unregistering): Port device team_slave_1 removed [ 878.812736][T12199] team0 (unregistering): Port device team_slave_0 removed [ 881.655206][T12199] team0 (unregistering): Port device team_slave_1 removed [ 881.664042][T15254] ref_ctr increment failed for inode: 0x965 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888064e055c0 [ 882.502424][T12199] team0 (unregistering): Port device team_slave_0 removed [ 883.238956][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 883.256569][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 883.288186][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 883.305145][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 883.312988][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 885.373456][T14894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.436087][ T5834] Bluetooth: hci3: command tx timeout [ 887.214154][T14894] team0: Port device team_slave_0 added [ 887.223671][T14894] team0: Port device team_slave_1 added [ 887.496582][T14894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.503554][T14894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.534854][ T5834] Bluetooth: hci3: command tx timeout [ 887.904348][T14894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.604545][ T5834] Bluetooth: hci3: command tx timeout [ 890.970652][T14894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.001619][T14894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.544498][T14894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.694592][ T5834] Bluetooth: hci3: command tx timeout [ 894.737085][T15011] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.778599][T15011] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.798917][T15011] bridge_slave_0: entered allmulticast mode [ 894.819290][T15011] bridge_slave_0: entered promiscuous mode [ 895.018785][T15011] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.040393][T13207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 895.048573][T15011] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.058213][T15011] bridge_slave_1: entered allmulticast mode [ 895.059199][T13207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 895.066799][T15011] bridge_slave_1: entered promiscuous mode [ 895.077910][T13207] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 895.086419][T13207] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 895.285028][T13207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 896.122531][T15011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.210218][T15011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.588181][T15011] team0: Port device team_slave_0 added [ 896.716080][T15011] team0: Port device team_slave_1 added [ 898.074548][ T5834] Bluetooth: hci2: command tx timeout [ 899.250768][T15390] overlayfs: failed to clone upperpath [ 900.102062][T15394] xt_recent: Unsupported userspace flags (000000de) [ 900.174450][ T5834] Bluetooth: hci2: command tx timeout [ 900.427393][T15011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.437090][T15403] PKCS8: Unsupported PKCS#8 version [ 900.494451][T15011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.544641][T15011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.675690][T15011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.682681][T15011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.827693][T15011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.162899][T15011] hsr_slave_0: entered promiscuous mode [ 901.178617][T15011] hsr_slave_1: entered promiscuous mode [ 901.190205][T12199] bridge_slave_1: left allmulticast mode [ 901.211693][T12199] bridge_slave_1: left promiscuous mode [ 901.222501][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.232956][T12199] bridge_slave_0: left allmulticast mode [ 901.239374][T12199] bridge_slave_0: left promiscuous mode [ 901.246259][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.269206][T12199] bridge_slave_1: left allmulticast mode [ 901.276938][T12199] bridge_slave_1: left promiscuous mode [ 901.283021][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.294712][T12199] bridge_slave_0: left allmulticast mode [ 901.307602][T12199] bridge_slave_0: left promiscuous mode [ 901.313655][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.601853][T12199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.881622][T12199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.902007][T12199] bond0 (unregistering): Released all slaves [ 902.611805][ T5834] Bluetooth: hci2: command tx timeout [ 904.634658][ T5834] Bluetooth: hci2: command tx timeout [ 905.948088][T12199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.980221][T12199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.007209][T12199] bond0 (unregistering): Released all slaves [ 907.808599][T15268] chnl_net:caif_netlink_parms(): no params data found [ 909.059461][T12199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.299619][T12199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.332833][T13207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 910.350554][T13207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 910.365421][T13207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 910.377008][T13207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 910.385519][T13207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 910.512407][T12199] hsr_slave_0: left promiscuous mode [ 910.795131][T12199] hsr_slave_1: left promiscuous mode [ 910.801351][T12199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.949008][T12199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.231948][T15516] overlayfs: failed to clone upperpath [ 912.478147][ T5834] Bluetooth: hci1: command tx timeout [ 913.082584][T12199] team0 (unregistering): Port device team_slave_1 removed [ 914.367910][T12199] team0 (unregistering): Port device team_slave_0 removed [ 914.554502][ T5834] Bluetooth: hci1: command tx timeout [ 916.048378][T12199] team0 (unregistering): Port device team_slave_1 removed [ 916.817735][ T5834] Bluetooth: hci1: command tx timeout [ 916.857512][T12199] team0 (unregistering): Port device team_slave_0 removed [ 918.875234][ T5834] Bluetooth: hci1: command tx timeout [ 920.243093][T15572] netlink: 'syz.8.2511': attribute type 21 has an invalid length. [ 920.837099][T15353] chnl_net:caif_netlink_parms(): no params data found [ 920.884725][T15572] netlink: 'syz.8.2511': attribute type 6 has an invalid length. [ 920.892542][T15572] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2511'. [ 922.177750][T15268] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.205492][T15268] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.230061][T15268] bridge_slave_0: entered allmulticast mode [ 922.460796][T15268] bridge_slave_0: entered promiscuous mode [ 923.148895][T15353] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.172598][T15353] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.200837][T15353] bridge_slave_0: entered allmulticast mode [ 923.211197][T15353] bridge_slave_0: entered promiscuous mode [ 923.686382][T15268] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.693653][T15268] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.394708][T15268] bridge_slave_1: entered allmulticast mode [ 924.415687][T15268] bridge_slave_1: entered promiscuous mode [ 924.504714][T15353] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.512224][T15353] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.614207][T15353] bridge_slave_1: entered allmulticast mode [ 924.648392][T15353] bridge_slave_1: entered promiscuous mode [ 927.078893][T15268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.120724][T15268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.846410][T15353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.269014][T15353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.196499][T15268] team0: Port device team_slave_0 added [ 929.977305][T15268] team0: Port device team_slave_1 added [ 931.038317][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.044699][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.172771][T15353] team0: Port device team_slave_0 added [ 931.212462][T15353] team0: Port device team_slave_1 added [ 931.256396][T15268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.263380][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.412721][T15268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.340264][T15353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.347637][T15353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.464549][T15353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.508338][T15268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.545328][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.604691][T15268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.543204][T15353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.584561][T15353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.484430][T15353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.913912][T15268] hsr_slave_0: entered promiscuous mode [ 934.966907][T15268] hsr_slave_1: entered promiscuous mode [ 934.996870][T15268] debugfs: 'hsr0' already exists in 'hsr' [ 935.002623][T15268] Cannot create hsr debugfs directory [ 935.029520][T15499] chnl_net:caif_netlink_parms(): no params data found [ 935.375547][T12181] bridge_slave_1: left allmulticast mode [ 935.381322][T12181] bridge_slave_1: left promiscuous mode [ 935.403797][T12181] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.372754][ T5834] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 936.712594][T12181] bridge_slave_0: left allmulticast mode [ 936.810643][T12181] bridge_slave_0: left promiscuous mode [ 936.817739][T12181] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.188399][T12181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.225343][T12181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.237327][T12181] bond0 (unregistering): Released all slaves [ 939.480291][T12181] hsr_slave_0: left promiscuous mode [ 939.550161][T15707] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2535'. [ 940.128769][T15706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2536'. [ 940.138145][T15706] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2536'. [ 940.150336][T12181] hsr_slave_1: left promiscuous mode [ 940.256317][T12181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.335239][T12181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.545139][T12181] team0 (unregistering): Port device team_slave_1 removed [ 940.602090][T12181] team0 (unregistering): Port device team_slave_0 removed [ 942.559898][T15353] hsr_slave_0: entered promiscuous mode [ 942.567151][T15353] hsr_slave_1: entered promiscuous mode [ 942.868250][T15499] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.876460][T15499] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.883798][T15499] bridge_slave_0: entered allmulticast mode [ 942.893794][T15499] bridge_slave_0: entered promiscuous mode [ 942.902483][T15499] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.909714][T15499] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.917760][T15499] bridge_slave_1: entered allmulticast mode [ 942.942457][T15499] bridge_slave_1: entered promiscuous mode [ 943.787091][T15499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.261251][T13207] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 944.275092][T13207] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 944.284216][T13207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 944.292466][T13207] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 944.301929][T13207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 944.558464][T15499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.123455][ T173] bridge_slave_1: left allmulticast mode [ 945.145071][ T173] bridge_slave_1: left promiscuous mode [ 945.155516][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.412858][ T173] bridge_slave_0: left allmulticast mode [ 945.424193][ T173] bridge_slave_0: left promiscuous mode [ 945.434837][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.871381][T15777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2548'. [ 946.404664][T13207] Bluetooth: hci3: command tx timeout [ 947.011594][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.131445][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.157387][ T173] bond0 (unregistering): Released all slaves [ 948.104747][ T30] IPVS: starting estimator thread 0... [ 948.194928][ T31] audit: type=1326 audit(2000000134.689:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.8.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 948.230095][T15798] IPVS: using max 33 ests per chain, 79200 per kthread [ 948.444539][ T31] audit: type=1326 audit(2000000135.689:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.8.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 948.474427][T13207] Bluetooth: hci3: command tx timeout [ 948.490089][ T31] audit: type=1326 audit(2000000135.689:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.8.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 949.346164][ T31] audit: type=1326 audit(2000000135.699:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.8.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 949.420085][ T31] audit: type=1326 audit(2000000135.699:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.8.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 949.430930][ T173] hsr_slave_0: left promiscuous mode [ 949.484595][ T173] hsr_slave_1: left promiscuous mode [ 949.490708][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.616078][ T31] audit: type=1326 audit(2000000135.699:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.8.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 949.639094][ T31] audit: type=1326 audit(2000000135.709:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.8.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 949.685084][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.685111][ T31] audit: type=1326 audit(2000000135.709:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.8.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a54f9c799 code=0x7ffc0000 [ 950.596626][T13207] Bluetooth: hci3: command tx timeout [ 950.755076][ T173] team0 (unregistering): Port device team_slave_1 removed [ 950.806516][ T173] team0 (unregistering): Port device team_slave_0 removed [ 951.125394][T15819] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2558'. [ 953.057167][T13207] Bluetooth: hci3: command tx timeout [ 953.105674][T15499] team0: Port device team_slave_0 added [ 953.114257][T15499] team0: Port device team_slave_1 added [ 953.405448][T15499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.413995][T15499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.465644][T15499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.629979][T15499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.644527][T15499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.679429][T15499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.415619][T15499] hsr_slave_0: entered promiscuous mode [ 954.461563][T15499] hsr_slave_1: entered promiscuous mode [ 954.501676][T15499] debugfs: 'hsr0' already exists in 'hsr' [ 954.546240][T15499] Cannot create hsr debugfs directory [ 954.892224][T13207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 954.913274][T13207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 954.921758][T13207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 954.967079][T13207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 954.976742][T13207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 955.323878][T15748] chnl_net:caif_netlink_parms(): no params data found [ 957.213324][T13207] Bluetooth: hci4: command tx timeout [ 959.294519][T13207] Bluetooth: hci4: command tx timeout [ 959.437603][T15748] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.445383][T15748] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.452656][T15748] bridge_slave_0: entered allmulticast mode [ 959.618597][T15748] bridge_slave_0: entered promiscuous mode [ 959.648963][T15748] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.665066][T15748] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.672351][T15748] bridge_slave_1: entered allmulticast mode [ 959.714708][T15748] bridge_slave_1: entered promiscuous mode [ 960.629848][T15748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.674218][T15748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.721635][T15849] chnl_net:caif_netlink_parms(): no params data found [ 960.829887][T15748] team0: Port device team_slave_0 added [ 960.838424][T15499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 960.861212][T15748] team0: Port device team_slave_1 added [ 960.883893][T15499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 960.919055][T15499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 960.941726][T15748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.949113][T15748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.975305][T15748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.986348][T15499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 961.028040][T15748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.035748][T15748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.061718][T15748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.107026][T15849] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.114171][T15849] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.122706][T15849] bridge_slave_0: entered allmulticast mode [ 961.132340][T15849] bridge_slave_0: entered promiscuous mode [ 961.141671][T15849] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.149001][T15849] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.156696][T15849] bridge_slave_1: entered allmulticast mode [ 961.164214][T15849] bridge_slave_1: entered promiscuous mode [ 961.237107][T15748] hsr_slave_0: entered promiscuous mode [ 961.243760][T15748] hsr_slave_1: entered promiscuous mode [ 961.250710][T15748] debugfs: 'hsr0' already exists in 'hsr' [ 961.256885][T15748] Cannot create hsr debugfs directory [ 961.303776][T15849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.349446][T15849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.359388][T13207] Bluetooth: hci4: command tx timeout [ 961.440057][T15849] team0: Port device team_slave_0 added [ 961.451916][T15849] team0: Port device team_slave_1 added [ 961.551586][T15849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.558843][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.587679][T15849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.623359][T15849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.630756][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.657672][T15849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.668929][ T173] bridge_slave_1: left allmulticast mode [ 961.675392][ T173] bridge_slave_1: left promiscuous mode [ 961.681128][ T173] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.690448][ T173] bridge_slave_0: left allmulticast mode [ 961.696778][ T173] bridge_slave_0: left promiscuous mode [ 961.702584][ T173] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.830930][ T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.842646][ T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.853272][ T173] bond0 (unregistering): Released all slaves [ 961.962462][ T173] hsr_slave_0: left promiscuous mode [ 961.969015][ T173] hsr_slave_1: left promiscuous mode [ 961.975299][ T173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.983020][ T173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.102650][ T173] team0 (unregistering): Port device team_slave_1 removed [ 962.119645][ T173] team0 (unregistering): Port device team_slave_0 removed [ 962.280129][T15499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.310012][T15849] hsr_slave_0: entered promiscuous mode [ 962.317260][T15849] hsr_slave_1: entered promiscuous mode [ 962.576282][T15499] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.644728][T12181] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.651921][T12181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.687348][T15748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 962.700089][T15748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 962.720487][T12181] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.727694][T12181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.747236][T15748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 962.759730][T15748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 962.967722][T15748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.010386][T15748] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.067140][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.074311][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.147699][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.154925][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.250241][T15849] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 963.284296][T15849] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 963.298480][T15849] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 963.311139][T15849] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 963.363486][T15499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.437780][T13207] Bluetooth: hci4: command tx timeout [ 963.509722][T15499] veth0_vlan: entered promiscuous mode [ 963.552663][T15499] veth1_vlan: entered promiscuous mode [ 963.615317][T15849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.652107][T15849] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.667992][T15748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.696757][T12185] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.704015][T12185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.726743][T15499] veth0_macvtap: entered promiscuous mode [ 963.742416][T12185] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.749567][T12185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.771897][T15499] veth1_macvtap: entered promiscuous mode [ 963.846532][T15748] veth0_vlan: entered promiscuous mode [ 963.858268][T15499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.877873][T15748] veth1_vlan: entered promiscuous mode [ 963.888778][T15499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.929468][T12185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.941395][T12185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.966547][T12185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.977348][T12185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.079184][T15748] veth0_macvtap: entered promiscuous mode [ 964.137667][T15748] veth1_macvtap: entered promiscuous mode [ 964.184737][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.192582][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.250160][T15748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.266130][T12183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.277293][T12183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.307906][T15748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.356463][T12183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.378604][T12183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.421861][T12183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.439989][T12183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.835409][T15849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.013939][T12183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.071628][T12183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.197558][T12183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.244398][T12183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.734131][T15966] xt_hashlimit: size too large, truncated to 1048576 [ 967.982783][T15977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2578'. [ 969.706558][T15849] veth0_vlan: entered promiscuous mode [ 969.743146][T15849] veth1_vlan: entered promiscuous mode [ 969.873694][T15849] veth0_macvtap: entered promiscuous mode [ 969.941609][T15849] veth1_macvtap: entered promiscuous mode [ 970.771286][T16002] cgroup: Unknown subsys name 'cpuset' [ 970.881370][T15849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.967524][T15849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.196785][T16006] loop2: detected capacity change from 0 to 64 [ 972.042414][T12199] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.461384][T16011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.488765][T12185] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.654831][T12185] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.663681][T12185] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.125144][ T31] audit: type=1800 audit(2000000160.619:131): pid=16014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2587" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 973.589767][T12185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.349778][T12185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.360995][T12199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.427916][T12199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.823424][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 974.928441][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 976.249695][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 976.254688][T16036] ceph: No mds server is up or the cluster is laggy [ 976.281417][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 977.945685][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 977.951799][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 983.870689][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2610'. [ 985.785834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 992.739631][T16160] netlink: 'syz.2.2624': attribute type 2 has an invalid length. [ 992.872816][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.879350][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.308763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 994.430535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 996.495527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 997.958787][T16194] loop2: detected capacity change from 0 to 40427 [ 998.038589][T16194] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 998.048259][T16194] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 998.062577][T16194] F2FS-fs (loop2): invalid crc value [ 998.334003][T16194] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 999.068493][T16194] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 999.075612][T16194] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1000.909187][T16223] net_ratelimit: 10 callbacks suppressed [ 1000.909209][T16223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1001.654703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1002.248010][T16237] overlayfs: failed to clone lowerpath [ 1002.354898][T16238] overlayfs: failed to clone lowerpath [ 1009.274498][T12194] ------------[ cut here ]------------ [ 1009.287567][T12194] time_after(jiffies, timeout) [ 1009.287586][T12194] WARNING: io_uring/io_uring.c:2342 at io_ring_exit_work+0x4a3/0x960, CPU#0: kworker/u8:18/12194 [ 1009.303163][T12194] Modules linked in: [ 1009.310376][T12194] CPU: 0 UID: 0 PID: 12194 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.322040][T12194] Tainted: [L]=SOFTLOCKUP [ 1009.326363][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1009.338872][T12194] Workqueue: iou_exit io_ring_exit_work [ 1009.344463][T12194] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 1009.351776][T12194] Code: c6 05 17 8b d0 0e 01 48 c7 c7 40 6f 26 8c be 25 00 00 00 48 c7 c2 60 6a 26 8c e8 a8 d3 76 00 e9 88 fe ff ff e8 7e a0 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 1009.371539][T12194] RSP: 0018:ffffc900021af940 EFLAGS: 00010293 [ 1009.377622][T12194] RAX: ffffffff812b01b2 RBX: 0000000100011403 RCX: ffff88804c6a9e80 [ 1009.385691][T12194] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 1009.393697][T12194] RBP: ffffc900021afad0 R08: ffffc900021af8c7 R09: 1ffff92000435f18 [ 1009.402018][T12194] R10: dffffc0000000000 R11: fffff52000435f19 R12: dffffc0000000000 [ 1009.410116][T12194] R13: 00000001000113ff R14: 0000000000002000 R15: ffff88802902e000 [ 1009.418210][T12194] FS: 0000000000000000(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 1009.427911][T12194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1009.435094][T12194] CR2: 0000001b3490bff8 CR3: 000000005dc10000 CR4: 0000000000350ef0 [ 1009.443097][T12194] Call Trace: [ 1009.446484][T12194] [ 1009.449444][T12194] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1009.454961][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.460686][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.466389][T12194] ? process_scheduled_works+0xa8d/0x18c0 [ 1009.472130][T12194] ? process_scheduled_works+0xa8d/0x18c0 [ 1009.478035][T12194] process_scheduled_works+0xb6e/0x18c0 [ 1009.483650][T12194] ? __pfx_process_scheduled_works+0x10/0x10 [ 1009.489805][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.495465][T12194] ? assign_work+0x3d5/0x5e0 [ 1009.500180][T12194] worker_thread+0xa53/0xfc0 [ 1009.504823][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.510582][T12194] kthread+0x388/0x470 [ 1009.514687][T12194] ? __pfx_worker_thread+0x10/0x10 [ 1009.519932][T12194] ? __pfx_kthread+0x10/0x10 [ 1009.524553][T12194] ret_from_fork+0x51e/0xb90 [ 1009.529652][T12194] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.535730][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.541994][T12194] ? __switch_to+0xc7d/0x1450 [ 1009.546719][T12194] ? __pfx_kthread+0x10/0x10 [ 1009.551421][T12194] ret_from_fork_asm+0x1a/0x30 [ 1009.556245][T12194] [ 1009.559303][T12194] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1009.566605][T12194] CPU: 0 UID: 0 PID: 12194 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.577831][T12194] Tainted: [L]=SOFTLOCKUP [ 1009.582174][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1009.592250][T12194] Workqueue: iou_exit io_ring_exit_work [ 1009.597860][T12194] Call Trace: [ 1009.601144][T12194] [ 1009.604081][T12194] vpanic+0x56c/0xa60 [ 1009.608094][T12194] ? __pfx__printk+0x10/0x10 [ 1009.612784][T12194] ? __pfx_vpanic+0x10/0x10 [ 1009.617308][T12194] ? is_bpf_text_address+0x292/0x2b0 [ 1009.622619][T12194] ? is_bpf_text_address+0x26/0x2b0 [ 1009.627843][T12194] panic+0xc5/0xd0 [ 1009.631590][T12194] ? __pfx_panic+0x10/0x10 [ 1009.636045][T12194] ? ret_from_fork_asm+0x1a/0x30 [ 1009.641020][T12194] __warn+0x315/0x4f0 [ 1009.645024][T12194] ? io_ring_exit_work+0x4a3/0x960 [ 1009.650159][T12194] ? io_ring_exit_work+0x4a3/0x960 [ 1009.655294][T12194] __report_bug+0x29a/0x540 [ 1009.659820][T12194] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1009.665734][T12194] ? io_ring_exit_work+0x4a3/0x960 [ 1009.670856][T12194] ? __pfx___report_bug+0x10/0x10 [ 1009.675880][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.681514][T12194] ? __mutex_lock+0x319/0x1300 [ 1009.686286][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.691926][T12194] ? io_ring_exit_work+0x41b/0x960 [ 1009.697051][T12194] ? io_ring_exit_work+0x4a3/0x960 [ 1009.702165][T12194] report_bug+0x16a/0x220 [ 1009.706508][T12194] ? io_ring_exit_work+0x4a3/0x960 [ 1009.711638][T12194] ? io_ring_exit_work+0x4a5/0x960 [ 1009.716760][T12194] handle_bug+0x9c/0x200 [ 1009.721053][T12194] exc_invalid_op+0x1a/0x50 [ 1009.725566][T12194] asm_exc_invalid_op+0x1a/0x20 [ 1009.730421][T12194] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 1009.736146][T12194] Code: c6 05 17 8b d0 0e 01 48 c7 c7 40 6f 26 8c be 25 00 00 00 48 c7 c2 60 6a 26 8c e8 a8 d3 76 00 e9 88 fe ff ff e8 7e a0 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 1009.755933][T12194] RSP: 0018:ffffc900021af940 EFLAGS: 00010293 [ 1009.762007][T12194] RAX: ffffffff812b01b2 RBX: 0000000100011403 RCX: ffff88804c6a9e80 [ 1009.769977][T12194] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 1009.777943][T12194] RBP: ffffc900021afad0 R08: ffffc900021af8c7 R09: 1ffff92000435f18 [ 1009.785911][T12194] R10: dffffc0000000000 R11: fffff52000435f19 R12: dffffc0000000000 [ 1009.793884][T12194] R13: 00000001000113ff R14: 0000000000002000 R15: ffff88802902e000 [ 1009.801861][T12194] ? io_ring_exit_work+0x4a2/0x960 [ 1009.807014][T12194] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1009.812493][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.818142][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.823780][T12194] ? process_scheduled_works+0xa8d/0x18c0 [ 1009.829590][T12194] ? process_scheduled_works+0xa8d/0x18c0 [ 1009.835332][T12194] process_scheduled_works+0xb6e/0x18c0 [ 1009.840916][T12194] ? __pfx_process_scheduled_works+0x10/0x10 [ 1009.846907][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.852629][T12194] ? assign_work+0x3d5/0x5e0 [ 1009.857234][T12194] worker_thread+0xa53/0xfc0 [ 1009.861850][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.867496][T12194] kthread+0x388/0x470 [ 1009.871560][T12194] ? __pfx_worker_thread+0x10/0x10 [ 1009.876765][T12194] ? __pfx_kthread+0x10/0x10 [ 1009.881354][T12194] ret_from_fork+0x51e/0xb90 [ 1009.885953][T12194] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.891075][T12194] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.896723][T12194] ? __switch_to+0xc7d/0x1450 [ 1009.901414][T12194] ? __pfx_kthread+0x10/0x10 [ 1009.906000][T12194] ret_from_fork_asm+0x1a/0x30 [ 1009.910902][T12194] [ 1009.914229][T12194] Kernel Offset: disabled [ 1009.918653][T12194] Rebooting in 86400 seconds..