last executing test programs: 18m16.188950553s ago: executing program 32 (id=115): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 14m55.450280894s ago: executing program 33 (id=1000): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sched_setattr(r0, &(0x7f0000000340)={0x38, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x8, 0xfffffffffffffffe, 0xfffffffc}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) r1 = syz_open_dev$vim2m(0x0, 0x8000000000007ffb, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x1, {0x1, @sliced={0x1, [0x7, 0xa, 0x7, 0x4, 0x101, 0x3ff, 0x0, 0x6, 0x3, 0x7, 0xb, 0x2, 0x100, 0x4, 0x1, 0xf000, 0x1, 0x100, 0x8e4, 0x8000, 0x7e5, 0x3, 0x4, 0x1000, 0x6, 0x4, 0x3, 0x7, 0x2ea, 0x1ff, 0xe5c9, 0x800, 0x8, 0x8, 0x5, 0xa99, 0x7, 0x5, 0x0, 0x7f, 0xe02e, 0xfffc, 0x1, 0x1000, 0x5, 0x6, 0x7, 0x5]}}, 0xfffffe00}) dup(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 12m41.454198879s ago: executing program 34 (id=1412): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c8, 0xa563, 0x2, 0x9, 0x46, 0xfffffffd, 0xfffffffc, 0x6, 0xffd, 0x8000, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x0, 0x66, 0x34d, 0x5, 0x8, 0x9, 0x200, 0x4, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="a79408900a000200aaaaaaaaaa360000060005"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11m57.171369671s ago: executing program 7 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_mount_image$fuse(0x0, 0x0, 0x3800080, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(r1, r1, 0x0, 0x100000110) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = eventfd2(0x74a6, 0x0) writev(r2, &(0x7f0000001780)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) syz_read_part_table(0x1061, &(0x7f0000000000)="$eJzsz7FNxDAABdBvJ5CkIhtkIVo6qGgQW9AxCzUTgERBd9tc55OLFLfA3RXvFda39fUlh6ta6pwsybg/rFM/n3/2+7SH/8ccW7ur5WVNPn/bQ1J6/28rKblP0g4Zx/P5Le+v81R7/F56561+DEOS2neHp68LfRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbtopAAD//2qGDsk=") 11m55.948679959s ago: executing program 7 (id=1555): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) 11m52.722651235s ago: executing program 7 (id=1563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 11m51.738296898s ago: executing program 7 (id=1570): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 11m50.622846925s ago: executing program 7 (id=1571): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x1000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000100)=0x200, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x17, r3}, 0x10) 11m48.566892223s ago: executing program 7 (id=1572): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) flock(r0, 0x5) 11m48.257370541s ago: executing program 35 (id=1572): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) flock(r0, 0x5) 10m37.021775956s ago: executing program 4 (id=1828): socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 10m35.056574132s ago: executing program 4 (id=1831): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x255}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0xfe78b36d55c77b99, 0x2100, 0x2d8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4, 0xfffffffc, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 10m32.317042066s ago: executing program 4 (id=1840): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10m30.936302799s ago: executing program 4 (id=1846): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$eJzs3c9rHOUbAPBnNtk2/fH9JoVS1IMEerBSu2kSf1TwUI+ixYLe65JsQ8mmW7Kb0sSC7cFevEgRRCyI3jx491j8B/wrClooUoIevERmM5tuk910k+wmaffzgUned2Y2z/vuzPPmnZ1dNoC+NZr+yEW8HBFfJxHDTdsGI9s4urrf8uObU+mSxMrKJ38lkWTrGvsn2e8jWeWliPjty4jTuY1xq4tLs8VyuTSf1cdqc9fGqotLZ67MFWdKM6WrE5OT596anHj3nbe71tfXL/7z3cf3Pzj31cnlb395eOxuEufjaLatuR87cKu5Mhqj2XOSj/PrdhzvQrD9JNnrBrAtA1me5yMdA4ZjIMv6llaGd7NpQI99kaY10KcS+Q99qjEPaFzbd+k6+Lnx6P3VC6CN/R9cfW0khurXRoeXk6eujNLr3ZEuxE9j/PrnvbvpEt17HQLgmW7djoizg4Mbx78kG/+272wH+6yPkcXP7zA00IH76fznjVbzn9za/CdazH+OtMjd7WiT/01yD7sQpq10/vdey/nv2k2rkYGs9r/6nC+fXL5SLqVj2/8j4lTkD6b1Te7nfJZbfrDSbmPz/C9d0viNuWDWjoeDB59+zHSxVtxRp5s8uh3xSsv5b7J2/JMWxz99Pi52GONE6d6r7bY9u/9renKLaeXHiNdaHv/kqcCb3J8cq58PY42zYqO/75z4vV38LfS/Jx79nBXa938kab5fW916jB+G/i2127bd8/9A8mm9fCBbd6NYq82PRxxIPtq4fuLJYxv1xv7p+X/q5ObjX6vz/1Ca2B32/87xO827Dm2t/72V9n968/N/3fHfeuHBh59/3y5+Z8f/zXrpVLamk/Gv0wbu5LkDAAAAAACA/SYXEUcjyRXWyrlcobD6/o7jcThXrlRrpy9XFq5OR/2zsiORzzXudA83vR9iPHs/bKM+sa4+GRHHIuKbgUP1emGqUp7e684DAAAAAAAAAAAAAAAAAADAPnEkYqjV5/9TfwzsdeuAntvkK7+BF1z7/M+2dOObnoB9adv//4e62w5g95n/Q/+S/9C/5D/0L/kP/Uv+Q/+S/9C/tpL/P13oYUMAAAAAAAAAAAAAAAAAAAAAAAAAAADgxXDxwoV0WVl+fHMqrU9fX1yYrVw/M12qzhbmFqYKU5X5a4WZSmWmXCpMVeae9ffKlcq18YlYuDFWK1VrY9XFpUtzlYWrtUtX5oozpUul/K70CgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpXUNhWYXB/NEOhy4W9HpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4In/AgAA//+z7zor") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000002c0)={0x0, 0x9, 0x0, 0x1}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x88800, 0x0) bind$802154_dgram(r1, &(0x7f0000000080), 0x14) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xd}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x0, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x6, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000580)=""/4096) fsetxattr$security_evm(r2, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "8dc1bbeb7d2ceaf3e8880c8a8bc5d6f7"}, 0x11, 0x0) 10m30.133938988s ago: executing program 4 (id=1850): socket$alg(0x26, 0x5, 0x0) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r2, &(0x7f0000000800)=[{&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/93, 0x5d}, {0x0}, {0x0}], 0x4, &(0x7f0000002d40)=[{&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000a40)=""/7, 0x7}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x3, 0x0) 10m29.120794702s ago: executing program 4 (id=1851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 10m13.941285129s ago: executing program 36 (id=1851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 7m47.248615879s ago: executing program 2 (id=2245): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1004801, &(0x7f0000000140)=ANY=[], 0x1, 0x224, &(0x7f0000000340)="$eJzsmb9rFFEQx7/v7d7uGUWw0MLmLAJGMHu7eyppLGIrgpCIWh5mDdFNTi5X5AIWwcbGP8B/RCGVhZ2NWFgJ/gDBwpQ2Cj55PzY7l70kS0KwyHyKx/fNzps3M5ebhRwYhjm2fPv668uLGzPzlwGcwiRCZ//hlT6S+H966TWcfLty+ummlY3t5wKAUqW/v8/9AU7izaynL7eo32qnj1JKzUNi0u3vQOKS03chEHnE0Z3OIHDfmR8ZbTPpnXDGPBMPevnCw6U8i/WS6CXVpXYANZL/1obAAoCmu0KQ3FaH64+7OdC3Is8K0VDFPZVHdYQ+WlhsoM9j+2fym5W4Tlqgi7j3/NmG3kfOHpP+JZBInO5AYM7pGYSIoqjltllC6j/vl/E9/bGN1F+3tmY957DsWniw9llxZnpPn6KIw1xRR/xVRxI5ONBHcDRC57G/s/7iUItsVU8FNeLQJtRzLgaUTWOnjyBftuG5rc131Tjf/2t7DyfM4AJQefRhIs9vUcv7m06cHYlzgfaHiIB2ddyfhJ0fwgcukvnkk7dCe7D8pL06XJ9eWu4uZovZSpp2rsVX4vhq2jaz2a5jZ5+N3zTzaYLEb+ziG4gAa93BoJ+sAYN+sr1P7VoWgLlXvZ/mjDTzT2Lqj1LF68WUHY6/w7z/QntOmN2Ut2vyDMMwDMMwDMMwDMMwDMMwe9D6WLHgNdz/KkXxm1gVP71tvP8FAAD//zPPXKY=") sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x181) setxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [], {0x4, 0x3}, [{0x8, 0x4}, {0x8, 0x4, 0xee01}, {0x8, 0x1, 0xee00}], {0x10, 0x2}, {0x20, 0x3}}, 0x3c, 0x0) 7m45.47562546s ago: executing program 2 (id=2248): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x784303f63e718bbc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20) 7m43.947047916s ago: executing program 2 (id=2252): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0500330002000000080032"], 0x44}}, 0x80) 7m41.322203848s ago: executing program 2 (id=2258): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x4008054) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x712}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f0, 0x6}, {0x10007, 0x30000080}]}}) 7m40.128814746s ago: executing program 2 (id=2261): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000300)={{0x11, @loopback, 0x22b8, 0x0, 'rr\x00'}, {@loopback, 0x22b8, 0x1, 0x1}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000500)='0 1\n', 0x4) close(0xffffffffffffffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) close(r1) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000800)='hel', 0x3, 0x0, &(0x7f0000000900)={0x2, 0x22b8, @loopback}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) close(r3) sendto$inet(r2, &(0x7f0000000b00)='world\x00', 0x6, 0x0, &(0x7f0000000c00)={0x2, 0x22b8, @loopback}, 0x10) 7m39.770610104s ago: executing program 2 (id=2264): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000001040)={0x2020}, 0xffffff16) 7m24.20402283s ago: executing program 37 (id=2264): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000001040)={0x2020}, 0xffffff16) 4m5.430594985s ago: executing program 0 (id=2802): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1a1}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200e704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x4, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x40040001, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m3.420663612s ago: executing program 0 (id=2811): r0 = socket$packet(0x11, 0x2, 0x300) mlockall(0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f00000007c0)}, 0x20) 4m0.677208317s ago: executing program 0 (id=2815): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xfffffffd, &(0x7f0000000600)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) 3m56.560691394s ago: executing program 0 (id=2824): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) 3m53.018310817s ago: executing program 0 (id=2834): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xfffffffd, &(0x7f0000000600)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) 3m51.344128627s ago: executing program 0 (id=2839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x80, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xe, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080), 0x4) 3m36.075172076s ago: executing program 38 (id=2839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x80, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xe, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080), 0x4) 3m27.437463078s ago: executing program 3 (id=2903): write(0xffffffffffffffff, &(0x7f0000000340), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000027c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="13", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000400)="c4", 0x1}], 0x1}}], 0x2, 0x24008003) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3m27.000429359s ago: executing program 3 (id=2904): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x80ad}], 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004000000"], 0x48) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x2, 0x367}}], 0x1, 0x0, 0x0) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f00001f8000/0x4000)=nil) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='source', 0x0, r1) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x919e) 3m26.248842446s ago: executing program 3 (id=2905): socket$inet6(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r5], 0x2c}}, 0x18) 3m25.154490812s ago: executing program 3 (id=2908): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x65, 0x38, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778803000000dfeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000200)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x61, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x35, 0x39, 0x62, 0x66, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x36]}, &(0x7f0000000100)={0x0, "0011228dc41c601f2399aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff000000000000000000003500", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x63, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x38, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x36, 0x30, 0x37, 0x32, 0x66, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x36, 0x31, 0x30, 0x0, 0x30, 0x33, 0x30, 0x30, 0x30, 0x62, 0x38, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x33, 0x62, 0x30, 0x6e, 0x35, 0x30, 0x30, 0x38, 0x30, 0x35, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aa8fccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbffffffff00000000445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x38, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x0, 0x66, 0x30, 0x30, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbecddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233449e32778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x39, 0x35, 0x30, 0x32, 0x30, 0x30, 0x2e, 0x65, 0x62, 0x30, 0x39, 0x65, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbcc5deeff00112233445566778899aabbccddeeff001157a1000066778899aa00000000ff00112233445566578899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x36, 0x64, 0x31, 0x3, 0x34, 0x34, 0x62, 0x36, 0x30, 0x63, 0x9c0ab4d12417f6d4, 0x30, 0x63, 0x61, 0x39]}, &(0x7f00000001c0)={0x0, "e9fc07c1d50135a0b736d87533c5799e064527252c7b54810a1501a7600733ea10dba9e42740c4f4d1d7ca77336ab2098626b979a876efcd4b87419c301bf79f", 0x3b}, 0x48, r0) 3m24.965278087s ago: executing program 3 (id=2909): move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) unshare(0x8040480) syz_io_uring_setup(0x11dc, &(0x7f0000000180)={0x0, 0x4686, 0x2, 0x3, 0x37d}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 3m22.872450156s ago: executing program 3 (id=2914): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xf, 0x8}, {0x8, 0xfffe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x1, 0x6, 0x5, 0x8, 0x7, 0x3ff, 0x5, 0x4}}}}]}, 0x58}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m6.327881275s ago: executing program 39 (id=2914): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xf, 0x8}, {0x8, 0xfffe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x1, 0x6, 0x5, 0x8, 0x7, 0x3ff, 0x5, 0x4}}}}]}, 0x58}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 25.821456043s ago: executing program 6 (id=3273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = semget$private(0x0, 0x1, 0x490) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/37) ftruncate(0xffffffffffffffff, 0x800799c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x6, @remote, 0x8}, 0x1c) sendfile(r5, 0xffffffffffffffff, 0x0, 0x7ffff000) 24.750674299s ago: executing program 6 (id=3274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x301041, 0x41) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 18.908706106s ago: executing program 6 (id=3293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = semget$private(0x0, 0x1, 0x490) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000000)=""/37) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) ftruncate(r4, 0x800799c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x6, @remote, 0x8}, 0x1c) sendfile(r5, r4, 0x0, 0x7ffff000) 17.313802863s ago: executing program 6 (id=3297): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) write(r2, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000000400)='\n\x00', 0x1) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0105865, &(0x7f00000007c0)={&(0x7f0000000440)=0x7fffffffffffffff, 0x6, &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f0000000780)}) 12.164713004s ago: executing program 1 (id=3307): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x8a) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000000)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) accept(r5, 0x0, 0x0) 12.126936745s ago: executing program 6 (id=3309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = semget$private(0x0, 0x1, 0x490) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000000)=""/37) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) ftruncate(r4, 0x800799c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x6, @remote, 0x8}, 0x1c) sendfile(r5, r4, 0x0, 0x7ffff000) 10.540863213s ago: executing program 1 (id=3314): move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) unshare(0x8040480) syz_io_uring_setup(0x11dc, &(0x7f0000000180)={0x0, 0x4686, 0x2, 0x3, 0x37d}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 9.456034578s ago: executing program 1 (id=3318): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = memfd_secret(0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r4, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r9 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000000)={0x9, {0x0, 0xfffff88f, 0x200000e7}, {0x0, 0x0, 0x3, 0x3}, {0xfdfb, 0x3}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) sendmsg$nl_generic(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42014}, 0x20089890) 8.653755367s ago: executing program 9 (id=3320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) write(r2, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000000400)='\n\x00', 0x1) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0105865, &(0x7f00000007c0)={&(0x7f0000000440)=0x7fffffffffffffff, 0x6, &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f0000000780)}) 7.906629394s ago: executing program 8 (id=3322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x240088e0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000480)=""/66, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 7.086083734s ago: executing program 5 (id=3323): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xffffffffffffffff, 0x24020000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) setrlimit(0xd, 0x0) 6.626296205s ago: executing program 8 (id=3324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4624, @remote}, 0x10) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) 6.541457847s ago: executing program 6 (id=3325): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100), 0x5, 0x7ec, &(0x7f00000005c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0x40001a2) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0xc1) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000003440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13e8, 0x11e0, 0xc8, 0x8, 0x11e0, 0x5803, 0x1318, 0x2e8, 0x2e8, 0x1318, 0x2e8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @empty, [0x0, 0xffffffff, 0xff, 0xffffff00], [0xff, 0x0, 0xff, 0xff000000], 'vlan1\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x3a, 0x9, 0x2, 0x4d}, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x1}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0xd}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000140)={0x17c04, r5, 0x3052, 0x973f, 0x81, 0x1}) 5.740728515s ago: executing program 9 (id=3326): unshare(0x20000400) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x12084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53, 0x2000, 0x1040002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd481, 0x4000, 0x2, 0x389, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f73, 0x8, 0x2, 0x1c9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2004, 0x200, 0xfffffff5, 0xec}}], 0x1, 0x0, 0x0) 5.53920708s ago: executing program 8 (id=3327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x78) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x3f}, 0x2c) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000080)={@loopback, @broadcast, 0xffffffffffffffff, "32ad8cce61d1a17d61cc6ddda340514fd2d01c463a896171f012dcde55324bdf", 0x4, 0x7fff, 0x5, 0x7ff}, 0x3c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0xfffffffe, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) bind$alg(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x4044810) unshare(0x6020400) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) vmsplice(r5, 0x0, 0x0, 0xa) 5.515667861s ago: executing program 5 (id=3328): move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) unshare(0x8040480) syz_io_uring_setup(0x11dc, &(0x7f0000000180)={0x0, 0x4686, 0x2, 0x3, 0x37d}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 5.227757428s ago: executing program 1 (id=3329): setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0xc05}], 0x1}, 0x4040000) 4.724499709s ago: executing program 9 (id=3330): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) setrlimit(0x1, &(0x7f0000000000)={0x2, 0xffd}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 4.584287563s ago: executing program 8 (id=3331): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 3.620529996s ago: executing program 1 (id=3332): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xb02040, &(0x7f0000000340)={[], [{@fsmagic={'fsmagic', 0x3d, 0x3a7d}}, {@subj_type={'subj_type', 0x3d, 'uid'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'subj_type'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}, 0xff, 0x4ac, &(0x7f00000003c0)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gik0WIMHg2Jd+PRxL/AmxejHoiJV008GhKivVA81czuDN1ud0u3LF3b/XyS7b63M7PvfWfe2307rzMBtK2B9E8SsS0ifo+IvnJ26QoD5af5uZmxW3MzY0ksLLz9d1Ja7+bczFi+ar7d1ixzqBBR+DyJ48nycqcuXjozWixOnM/yQ9NnPxyaunjpudNnR09NnJo4N3Ls2NEjwy++MPJ8U+JM47q595PJfXtef/fqm2Mnrr7383dptXbvLy+vjOOObtUIqIaBdK/9s1BSvezJBuq+EWyvSCedLawIDemIiPRwdZX6f190xOLB64vXPmtp5YB7Kv1u2lJ/8ewCsIklcRcb5x8hwAaUf9Gnv3/zx/qMPP4fbrwc0Z2l5+dmxuZvx98Zhez1rntY/kBEnJj99+v0EY2ehwAAWIPS2ObZWuO/QuwuPZfnOnZkcyj9EXF/ROyMiAciYldEPBhRWvehiHi4vPFC3yrLH6jKLx//FK7XrHOTpOO/lyrGfvMV8WdP/R1Zbnsp/q7k5OnixOFsnxyKri1pfniFMn549bcv6y2rHP+lj7T8fCyYVeB6Z9UJuvHR6dFm7YQblyP2dtaKP7k9E5C2gD0Rsbext96RJ04//e2+eivdOf4VNGGeaeGbiKfKx382quLPJSvPTw71RHHi8FDeKpb75dcrb9Ur/67ib4IbBx4pJxaPf9UaFQ2tWJw4P9V4GVf++KLub5q1tv/u5J3SnPW198uvXRidnj4/HNGdvFHK57/pSq+PLG57YXS6N83n66ft/9DB2v1/Z7ZNevzTvZQ24v0R8WhEPJbV/fGIOBARB1eI/6dXnvhghfiTSKJ1x/9yxHjNz7/b7b8/qZyvX0Oi48yP39ebMV/d8T8as6XP2rLS598drLaCd7n7AAAAYEMoRMS2SAqD5fTAtigUBgfL/8O/K+4rFCenpp85OfnRufHyNQL90VXIz3T1VZwPHU5ms3cs50eyc8X58iPZeeOvOnpL+cGxyeJ4i2OHdrd1af+PvP+n/upode2Ae27N82jXmlsPYP1V9/9Ci+oBrL/VfP/7LQCb09L+35P+6W1VXYD15X4t0L5q9f9Pq/LG/7A5Le//f9a4ZR2wGRn/Q/vS/6F96f/Qlhq5nD+O11vUExGN3BYgv1hg7XcV6Fn1Ff7tksjveNHUd/5465I37I1LZ7qzRVFoUaQdDTa2TZFIe8z6Frp4DxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICN7L8AAAD//x642f8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x6020400) waitid$P_PIDFD(0x3, r4, 0x0, 0x40000004, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000300)=r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.619654396s ago: executing program 5 (id=3333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10888) socket$inet(0x2, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 3.616984426s ago: executing program 9 (id=3342): syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[], 0x46, 0xc11, &(0x7f0000000d00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x20004000) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfff8) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f00000002c0)=@raw=[@tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f0000000080)='GPL\x00', 0x5, 0x26, &(0x7f0000000380)=""/38, 0x41100, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x290, 0x168, 0x10, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3502, 0x21, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x0, 'syz0\x00', 0x2}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x228, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv6=@mcast1, @ipv4=@remote, @ipv6=@local, @ipv4=@local}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xc00) 3.514735408s ago: executing program 8 (id=3334): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}], 0x1, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.617791019s ago: executing program 8 (id=3335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = semget$private(0x0, 0x1, 0x490) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000000)=""/37) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) ftruncate(r4, 0x800799c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x6, @remote, 0x8}, 0x1c) sendfile(r5, r4, 0x0, 0x7ffff000) 1.475906646s ago: executing program 9 (id=3336): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = mq_open(&(0x7f0000001380)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r4, 0x2, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x6}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000070000", @ANYBLOB="0c0099000400000019000000140004006e696376663000"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000014) 1.463059296s ago: executing program 5 (id=3337): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffb4}, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x3000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b000900", 0x2a}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {0x0, 0x400b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0xc) 286.633144ms ago: executing program 9 (id=3338): setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x147}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825", 0xcd}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{0x0}, {&(0x7f0000002240)="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", 0x744}], 0x2}}], 0x2, 0x0) 223.150385ms ago: executing program 5 (id=3339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x400) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xa) fchdir(r5) chdir(&(0x7f00000000c0)='./sys\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x10001, 0x2) getdents64(r6, &(0x7f0000000100)=""/201, 0xc9) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x44) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=koi8-r,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c757466382c6e616d65636173f9653d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c666d61736b3d3030303030303030303030303030303030442402a032613a98d03c0893461110824ad5fd698be27a3142665d54faffd656f4706ee46b6bc111d0d2b320bd5ee9256f1dac6b464ec48211bc8a96f98c1032125935b885f1486d2db488041071a577dfc1a938a62e7aa1e36e16d9e61f869badc4a8452c159987b973d941aef0f1f59b9f9449122210cfb526032b167fe1458c3798ea55e9ba795bcb968b70261e1c8d44963571a441f66663e08aaad0cb7e8a20412bacf98f6d777568ded4617b6a594807af615ebdc16fe6e2085825af6d8a29dc048638d8fd6ac080a8f52ab7b46257ce344a02fcd9e8e9d38052053ac81c2c37a1595b24710da9c91aa05cf34d4f851ccd88011d4bf00aaea2893abf5d9982dc96a116ecb629353e72"], 0x1, 0x1533, &(0x7f0000006800)="$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") 103.631868ms ago: executing program 1 (id=3340): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, 0x0) 0s ago: executing program 5 (id=3341): unshare(0x20000400) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x12084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53, 0x2000, 0x1040002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd481, 0x4000, 0x2, 0x389, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f73, 0x8, 0x2, 0x1c9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2004, 0x200, 0xfffffff5, 0xec}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 6c1/0x2480 [ 567.845812][T11511] ? nfs_stat_to_errno+0x170/0x170 [ 567.850921][T11511] ? lock_chain_count+0x20/0x20 [ 567.855766][T11511] ? _raw_spin_unlock_irq+0x1f/0x40 [ 567.860981][T11511] ? lockdep_hardirqs_on+0x94/0x140 [ 567.866169][T11511] get_signal+0x1093/0x1340 [ 567.870665][T11511] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 567.876633][T11511] arch_do_signal_or_restart+0xc4/0x1310 [ 567.882258][T11511] ? do_user_addr_fault+0x8a6/0xb20 [ 567.887462][T11511] ? get_sigframe_size+0x10/0x10 [ 567.892392][T11511] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 567.898385][T11511] ? exit_to_user_mode_loop+0x3b/0x110 [ 567.903852][T11511] exit_to_user_mode_loop+0x70/0x110 [ 567.909127][T11511] exit_to_user_mode_prepare+0xee/0x180 [ 567.914655][T11511] irqentry_exit_to_user_mode+0x5/0x30 [ 567.920101][T11511] exc_page_fault+0x88/0x100 [ 567.924678][T11511] asm_exc_page_fault+0x22/0x30 [ 567.929512][T11511] RIP: 0033:0x7f8a6fd9e1a1 [ 567.933910][T11511] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 567.953500][T11511] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 567.959551][T11511] RAX: 0000000000000000 RBX: 00007f8a70025fa0 RCX: 00007f8a6fd9e199 [ 567.967506][T11511] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 567.975458][T11511] RBP: 00007f8a6fe35888 R08: 0000000000000000 R09: 0000000000000000 [ 567.983409][T11511] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 567.991363][T11511] R13: 00007f8a70026038 R14: 00007f8a70025fa0 R15: 00007ffe3ece1588 [ 567.999326][T11511] [ 568.007111][T11511] memory: usage 307200kB, limit 307200kB, failcnt 2964 [ 568.013995][T11511] memory+swap: usage 308216kB, limit 9007199254740988kB, failcnt 0 [ 568.022335][T11511] kmem: usage 3612kB, limit 9007199254740988kB, failcnt 0 [ 568.029460][T11511] Memory cgroup stats for /syz2: [ 568.029919][T11511] anon 503808 [ 568.029919][T11511] file 310157312 [ 568.029919][T11511] kernel 3698688 [ 568.029919][T11511] kernel_stack 98304 [ 568.029919][T11511] pagetables 557056 [ 568.029919][T11511] sec_pagetables 0 [ 568.029919][T11511] percpu 27232 [ 568.029919][T11511] sock 0 [ 568.029919][T11511] vmalloc 0 [ 568.029919][T11511] shmem 310001664 [ 568.029919][T11511] zswap 0 [ 568.029919][T11511] zswapped 0 [ 568.029919][T11511] file_mapped 94863360 [ 568.029919][T11511] file_dirty 98304 [ 568.029919][T11511] file_writeback 0 [ 568.029919][T11511] swapcached 5632000 [ 568.029919][T11511] anon_thp 0 [ 568.029919][T11511] file_thp 0 [ 568.029919][T11511] shmem_thp 0 [ 568.029919][T11511] inactive_anon 7266304 [ 568.029919][T11511] active_anon 303247360 [ 568.029919][T11511] inactive_file 0 [ 568.029919][T11511] active_file 98304 [ 568.029919][T11511] unevictable 0 [ 568.029919][T11511] slab_reclaimable 979720 [ 568.029919][T11511] slab_unreclaimable 1969808 [ 568.125529][T11511] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1722,pid=11027,uid=0 [ 568.142386][T11511] Memory cgroup out of memory: Killed process 11027 (syz.2.1722) total-vm:202608kB, anon-rss:1548kB, file-rss:20608kB, shmem-rss:84608kB, UID:0 pgtables:280kB oom_score_adj:0 [ 568.278642][ C1] net_ratelimit: 12 callbacks suppressed [ 570.367043][ T29] oom_reaper: reaped process 11027 (syz.2.1722), now anon-rss:0kB, file-rss:20480kB, shmem-rss:84608kB [ 572.397192][T11511] syz.2.1860 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 572.406823][T11511] CPU: 0 PID: 11511 Comm: syz.2.1860 Not tainted syzkaller #0 [ 572.414283][T11511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.424332][T11511] Call Trace: [ 572.427613][T11511] [ 572.430530][T11511] dump_stack_lvl+0x188/0x24e [ 572.435196][T11511] ? ___ratelimit+0x14e/0x610 [ 572.439873][T11511] ? show_regs_print_info+0x12/0x12 [ 572.445059][T11511] ? load_image+0x410/0x410 [ 572.449557][T11511] ? ___ratelimit+0x474/0x610 [ 572.454224][T11511] ? radix_tree_cpu_dead+0x160/0x160 [ 572.459492][T11511] dump_header+0xd8/0x820 [ 572.463808][T11511] oom_kill_process+0x361/0x550 [ 572.468648][T11511] out_of_memory+0xe25/0x1220 [ 572.473310][T11511] ? print_unlock_imbalance_bug+0x160/0x160 [ 572.479188][T11511] ? mutex_lock_nested+0x10/0x10 [ 572.484109][T11511] ? unregister_oom_notifier+0x20/0x20 [ 572.489552][T11511] mem_cgroup_out_of_memory+0x2c0/0x390 [ 572.495080][T11511] ? mem_cgroup_oom_trylock+0x210/0x210 [ 572.500615][T11511] ? do_raw_spin_unlock+0x11d/0x230 [ 572.505812][T11511] try_charge_memcg+0xc9d/0x17c0 [ 572.510744][T11511] ? percpu_ref_put+0x180/0x180 [ 572.515585][T11511] ? get_mem_cgroup_from_mm+0x34/0x290 [ 572.521035][T11511] charge_memcg+0x117/0x3b0 [ 572.525541][T11511] ? __mem_cgroup_charge+0x80/0x80 [ 572.530651][T11511] ? get_mem_cgroup_from_mm+0x34/0x290 [ 572.536293][T11511] ? get_mem_cgroup_from_mm+0x34/0x290 [ 572.541744][T11511] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 572.547281][T11511] __mem_cgroup_charge+0x21/0x80 [ 572.552213][T11511] shmem_add_to_page_cache+0x8d7/0x1c90 [ 572.557753][T11511] ? __filemap_get_folio+0x10f/0xde0 [ 572.563031][T11511] ? __filemap_get_folio+0x10f/0xde0 [ 572.568323][T11511] ? put_page+0x270/0x270 [ 572.572645][T11511] ? mark_lock+0x94/0x320 [ 572.576965][T11511] shmem_get_folio_gfp+0x1663/0x35e0 [ 572.582269][T11511] shmem_write_begin+0xee/0x3f0 [ 572.587128][T11511] generic_perform_write+0x2fa/0x5c0 [ 572.592410][T11511] ? generic_file_direct_write+0x330/0x330 [ 572.598206][T11511] ? __file_remove_privs+0x5f0/0x5f0 [ 572.603481][T11511] ? rwsem_write_trylock+0x135/0x1c0 [ 572.608753][T11511] ? clear_nonspinnable+0x60/0x60 [ 572.613757][T11511] ? generic_write_checks_count+0x363/0x440 [ 572.619637][T11511] __generic_file_write_iter+0x148/0x2a0 [ 572.625258][T11511] generic_file_write_iter+0xab/0x2e0 [ 572.630618][T11511] __kernel_write_iter+0x298/0x690 [ 572.635717][T11511] ? vfs_read+0x960/0x960 [ 572.640039][T11511] ? _raw_spin_unlock+0x24/0x40 [ 572.644871][T11511] ? generic_file_llseek_size+0x344/0x390 [ 572.650578][T11511] ? iov_iter_bvec+0x4a/0x1f0 [ 572.655247][T11511] dump_user_range+0x40a/0x840 [ 572.660006][T11511] ? dump_skip+0x40/0x40 [ 572.664237][T11511] ? dump_emit+0x74/0xe0 [ 572.668476][T11511] ? dump_emit+0xa2/0xe0 [ 572.672725][T11511] ? elf_core_dump+0x2aa9/0x3630 [ 572.677646][T11511] elf_core_dump+0x30ca/0x3630 [ 572.682408][T11511] ? load_elf_binary+0x2820/0x2820 [ 572.687523][T11511] ? dump_vma_snapshot+0xaea/0xe40 [ 572.692621][T11511] ? verify_lock_unused+0x140/0x140 [ 572.697824][T11511] ? __lock_acquire+0x7ea0/0x7ea0 [ 572.702834][T11511] ? mas_next_entry+0xe03/0xe90 [ 572.707686][T11511] ? rcu_read_lock_any_held+0xb0/0x130 [ 572.713127][T11511] ? 0xffffffffff600000 [ 572.717267][T11511] ? getname_kernel+0x142/0x2f0 [ 572.722106][T11511] do_coredump+0x16c1/0x2480 [ 572.726695][T11511] ? nfs_stat_to_errno+0x170/0x170 [ 572.731802][T11511] ? lock_chain_count+0x20/0x20 [ 572.736638][T11511] ? _raw_spin_unlock_irq+0x1f/0x40 [ 572.741905][T11511] ? lockdep_hardirqs_on+0x94/0x140 [ 572.747092][T11511] get_signal+0x1093/0x1340 [ 572.751589][T11511] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 572.757557][T11511] arch_do_signal_or_restart+0xc4/0x1310 [ 572.763191][T11511] ? do_user_addr_fault+0x8a6/0xb20 [ 572.768380][T11511] ? get_sigframe_size+0x10/0x10 [ 572.773312][T11511] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 572.779283][T11511] ? exit_to_user_mode_loop+0x3b/0x110 [ 572.784725][T11511] exit_to_user_mode_loop+0x70/0x110 [ 572.789996][T11511] exit_to_user_mode_prepare+0xee/0x180 [ 572.795525][T11511] irqentry_exit_to_user_mode+0x5/0x30 [ 572.800985][T11511] exc_page_fault+0x88/0x100 [ 572.805561][T11511] asm_exc_page_fault+0x22/0x30 [ 572.810405][T11511] RIP: 0033:0x7f8a6fd9e1a1 [ 572.814804][T11511] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 572.834390][T11511] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 572.840444][T11511] RAX: 0000000000000000 RBX: 00007f8a70025fa0 RCX: 00007f8a6fd9e199 [ 572.848399][T11511] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 572.856351][T11511] RBP: 00007f8a6fe35888 R08: 0000000000000000 R09: 0000000000000000 [ 572.864321][T11511] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 572.872291][T11511] R13: 00007f8a70026038 R14: 00007f8a70025fa0 R15: 00007ffe3ece1588 [ 572.880257][T11511] [ 572.884944][T11511] memory: usage 307200kB, limit 307200kB, failcnt 13055 [ 572.891924][T11511] memory+swap: usage 308216kB, limit 9007199254740988kB, failcnt 0 [ 572.899831][T11511] kmem: usage 3616kB, limit 9007199254740988kB, failcnt 0 [ 572.906919][T11511] Memory cgroup stats for /syz2: [ 572.907024][T11511] anon 245760 [ 572.907024][T11511] file 310616064 [ 572.907024][T11511] kernel 3702784 [ 572.907024][T11511] kernel_stack 98304 [ 572.907024][T11511] pagetables 585728 [ 572.907024][T11511] sec_pagetables 0 [ 572.907024][T11511] percpu 27232 [ 572.907024][T11511] sock 0 [ 572.907024][T11511] vmalloc 0 [ 572.907024][T11511] shmem 310517760 [ 572.907024][T11511] zswap 0 [ 572.907024][T11511] zswapped 0 [ 572.907024][T11511] file_mapped 95264768 [ 572.907024][T11511] file_dirty 98304 [ 572.907024][T11511] file_writeback 0 [ 572.907024][T11511] swapcached 5632000 [ 572.907024][T11511] anon_thp 0 [ 572.907024][T11511] file_thp 0 [ 572.907024][T11511] shmem_thp 0 [ 572.907024][T11511] inactive_anon 7749632 [ 572.907024][T11511] active_anon 303022080 [ 572.907024][T11511] inactive_file 0 [ 572.907024][T11511] active_file 98304 [ 572.907024][T11511] unevictable 0 [ 572.907024][T11511] slab_reclaimable 968896 [ 572.907024][T11511] slab_unreclaimable 1949160 [ 573.003279][T11511] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1860,pid=11511,uid=0 [ 573.018438][T11511] Memory cgroup out of memory: Killed process 11511 (syz.2.1860) total-vm:104300kB, anon-rss:1424kB, file-rss:53536kB, shmem-rss:7808kB, UID:0 pgtables:228kB oom_score_adj:0 [ 573.328565][ T6487] net_ratelimit: 19 callbacks suppressed [ 573.986385][T11519] __vm_enough_memory: pid: 11519, comm: syz.5.1875, no enough memory for the allocation [ 577.180616][T11541] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.190450][T11541] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.199231][T11541] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.207933][T11541] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.315028][T11541] team0: Port device vxlan0 added [ 577.331881][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1872'. [ 577.772745][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 577.784436][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 577.792822][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 577.802691][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 577.812734][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 577.820393][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 578.088842][T11558] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 578.125322][T11553] bond0 speed is unknown, defaulting to 1000 [ 578.466931][T11553] bond0 speed is unknown, defaulting to 1000 [ 578.678647][ C1] net_ratelimit: 29 callbacks suppressed [ 579.969189][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 580.197670][T11553] chnl_net:caif_netlink_parms(): no params data found [ 580.745978][T11553] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.809822][T11553] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.844120][T11553] device bridge_slave_0 entered promiscuous mode [ 580.892611][T11553] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.918873][T11553] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.950813][T11553] device bridge_slave_1 entered promiscuous mode [ 581.150587][T11553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.371054][T11553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.442983][T11553] team0: Port device team_slave_0 added [ 581.881244][T11553] team0: Port device team_slave_1 added [ 582.242744][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 582.432817][T11553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.464150][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.571545][T11553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.650286][T11553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.671314][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.778169][T11553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.094017][T11553] device hsr_slave_0 entered promiscuous mode [ 583.124998][T11553] device hsr_slave_1 entered promiscuous mode [ 583.140860][T11553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.165663][T11553] Cannot create hsr debugfs directory [ 583.759069][ C1] net_ratelimit: 14 callbacks suppressed [ 584.278693][ T4287] Bluetooth: hci5: command 0x040f tx timeout [ 585.076915][T11553] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 585.757741][T11553] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 585.866163][T11553] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 586.328523][T11553] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 586.359313][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 588.925144][ T6481] net_ratelimit: 26 callbacks suppressed [ 590.677161][T11646] futex_wake_op: syz.3.1900 tries to shift op by 144; fix this program [ 590.864876][T11647] netlink: 'syz.5.1901': attribute type 11 has an invalid length. [ 591.115456][T11553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.300450][ T5813] tipc: Left network mode [ 591.304992][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 591.319647][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 591.372475][T11553] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.432528][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 591.454044][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 591.542042][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.549208][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.868957][T11694] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1910'. [ 594.518668][ C1] net_ratelimit: 15 callbacks suppressed [ 594.661423][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 594.694748][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 594.733034][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 594.749021][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.756158][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.829546][T11701] futex_wake_op: syz.2.1911 tries to shift op by 144; fix this program [ 595.031592][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 595.044734][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 595.109884][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 595.142908][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 595.170962][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 595.209878][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 595.233969][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 595.256016][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 595.294016][T11553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.329861][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 595.358535][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 595.378398][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 595.409520][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.551652][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 598.570853][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 598.620235][T11553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.800055][T11768] nftables ruleset with unbound set [ 599.878631][ C1] net_ratelimit: 36 callbacks suppressed [ 601.893254][T11448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 601.913028][T11448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.184761][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 602.209127][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.274067][T11553] device veth0_vlan entered promiscuous mode [ 602.332604][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.355838][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.428293][T11553] device veth1_vlan entered promiscuous mode [ 602.635017][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 602.662479][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 602.731919][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.802428][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.865168][T11553] device veth0_macvtap entered promiscuous mode [ 602.981519][ T5813] device hsr_slave_0 left promiscuous mode [ 603.038704][ T5813] device hsr_slave_1 left promiscuous mode [ 604.569829][ T5813] bond5 (unregistering): Released all slaves [ 605.238646][ C0] net_ratelimit: 21 callbacks suppressed [ 605.501989][ T5813] bond4 (unregistering): Released all slaves [ 605.718882][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 606.680829][ T5813] bond3 (unregistering): Released all slaves [ 608.956861][ T5813] bond2 (unregistering): Released all slaves [ 609.460394][ T5813] bond1 (unregistering): Released all slaves [ 610.918625][ C1] net_ratelimit: 25 callbacks suppressed [ 612.162364][ T5813] bond0 (unregistering): Released all slaves [ 612.218902][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 612.230280][T11553] device veth1_macvtap entered promiscuous mode [ 612.264449][T11857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 612.330569][T11857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.365161][T11857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.423128][T11863] netlink: 'syz.5.1929': attribute type 10 has an invalid length. [ 612.472298][T11863] team0: Port device bridge0 removed [ 612.482776][T11863] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 612.491810][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1929'. [ 612.511112][T11867] device bridge_slave_1 left promiscuous mode [ 612.522317][T11867] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.537250][T11867] device bridge_slave_0 left promiscuous mode [ 612.544268][T11867] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.613581][T11867] bond0: (slave bridge0): Releasing backup interface [ 612.680915][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'. [ 612.746909][T11896] device macvtap1 entered promiscuous mode [ 612.767124][T11896] device syz_tun entered promiscuous mode [ 612.803046][T11897] device syz_tun left promiscuous mode [ 612.855007][T11897] device macvtap1 left promiscuous mode [ 612.895229][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.938753][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.979004][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.012876][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.044725][T11553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.287814][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.638642][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.808318][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.906568][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.989106][T11553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.026911][T11553] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.063339][T11926] MPTCP: kernel_bind error, err=-98 [ 615.125571][T11553] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.159218][T11553] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.187977][T11553] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.359697][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 615.379953][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 615.410904][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 615.442486][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 615.944177][ T4385] net_ratelimit: 18 callbacks suppressed [ 616.369754][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1957'. [ 616.775318][T11950] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16 [ 616.881001][ T6481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.951297][ T6481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.010124][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.160895][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.174767][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.247399][ T6481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 617.692223][ T5813] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.080598][ T5813] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.571140][ T5813] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.686738][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1969'. [ 618.763802][T11983] device macvtap1 entered promiscuous mode [ 618.787968][T11983] device syz_tun entered promiscuous mode [ 618.821744][T11984] device syz_tun left promiscuous mode [ 618.899669][T11984] device macvtap1 left promiscuous mode [ 619.285463][ T5813] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.166464][T11991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.187965][T11991] bridge0: port 3(vlan2) entered blocking state [ 620.194391][T11991] bridge0: port 3(vlan2) entered forwarding state [ 620.973148][T11991] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.999617][T11991] net_ratelimit: 64 callbacks suppressed [ 620.999627][T11991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.094378][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 621.267546][T12016] cfg80211: Invalid regulatory domain detected: BB [ 621.306853][T12016] 9pnet_fd: Insufficient options for proto=fd [ 624.612636][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.618971][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.618134][ T27] audit: type=1800 audit(2000000432.454:447): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1978" name="bus" dev="ramfs" ino=61340 res=0 errno=0 [ 625.839037][T12038] tipc: Started in network mode [ 625.844081][T12038] tipc: Node identity 080211, cluster identity 4711 [ 625.872975][T12038] tipc: Enabled bearer , priority 0 [ 626.039617][ T6481] net_ratelimit: 38 callbacks suppressed [ 627.244385][T10904] tipc: Node number set to 134353152 [ 627.423610][ T7] libceph: connect (1)[c::]:6789 error -101 [ 627.439577][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 627.478629][T12077] ceph: No mds server is up or the cluster is laggy [ 627.486714][T11940] libceph: connect (1)[c::]:6789 error -101 [ 627.493605][T11940] libceph: mon0 (1)[c::]:6789 connect error [ 627.518375][T12082] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 628.495896][ T7] libceph: connect (1)[c::]:6789 error -101 [ 628.505431][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 628.665382][T12092] tipc: Enabling of bearer rejected, failed to enable media [ 628.689910][T12104] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1993'. [ 631.244854][ T5408] net_ratelimit: 29 callbacks suppressed [ 633.190551][ T5813] device hsr_slave_0 left promiscuous mode [ 633.218946][ T5813] device hsr_slave_1 left promiscuous mode [ 633.629232][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.668816][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.788193][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.874144][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.034618][ T5813] device bridge_slave_1 left promiscuous mode [ 634.064703][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.116235][ T5813] device bridge_slave_0 left promiscuous mode [ 634.153526][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.427637][ T5813] device veth1_macvtap left promiscuous mode [ 634.463263][ T5813] device veth0_macvtap left promiscuous mode [ 634.505399][ T5813] device veth1_vlan left promiscuous mode [ 634.536417][ T5813] device veth0_vlan left promiscuous mode [ 636.438694][ C1] net_ratelimit: 37 callbacks suppressed [ 639.983425][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 639.994510][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 640.027920][T12224] ceph: No mds server is up or the cluster is laggy [ 640.046896][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 640.092286][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 640.485896][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 640.634016][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 640.805972][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.972634][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.558619][ C0] net_ratelimit: 28 callbacks suppressed [ 645.037530][ T5813] bond0 (unregistering): Released all slaves [ 645.255368][T12184] device geneve2 entered promiscuous mode [ 645.549375][T12264] jffs2: notice: (12264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 645.666619][T12254] netlink: 'syz.3.2031': attribute type 1 has an invalid length. [ 646.633250][ C0] net_ratelimit: 18 callbacks suppressed [ 646.904603][T12256] device bridge4 entered promiscuous mode [ 648.307844][ T5181] libceph: connect (1)[c::]:6789 error -101 [ 648.322092][T12292] tipc: New replicast peer: 172.20.20.187 [ 648.336108][T12290] ceph: No mds server is up or the cluster is laggy [ 648.343871][ T5181] libceph: mon0 (1)[c::]:6789 connect error [ 648.496243][T12292] tipc: Enabled bearer , priority 10 [ 651.344218][T12350] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2049'. [ 651.878618][ C1] net_ratelimit: 36 callbacks suppressed [ 652.334305][T12372] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2053'. [ 653.861193][T12383] autofs4:pid:12383:autofs_fill_super: called with bogus options [ 654.032634][T12386] loop9: detected capacity change from 0 to 2048 [ 654.055245][T10905] libceph: connect (1)[c::]:6789 error -13 [ 654.068434][T10905] libceph: mon0 (1)[c::]:6789 connect error [ 654.868329][T12386] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 654.885633][T12388] ceph: No mds server is up or the cluster is laggy [ 654.901489][T10905] libceph: connect (1)[c::]:6789 error -13 [ 654.941943][T10905] libceph: mon0 (1)[c::]:6789 connect error [ 654.959542][T12386] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 655.012366][T12386] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 655.116978][T12386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.088775][ C1] net_ratelimit: 30 callbacks suppressed [ 657.757046][T12433] loop9: detected capacity change from 0 to 2048 [ 658.203047][T12433] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 659.646835][T11553] EXT4-fs (loop9): unmounting filesystem. [ 660.276894][T12469] UBIFS error (pid: 12469): cannot open "(null)", error -22 [ 661.680418][T12476] overlayfs: failed to clone upperpath [ 662.518784][ C1] net_ratelimit: 23 callbacks suppressed [ 663.111763][ T27] audit: type=1326 audit(2000000469.964:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e3f9e199 code=0x7ffc0000 [ 663.269953][T12509] overlayfs: overlapping lowerdir path [ 663.278200][ T27] audit: type=1326 audit(2000000469.964:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e3f9e199 code=0x7ffc0000 [ 663.448781][ T27] audit: type=1326 audit(2000000469.974:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f81e3f9e199 code=0x7ffc0000 [ 663.595029][ T27] audit: type=1326 audit(2000000469.974:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f81e3f9df02 code=0x7ffc0000 [ 663.737270][ T27] audit: type=1326 audit(2000000469.974:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f81e3f5e9ce code=0x7ffc0000 [ 663.853126][ T27] audit: type=1326 audit(2000000469.984:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f81e3f9dfc7 code=0x7ffc0000 [ 664.068832][ T27] audit: type=1326 audit(2000000469.984:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81e3f5e9ce code=0x7ffc0000 [ 664.288086][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.295221][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.301357][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.307415][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.313496][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.319598][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.325662][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.331747][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.337799][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.343877][T12519] tc action pedit 'at' offset 5 out of bounds [ 664.370714][ T27] audit: type=1326 audit(2000000469.984:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f81e3f5e9ce code=0x7ffc0000 [ 664.527016][ T27] audit: type=1326 audit(2000000469.994:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e3f9e199 code=0x7ffc0000 [ 664.649652][ T27] audit: type=1326 audit(2000000469.994:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.5.2080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f81e3f9e199 code=0x7ffc0000 [ 665.325709][T12541] tipc: Enabling of bearer rejected, already enabled [ 667.547945][ T4384] net_ratelimit: 29 callbacks suppressed [ 668.203821][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 668.203853][ T27] audit: type=1326 audit(2000000475.054:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 668.398257][T12574] overlayfs: failed to clone lowerpath [ 668.665008][ T27] audit: type=1326 audit(2000000475.164:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 669.856742][ T27] audit: type=1326 audit(2000000475.164:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 670.066190][ T27] audit: type=1326 audit(2000000475.194:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 670.241641][T12601] device bridge1 entered promiscuous mode [ 670.261589][ T27] audit: type=1326 audit(2000000475.204:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 670.300000][T12601] team0: Port device bridge1 added [ 670.328386][T12603] bridge0: port 1(team0) entered blocking state [ 670.349119][T12603] bridge0: port 1(team0) entered disabled state [ 670.567189][T12603] device team0 entered promiscuous mode [ 670.577684][ T27] audit: type=1326 audit(2000000475.204:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 670.579808][T12603] device team_slave_0 entered promiscuous mode [ 670.798769][ T27] audit: type=1326 audit(2000000475.204:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 671.014616][T12603] device team_slave_1 entered promiscuous mode [ 671.024459][ T27] audit: type=1326 audit(2000000475.204:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 671.102869][T12620] device syzkaller0 entered promiscuous mode [ 671.249184][ T27] audit: type=1326 audit(2000000475.204:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 671.488377][ T27] audit: type=1326 audit(2000000475.214:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12573 comm="syz.8.2094" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 672.286674][T12638] overlayfs: overlapping lowerdir path [ 672.857988][ T5408] net_ratelimit: 24 callbacks suppressed [ 677.917030][ T4382] net_ratelimit: 22 callbacks suppressed [ 681.794629][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2132'. [ 683.166350][ C0] net_ratelimit: 14 callbacks suppressed [ 683.819708][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2136'. [ 685.726731][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.749843][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.857513][ C0] net_ratelimit: 23 callbacks suppressed [ 689.663947][T12832] IPVS: set_ctl: invalid protocol: 137 172.30.0.9:20001 [ 694.283185][ C1] net_ratelimit: 18 callbacks suppressed [ 696.131825][T12894] loop9: detected capacity change from 0 to 128 [ 696.838767][ T4287] Bluetooth: Wrong link type (-22) [ 698.250837][T12925] device bridge1 entered promiscuous mode [ 698.343187][T12925] team0: Port device bridge1 added [ 698.782458][T12926] bridge0: port 3(team0) entered blocking state [ 698.795501][T12926] bridge0: port 3(team0) entered disabled state [ 698.876648][T12926] device team0 entered promiscuous mode [ 698.969047][T12926] device team_slave_0 entered promiscuous mode [ 699.038350][T12926] device team_slave_1 entered promiscuous mode [ 699.100370][T12926] bridge0: port 3(team0) entered blocking state [ 699.100431][T12938] overlayfs: failed to clone lowerpath [ 699.106732][T12926] bridge0: port 3(team0) entered forwarding state [ 699.639687][ T9] net_ratelimit: 24 callbacks suppressed [ 699.693907][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 699.738450][T12949] bond0: option resend_igmp: invalid value (18446744072707910257) [ 699.767685][T12949] bond0: option resend_igmp: allowed values 0 - 255 [ 701.928282][T12978] overlayfs: failed to clone lowerpath [ 703.114231][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 704.440342][T13004] infiniband syz2: set down [ 704.635084][ T7] bond0 speed is unknown, defaulting to 1000 [ 704.758720][ C1] net_ratelimit: 23 callbacks suppressed [ 710.438582][ C0] net_ratelimit: 19 callbacks suppressed [ 710.862027][T13078] vivid-000: disconnect [ 710.870786][T13078] vivid-000: reconnect [ 712.828600][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 712.828612][ T27] audit: type=1800 audit(2000000519.634:533): pid=13091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2217" name="bus" dev="ramfs" ino=64265 res=0 errno=0 [ 714.721271][T13134] loop9: detected capacity change from 0 to 128 [ 716.038577][ C1] net_ratelimit: 25 callbacks suppressed [ 716.119043][ T27] audit: type=1800 audit(2000000522.974:534): pid=13139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2219" name="bus" dev="ramfs" ino=64981 res=0 errno=0 [ 717.041564][T13160] ip_tables: iptables: counters copy to user failed while replacing table [ 719.294610][T13194] loop9: detected capacity change from 0 to 128 [ 719.404828][T13197] syz.9.2234: attempt to access beyond end of device [ 719.404828][T13197] loop9: rw=2049, sector=145, nr_sectors = 240 limit=128 [ 719.579875][T13182] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 719.591873][T13182] Error parsing options; rc = [-22] [ 719.678852][T11448] kworker/u4:19: attempt to access beyond end of device [ 719.678852][T11448] loop9: rw=1, sector=150, nr_sectors = 1 limit=128 [ 719.727456][T11448] Buffer I/O error on dev loop9, logical block 150, lost async page write [ 719.803750][T13207] netlink: 'syz.2.2235': attribute type 1 has an invalid length. [ 720.664798][T13210] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 720.713511][T13210] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 720.768715][T13210] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 720.812425][T13210] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 720.853850][T13210] bond4: (slave geneve2): making interface the new active one [ 720.891010][T13210] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 720.935472][T13207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2235'. [ 720.989313][T13207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 721.238582][ C0] net_ratelimit: 23 callbacks suppressed [ 723.057345][T13238] loop9: detected capacity change from 0 to 512 [ 723.103812][T13238] EXT4-fs: Ignoring removed i_version option [ 723.157426][T13238] EXT4-fs: Ignoring removed oldalloc option [ 723.217214][T13238] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 723.805163][T11553] EXT4-fs (loop9): unmounting filesystem. [ 725.749109][T13281] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 726.529861][ C1] net_ratelimit: 24 callbacks suppressed [ 729.507175][T13302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2252'. [ 729.811712][T13325] device bridge3 entered promiscuous mode [ 729.870398][T13325] team0: Port device bridge3 added [ 729.893760][T13328] bridge0: port 4(team0) entered blocking state [ 729.946882][T13328] bridge0: port 4(team0) entered disabled state [ 730.453680][T13333] netlink: 'syz.5.2260': attribute type 4 has an invalid length. [ 731.028621][T13343] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 731.639047][ C0] net_ratelimit: 17 callbacks suppressed [ 736.565683][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2274'. [ 736.918690][ C1] net_ratelimit: 20 callbacks suppressed [ 741.934741][ C1] net_ratelimit: 24 callbacks suppressed [ 743.841718][T13464] syz.5.2283 sent an empty control message without MSG_MORE. [ 743.879490][T13458] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2287'. [ 746.082707][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2292'. [ 747.000197][ C1] net_ratelimit: 22 callbacks suppressed [ 747.006589][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.012913][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.700617][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.712989][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.723107][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.732428][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.751832][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 749.770320][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 750.269627][T13536] bond0 speed is unknown, defaulting to 1000 [ 751.631542][T13536] bond0 speed is unknown, defaulting to 1000 [ 751.854425][T13563] netlink: 'syz.8.2307': attribute type 4 has an invalid length. [ 751.888772][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 752.119251][ C0] net_ratelimit: 22 callbacks suppressed [ 754.044781][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 754.882660][T13536] chnl_net:caif_netlink_parms(): no params data found [ 755.819887][T13536] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.842755][T13536] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.898355][T13536] device bridge_slave_0 entered promiscuous mode [ 756.118704][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 756.498106][T13635] sctp: [Deprecated]: syz.9.2317 (pid 13635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 756.498106][T13635] Use struct sctp_sack_info instead [ 757.158800][ T5408] net_ratelimit: 27 callbacks suppressed [ 757.187190][T13536] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.198420][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.288244][T13536] device bridge_slave_1 entered promiscuous mode [ 758.268567][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 758.318172][T13536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.511974][T13656] overlayfs: failed to resolve './file0': -2 [ 758.755433][T13536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.989511][T13641] bond0 speed is unknown, defaulting to 1000 [ 759.131374][T13536] team0: Port device team_slave_0 added [ 759.166807][T13536] team0: Port device team_slave_1 added [ 760.101465][T13536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.118627][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.270785][T13536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.348766][T13641] bond0 speed is unknown, defaulting to 1000 [ 760.391868][T13536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.486079][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.670433][T13536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.825279][T13536] device hsr_slave_0 entered promiscuous mode [ 761.858910][T13536] device hsr_slave_1 entered promiscuous mode [ 761.889680][T13536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.897293][T13536] Cannot create hsr debugfs directory [ 762.359346][ C0] net_ratelimit: 20 callbacks suppressed [ 763.925956][T13725] tipc: Enabling of bearer rejected, failed to enable media [ 767.718593][ C1] net_ratelimit: 16 callbacks suppressed [ 769.263214][T13536] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.699475][T13536] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.796814][T13838] tipc: Enabling of bearer rejected, failed to enable media [ 769.992365][T13536] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.636474][T13536] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.537568][T13862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2362'. [ 771.558729][T13862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2362'. [ 772.457522][T13536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 772.610137][T13536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 772.858527][ C0] net_ratelimit: 23 callbacks suppressed [ 772.879398][T13536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 772.976299][T13894] netlink: 'syz.5.2370': attribute type 1 has an invalid length. [ 773.074253][T13536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 774.209542][T13536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.696174][T13914] 9pnet_virtio: no channels available for device 127.0.0.1 [ 774.824019][T13536] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.896740][T11013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 774.923159][T11013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 775.003633][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 775.057013][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 775.116616][T13788] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.123800][T13788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.172514][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 775.889793][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 775.929613][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 775.942740][T13788] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.949944][T13788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.963689][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 776.164172][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 776.192812][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 776.271746][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 776.307038][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 776.426774][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 776.541459][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 776.575257][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 776.657161][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 776.706257][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 776.797601][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 776.836309][T13536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 777.997518][ C0] net_ratelimit: 19 callbacks suppressed [ 778.435490][T13955] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 781.333019][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 781.369136][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 781.430149][T13536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.586165][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 781.603299][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 781.860365][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 782.202991][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 782.547304][T13536] device veth0_vlan entered promiscuous mode [ 782.590804][T13536] device veth1_vlan entered promiscuous mode [ 782.673173][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 782.707126][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 782.819621][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 783.541720][T13784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 783.558319][T13784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 783.566357][ C1] net_ratelimit: 28 callbacks suppressed [ 783.643165][T13536] device veth0_macvtap entered promiscuous mode [ 783.682957][T13536] device veth1_macvtap entered promiscuous mode [ 783.744049][T13784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 783.763358][T13784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 783.875114][T14007] tipc: Enabling of bearer rejected, already enabled [ 783.957365][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.238376][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.685222][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.720707][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.835671][T13536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.875803][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 784.891692][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 785.019326][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.108689][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.395015][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.634390][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.710587][T13536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.766654][T13536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.836529][T13536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.860204][T13536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.883949][T13536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.033727][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 786.075561][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 786.657478][T13784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.640119][T13784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.258131][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 788.413856][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.433233][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.482146][T13784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 788.678607][ C1] net_ratelimit: 44 callbacks suppressed [ 789.453494][T14071] tipc: Enabling of bearer rejected, failed to enable media [ 789.521156][T14078] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 790.751720][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2293'. [ 791.306746][T14115] jffs2: notice: (14115) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 793.717896][ C1] net_ratelimit: 34 callbacks suppressed [ 794.302832][T14162] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 795.538840][T14186] futex_wake_op: syz.8.2433 tries to shift op by 144; fix this program [ 797.066801][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2435'. [ 799.489199][ T4385] net_ratelimit: 33 callbacks suppressed [ 804.339660][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2463'. [ 804.401957][T14288] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 804.609044][T13784] net_ratelimit: 36 callbacks suppressed [ 805.135537][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 807.910885][T14340] MTD: Couldn't look up './dev/mtdblock0': -2 [ 808.004253][T14346] netlink: 'syz.8.2466': attribute type 10 has an invalid length. [ 808.102971][T14349] fuse: Bad value for 'fd' [ 809.602247][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.608765][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.637677][T13777] net_ratelimit: 25 callbacks suppressed [ 809.655518][T14346] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.664717][T14346] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.673934][T14346] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.682872][T14346] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.739551][T14346] team0 (unregistering): Port device vxlan0 removed [ 809.836819][T14348] bond0 speed is unknown, defaulting to 1000 [ 810.186914][T14348] bond0 speed is unknown, defaulting to 1000 [ 813.259251][T14400] netlink: 'syz.9.2477': attribute type 2 has an invalid length. [ 814.158182][T14416] loop0: detected capacity change from 0 to 512 [ 814.678560][ C0] net_ratelimit: 31 callbacks suppressed [ 814.899790][T14416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 814.919463][T14416] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 815.989968][T14428] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 817.459663][T14445] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2482'. [ 818.863296][T14457] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2491'. [ 819.718571][ C1] net_ratelimit: 27 callbacks suppressed [ 821.838711][T14504] overlayfs: failed to clone lowerpath [ 823.426020][ T27] audit: type=1326 audit(2000000630.274:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 823.599032][ T27] audit: type=1326 audit(2000000630.274:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63f6797f17 code=0x7ffc0000 [ 824.498885][ T27] audit: type=1326 audit(2000000630.274:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63f673f519 code=0x7ffc0000 [ 824.705286][ T27] audit: type=1326 audit(2000000630.274:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 824.912135][ T27] audit: type=1326 audit(2000000631.374:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63f6797f17 code=0x7ffc0000 [ 825.078727][ C1] net_ratelimit: 41 callbacks suppressed [ 825.100332][ T27] audit: type=1326 audit(2000000631.374:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63f673f519 code=0x7ffc0000 [ 825.317288][ T27] audit: type=1326 audit(2000000631.374:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 825.513126][ T27] audit: type=1326 audit(2000000631.374:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f679e199 code=0x7ffc0000 [ 825.628657][ T27] audit: type=1326 audit(2000000631.394:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63f6797f17 code=0x7ffc0000 [ 825.727498][ T27] audit: type=1326 audit(2000000631.394:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.8.2503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63f673f519 code=0x7ffc0000 [ 830.292188][ C1] net_ratelimit: 25 callbacks suppressed [ 830.513565][T14585] Option 'dnserror' to dns_resolver key: bad/missing value [ 831.314047][T14587] 9pnet_fd: Insufficient options for proto=fd [ 835.319086][T11013] net_ratelimit: 33 callbacks suppressed [ 836.547593][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 836.547612][ T27] audit: type=1326 audit(2000000643.354:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14623 comm="syz.0.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754619e199 code=0x7ffc0000 [ 836.722479][ T27] audit: type=1326 audit(2000000643.354:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14623 comm="syz.0.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754619e199 code=0x7ffc0000 [ 836.891917][ T27] audit: type=1326 audit(2000000643.354:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14623 comm="syz.0.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f754619e199 code=0x7ffc0000 [ 837.555210][ T27] audit: type=1326 audit(2000000643.354:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14623 comm="syz.0.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754619e199 code=0x7ffc0000 [ 837.749616][ T27] audit: type=1326 audit(2000000643.354:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14623 comm="syz.0.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754619e199 code=0x7ffc0000 [ 837.826333][ T27] audit: type=1326 audit(2000000643.354:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14623 comm="syz.0.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f754619e199 code=0x7ffc0000 [ 838.616033][ T27] audit: type=1326 audit(2000000643.354:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14623 comm="syz.0.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754619e199 code=0x7ffc0000 [ 839.005659][ T27] audit: type=1326 audit(2000000643.354:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14623 comm="syz.0.2531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754619e199 code=0x7ffc0000 [ 840.246372][T14656] Cannot find set identified by id 4 to match [ 840.438592][ C0] net_ratelimit: 24 callbacks suppressed [ 843.553326][T14705] loop0: detected capacity change from 0 to 256 [ 845.473133][T14724] 9pnet_virtio: no channels available for device syz [ 845.558654][ T5816] net_ratelimit: 32 callbacks suppressed [ 845.653277][T14722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 846.979044][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2564'. [ 847.759917][T14751] tipc: Resetting bearer [ 850.624555][ C0] net_ratelimit: 19 callbacks suppressed [ 852.573655][T14769] loop0: detected capacity change from 0 to 1024 [ 852.695147][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2553'. [ 852.719475][T14757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2553'. [ 852.983432][T14757] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.020551][T14757] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.217130][T14757] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.768075][T14757] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.718660][ C0] net_ratelimit: 23 callbacks suppressed [ 857.608799][T14757] device geneve3 entered promiscuous mode [ 858.704102][T14798] sctp: [Deprecated]: syz.3.2576 (pid 14798) Use of int in max_burst socket option. [ 858.704102][T14798] Use struct sctp_assoc_value instead [ 860.758546][ C1] net_ratelimit: 28 callbacks suppressed [ 861.712915][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 861.766667][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 861.809520][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 866.278239][ C0] net_ratelimit: 30 callbacks suppressed [ 867.065508][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2597'. [ 869.892291][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.899216][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.669229][ C0] net_ratelimit: 30 callbacks suppressed [ 872.565000][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 876.838669][ C1] net_ratelimit: 36 callbacks suppressed [ 877.329829][T14964] netlink: 'syz.9.2629': attribute type 17 has an invalid length. [ 877.358040][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2629'. [ 878.383673][T14973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 882.060077][ C0] net_ratelimit: 27 callbacks suppressed [ 883.638706][ T4287] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 883.647896][ T4287] Bluetooth: hci5: Injecting HCI hardware error event [ 883.658229][ T4285] Bluetooth: hci5: hardware error 0x00 [ 885.139724][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 885.158401][T15032] device bridge_slave_1 left promiscuous mode [ 885.183548][T15032] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.310694][T15032] device bridge_slave_0 left promiscuous mode [ 885.318137][T15032] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.838620][ T4285] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 887.558554][ C1] net_ratelimit: 25 callbacks suppressed [ 888.693799][T15069] fuse: Bad value for 'fd' [ 892.678802][ C1] net_ratelimit: 28 callbacks suppressed [ 897.724820][ C0] net_ratelimit: 24 callbacks suppressed [ 899.955903][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2675'. [ 900.496578][T15152] jffs2: notice: (15152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 903.158909][ T4383] net_ratelimit: 38 callbacks suppressed [ 905.917739][T15225] loop0: detected capacity change from 0 to 1024 [ 906.680678][T15225] EXT4-fs: Invalid want_extra_isize 7 [ 906.759816][T15228] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 906.919617][ T3933] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.927841][ T3933] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.960673][ T3933] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.984964][ T3933] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.012614][ T3933] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.033848][ T3933] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.052288][ T3933] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.071971][ T3933] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.088149][ T3933] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.100552][ T3933] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.116885][ T3933] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.127610][ T3933] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.143843][ T3933] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.157871][ T3933] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.172862][ T3933] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.189705][ T3933] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.288849][ T5234] net_ratelimit: 18 callbacks suppressed [ 908.967401][T15246] ieee802154 phy0 wpan0: encryption failed: -22 [ 909.154143][T15246] jffs2: notice: (15246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 913.403450][ T47] net_ratelimit: 27 callbacks suppressed [ 917.504895][T15328] bridge0: port 3(team0) entered disabled state [ 917.511477][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.518755][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.518695][ C1] net_ratelimit: 32 callbacks suppressed [ 918.558840][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2722'. [ 919.273264][T15328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.339602][T15328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.906943][T15328] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.915952][T15328] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.924991][T15328] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.933920][T15328] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.048652][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2721'. [ 920.066351][T15341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.107688][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2725'. [ 920.138290][ T7] bond0 speed is unknown, defaulting to 1000 [ 922.841800][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 922.864315][T15420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.125164][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2740'. [ 923.639226][T11013] net_ratelimit: 12 callbacks suppressed [ 927.985399][T15442] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.003511][T15442] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.018811][T15442] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.027816][T15442] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.678810][ T4382] net_ratelimit: 23 callbacks suppressed [ 931.449053][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.733560][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.308829][T15541] netlink: 'syz.0.2766': attribute type 2 has an invalid length. [ 933.794149][T15552] netlink: 'syz.5.2769': attribute type 10 has an invalid length. [ 934.001793][T15552] device team0 left promiscuous mode [ 934.007148][T15552] device team_slave_0 left promiscuous mode [ 934.039881][T15552] device team_slave_1 left promiscuous mode [ 934.060453][T15552] bridge0: port 1(team0) entered disabled state [ 934.111707][T15552] team0 (unregistering): Port device team_slave_0 removed [ 934.144066][T15552] team0 (unregistering): Port device team_slave_1 removed [ 934.225835][T15552] team0 (unregistering): Port device bridge1 removed [ 934.438501][ C1] net_ratelimit: 9 callbacks suppressed [ 935.414268][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2777'. [ 935.674913][T15596] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 939.638511][ C0] net_ratelimit: 8 callbacks suppressed [ 941.832426][T15643] NILFS (nullb0): couldn't find nilfs on the device [ 943.847724][T15656] loop0: detected capacity change from 0 to 512 [ 944.697483][ C0] net_ratelimit: 5 callbacks suppressed [ 944.709200][T15656] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 944.717321][T15656] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2797: inode #15: comm syz.0.2797: iget: illegal inode # [ 944.828511][T15656] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.2797: couldn't read orphan inode 15 (err -117) [ 944.901295][T15656] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 945.562981][T13536] EXT4-fs (loop0): unmounting filesystem. [ 949.113218][T15732] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 950.233886][ C0] net_ratelimit: 9 callbacks suppressed [ 950.920862][T15747] ceph: No mds server is up or the cluster is laggy [ 950.933881][ T5181] libceph: connect (1)[c::]:6789 error -101 [ 950.945582][ T5181] libceph: mon0 (1)[c::]:6789 connect error [ 955.358967][ C0] net_ratelimit: 22 callbacks suppressed [ 957.476218][T15803] Cannot find add_set index 2 as target [ 960.768446][ C1] net_ratelimit: 18 callbacks suppressed [ 963.498252][T15880] overlayfs: failed to clone upperpath [ 966.037577][ C0] net_ratelimit: 9 callbacks suppressed [ 968.361720][T15925] netlink: 'syz.5.2865': attribute type 2 has an invalid length. [ 968.923103][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2866'. [ 971.878466][ C1] net_ratelimit: 12 callbacks suppressed [ 973.105975][T15961] tipc: Enabling of bearer rejected, failed to enable media [ 976.243801][T15999] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.273011][T15999] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.323416][T15999] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.355407][T15999] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.387724][T16002] netlink: 'syz.9.2883': attribute type 10 has an invalid length. [ 976.526278][T16002] device team0 left promiscuous mode [ 976.558758][T16002] device team_slave_0 left promiscuous mode [ 976.584862][T16002] device team_slave_1 left promiscuous mode [ 976.611400][T16002] bridge0: port 3(team0) entered disabled state [ 976.681041][T16002] team0 (unregistering): Port device team_slave_0 removed [ 976.742439][T16002] team0 (unregistering): Port device team_slave_1 removed [ 976.774612][T16002] team0 (unregistering): Port device bridge1 removed [ 976.807484][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 976.820362][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.829027][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.837850][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.858697][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 976.875397][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 977.638455][ C1] net_ratelimit: 12 callbacks suppressed [ 978.804883][ T5231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.918585][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 978.976152][T16008] bond0 speed is unknown, defaulting to 1000 [ 979.151558][ T5231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.316269][ T5231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.380428][T16008] bond0 speed is unknown, defaulting to 1000 [ 980.242204][ T5231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.595363][ T5231] netdevsim netdevsim0 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.634954][ T5231] netdevsim netdevsim0 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.682423][ T5231] netdevsim netdevsim0 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.447943][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 981.557436][ T5231] netdevsim netdevsim0 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.947995][T16008] chnl_net:caif_netlink_parms(): no params data found [ 983.478543][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 983.648473][ C1] net_ratelimit: 2 callbacks suppressed [ 984.087160][T11907] libceph: connect (1)[c::]:6789 error -101 [ 984.094161][T11907] libceph: mon0 (1)[c::]:6789 connect error [ 984.168102][T16096] ceph: No mds server is up or the cluster is laggy [ 984.175773][T11907] libceph: connect (1)[c::]:6789 error -101 [ 984.213016][T16008] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.233139][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.253023][T11907] libceph: mon0 (1)[c::]:6789 connect error [ 984.274659][T16008] device bridge_slave_0 entered promiscuous mode [ 984.470081][T16008] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.482529][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.540442][T16008] device bridge_slave_1 entered promiscuous mode [ 985.253259][T16111] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2915'. [ 985.504783][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2905'. [ 985.558582][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 985.751329][T16008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.907596][T16008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.363712][T16008] team0: Port device team_slave_0 added [ 987.451383][T16008] team0: Port device team_slave_1 added [ 987.865563][T16138] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2913'. [ 988.018262][T16008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.065186][T16008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.186522][T16008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.197432][T16144] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 988.258970][ T5231] device hsr_slave_0 left promiscuous mode [ 988.269427][ T5231] device hsr_slave_1 left promiscuous mode [ 988.296314][ T5231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.304021][ T5231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.312584][ T5231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.321075][ T5231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.462248][T10907] libceph: connect (1)[c::]:6789 error -101 [ 988.471352][T10907] libceph: mon0 (1)[c::]:6789 connect error [ 988.502953][ T5231] device veth1_macvtap left promiscuous mode [ 988.515740][ T5231] device veth0_macvtap left promiscuous mode [ 988.533150][ T5231] device veth1_vlan left promiscuous mode [ 988.547161][ T5231] device veth0_vlan left promiscuous mode [ 988.559212][T16150] ceph: No mds server is up or the cluster is laggy [ 988.566654][T10907] libceph: connect (1)[c::]:6789 error -101 [ 988.612495][T10907] libceph: mon0 (1)[c::]:6789 connect error [ 988.662195][ T5231] net_ratelimit: 4 callbacks suppressed [ 992.761757][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.768074][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.678936][ T5813] net_ratelimit: 9 callbacks suppressed [ 997.023713][ T5231] team0 (unregistering): Port device team_slave_1 removed [ 998.157170][ T5231] team0 (unregistering): Port device team_slave_0 removed [ 998.392792][T16252] kAFS: No cell specified [ 999.343330][ T5231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.630351][ T5231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.080532][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1007.095541][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1007.105880][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1007.115184][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1007.124919][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1007.133165][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1007.330847][ T5231] bond0 (unregistering): Released all slaves [ 1007.639839][T16008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.646849][T16008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.695731][T16008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.758620][T16245] bond3: (slave veth0_to_bond): Releasing backup interface [ 1007.832838][T16245] bond0: (slave bond_slave_0): Releasing backup interface [ 1007.874497][T16245] bond0: (slave bond_slave_1): Releasing backup interface [ 1007.948609][T16245] bond1: (slave geneve2): Releasing active interface [ 1008.275437][ T14] bond0 speed is unknown, defaulting to 1000 [ 1008.978445][T16296] bond0 speed is unknown, defaulting to 1000 [ 1009.067996][T16008] device hsr_slave_0 entered promiscuous mode [ 1009.159708][T16008] device hsr_slave_1 entered promiscuous mode [ 1009.177315][T16008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.198492][T16008] Cannot create hsr debugfs directory [ 1009.866143][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 1010.010342][T16296] bond0 speed is unknown, defaulting to 1000 [ 1011.516305][T16296] chnl_net:caif_netlink_parms(): no params data found [ 1012.035835][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 1013.172177][T16008] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.813695][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 1014.118800][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 1016.094357][T16008] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.203347][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 1016.584884][T16008] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.015854][T16406] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2972'. [ 1017.511626][T16008] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.657436][T16421] tipc: Enabling of bearer rejected, failed to enable media [ 1018.671161][T16296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.708668][T16296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.800051][T16296] device bridge_slave_0 entered promiscuous mode [ 1018.824926][T16296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.837735][T16296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.909454][T16296] device bridge_slave_1 entered promiscuous mode [ 1019.712448][T16296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.814176][T16296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.872268][T16296] team0: Port device team_slave_0 added [ 1020.965847][T16296] team0: Port device team_slave_1 added [ 1021.051380][T16464] Cannot find del_set index 4 as target [ 1021.204393][T11054] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.282626][T11054] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.489470][T16296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.508098][T16296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.633294][ T4285] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 1021.821524][T16296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.915357][T11054] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.073285][T16296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.092517][T16296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.272247][T16296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.355435][T11054] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.583583][T16008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1022.855531][T11054] tipc: Disabling bearer [ 1022.867249][T16008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1022.868527][T11054] tipc: Left network mode [ 1023.613212][T16296] device hsr_slave_0 entered promiscuous mode [ 1023.729062][T16296] device hsr_slave_1 entered promiscuous mode [ 1023.741120][T16296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.788894][T16296] Cannot create hsr debugfs directory [ 1023.831403][T16008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1024.157596][T11054] device ip6gretap0 left promiscuous mode [ 1024.412009][T16008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1028.785163][T16008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.212469][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1029.266822][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1029.735188][T16008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.917276][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1029.945131][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1029.973072][T13791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.980262][T13791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.006908][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1030.036600][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1030.067078][T13791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.074315][T13791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.119079][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1030.149641][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1030.180639][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1030.222984][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1030.410879][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1030.432990][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1031.395177][T16296] netdevsim netdevsim6 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.530323][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1031.552030][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1031.579611][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1031.617654][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1031.646610][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1031.670143][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1031.722260][T16008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1033.053204][ T14] libceph: connect (1)[c::]:6789 error -101 [ 1033.113747][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 1033.127013][T16600] ceph: No mds server is up or the cluster is laggy [ 1033.134646][ T14] libceph: connect (1)[c::]:6789 error -101 [ 1033.171545][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 1033.499574][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1033.532543][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1034.467582][T16296] netdevsim netdevsim6 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.051446][T16296] netdevsim netdevsim6 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.196206][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1035.218258][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1035.283062][T16008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.511348][T11054] device hsr_slave_0 left promiscuous mode [ 1035.564460][T11054] device hsr_slave_1 left promiscuous mode [ 1035.714131][T11054] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1036.530176][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1036.549942][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1036.575114][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1036.585231][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1036.642695][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1036.667329][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1037.820578][T16654] CIFS mount error: No usable UNC path provided in device string! [ 1037.820578][T16654] [ 1037.830709][T16654] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1038.300982][T11054] bond4 (unregistering): Released all slaves [ 1038.447892][T11054] bond3 (unregistering): Released all slaves [ 1038.771152][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 1039.302144][T11054] bond2 (unregistering): Released all slaves [ 1040.421840][T11054] bond1 (unregistering): Released all slaves [ 1040.838469][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 1042.918453][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 1044.998557][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 1045.456693][T11054] bond0 (unregistering): Released all slaves [ 1046.345382][T16296] netdevsim netdevsim6 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.743749][T16642] bond0 speed is unknown, defaulting to 1000 [ 1047.893682][T16642] bond0 speed is unknown, defaulting to 1000 [ 1049.875489][T16296] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1050.166223][T16296] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1050.698632][T16296] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1050.765333][T16296] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1051.741345][T16642] chnl_net:caif_netlink_parms(): no params data found [ 1053.917681][T16642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.929777][T16642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.947058][T16642] device bridge_slave_0 entered promiscuous mode [ 1054.203395][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.214343][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.806184][T16642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.824321][T16642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.852163][T16642] device bridge_slave_1 entered promiscuous mode [ 1055.108236][T16296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.220364][T16296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.429194][T16296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1055.483134][T16296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.276502][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1057.289344][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1057.306914][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1057.317131][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1057.350403][T13791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.358913][T13791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.413768][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1057.444806][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1057.538037][T13791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.545262][T13791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.614161][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1057.655475][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1057.699436][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1057.952700][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1058.126776][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1058.346039][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1058.507141][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1059.289269][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1059.364951][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1059.417716][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1059.566692][T16855] overlayfs: failed to clone upperpath [ 1059.605049][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1059.853885][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1060.602479][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1061.269098][T16642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.285085][T16642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.047547][T16642] team0: Port device team_slave_0 added [ 1062.091486][T16642] team0: Port device team_slave_1 added [ 1062.137107][T16296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.431467][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1062.461557][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1062.823851][T16642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.851472][T16642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.931096][T16642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.973854][T16642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.992689][T16642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.078545][T16642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.275184][T11054] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.413534][T11054] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.542761][T11054] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.591675][T16642] device hsr_slave_0 entered promiscuous mode [ 1063.619074][T16642] device hsr_slave_1 entered promiscuous mode [ 1063.649068][T16642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1063.656671][T16642] Cannot create hsr debugfs directory [ 1063.714752][T11054] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.421582][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1065.449649][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1067.904154][T16642] netdevsim netdevsim1 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.338052][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1068.352801][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1068.361656][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1068.372221][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1068.383347][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1068.391210][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1068.678225][T16642] netdevsim netdevsim1 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.733711][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3092'. [ 1069.004489][T16642] netdevsim netdevsim1 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.248257][T16642] netdevsim netdevsim1 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.457994][T16949] bond0 speed is unknown, defaulting to 1000 [ 1070.464297][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 1072.219440][T16949] bond0 speed is unknown, defaulting to 1000 [ 1072.518461][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 1072.697642][T16642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1072.884470][T16642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1073.731850][T16642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1073.765225][T16642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1073.857696][T11054] device hsr_slave_0 left promiscuous mode [ 1073.890660][T11054] device hsr_slave_1 left promiscuous mode [ 1073.937091][T11054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.960439][T11054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.969159][T11054] device bridge_slave_1 left promiscuous mode [ 1073.975404][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.011229][T11054] device bridge_slave_0 left promiscuous mode [ 1074.020737][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.600796][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 1076.678954][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 1077.238829][T11054] team0 (unregistering): Port device team_slave_1 removed [ 1077.469906][T11054] team0 (unregistering): Port device team_slave_0 removed [ 1077.850843][T11054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.760393][T11054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.807307][T11054] bond0 (unregistering): Released all slaves [ 1082.172073][T16642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.571948][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1082.660160][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1082.852966][T16642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.877723][T16949] chnl_net:caif_netlink_parms(): no params data found [ 1082.998997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1083.019022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1083.035372][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.042537][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.304838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1083.341683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1083.351697][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.358911][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.038084][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1084.128785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1084.144470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1085.597111][T16642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1085.663913][T16642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1086.355842][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1086.397641][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1086.406837][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1086.417613][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1086.426497][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1086.435156][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1086.444297][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1086.539311][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1087.199774][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1087.216216][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1087.225127][T16949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.232468][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.245154][T16949] device bridge_slave_0 entered promiscuous mode [ 1087.282882][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.310850][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.320756][T16949] device bridge_slave_1 entered promiscuous mode [ 1088.370418][T16949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.415165][T16949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.656677][T16949] team0: Port device team_slave_0 added [ 1088.677513][T16949] team0: Port device team_slave_1 added [ 1088.817581][T16949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.856364][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.888030][T16949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.932898][T16949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.947529][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.974714][T16949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.027906][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1089.036833][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1089.055732][T16642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.169923][T16949] device hsr_slave_0 entered promiscuous mode [ 1089.189524][T16949] device hsr_slave_1 entered promiscuous mode [ 1089.196497][T16949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.205180][T16949] Cannot create hsr debugfs directory [ 1089.219311][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1089.228782][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1089.265609][T11054] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.333055][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1089.344425][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1089.356515][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1089.370053][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1089.395301][T11054] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.436847][T16642] device veth0_vlan entered promiscuous mode [ 1089.453358][T11054] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.532265][T11054] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.555384][T16642] device veth1_vlan entered promiscuous mode [ 1089.654999][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1089.668071][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1089.678471][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1089.688951][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1089.703834][T16642] device veth0_macvtap entered promiscuous mode [ 1089.794645][T16642] device veth1_macvtap entered promiscuous mode [ 1089.877773][T16642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.903546][T16642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.915718][T16642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.938117][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1089.952296][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1089.967263][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1090.019860][T16642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.033383][T16642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.045995][T16642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.056227][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1090.065711][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1090.085578][T16642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.095214][T16642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.104357][T16642] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.113394][T16642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.197261][T16949] netdevsim netdevsim6 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.325135][T16949] netdevsim netdevsim6 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.401531][T16949] netdevsim netdevsim6 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.492065][T16949] netdevsim netdevsim6 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.518523][ T5408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.526345][ T5408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.592088][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1090.645478][T13777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.660103][T13777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.679133][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1091.815406][T17121] loop1: detected capacity change from 0 to 512 [ 1092.286978][ T5408] net_ratelimit: 33 callbacks suppressed [ 1092.321474][T11054] device hsr_slave_0 left promiscuous mode [ 1092.360850][T11054] device hsr_slave_1 left promiscuous mode [ 1092.395900][T11054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.433963][T11054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.483928][T11054] device bridge_slave_1 left promiscuous mode [ 1092.513818][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.580852][T11054] device bridge_slave_0 left promiscuous mode [ 1092.587098][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.558406][ C0] net_ratelimit: 15 callbacks suppressed [ 1097.567171][T11054] team0 (unregistering): Port device team_slave_1 removed [ 1097.716202][T11054] team0 (unregistering): Port device team_slave_0 removed [ 1097.838040][T11054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1097.960940][T11054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.749319][T11054] bond0 (unregistering): Released all slaves [ 1098.883148][T17146] bond0: Caught tx_queue_len zero misconfig [ 1098.938498][T17150] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3129'. [ 1098.951264][T17156] bridge0: port 3(wlan1) entered blocking state [ 1098.974034][T17156] bridge0: port 3(wlan1) entered disabled state [ 1098.989855][T17156] device wlan1 entered promiscuous mode [ 1099.124841][T17158] device wlan1 left promiscuous mode [ 1099.131847][T17158] bridge0: port 3(wlan1) entered disabled state [ 1099.220482][T17166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3131'. [ 1099.638014][T16949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1099.718062][T16949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1099.970539][T17202] NILFS (nullb0): couldn't find nilfs on the device [ 1100.039777][T16949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1100.306392][T16949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1101.822693][T16949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.923644][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1101.959133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1101.992615][T16949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.079139][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1102.113685][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1102.159180][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.166317][ T5408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.259901][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1102.296860][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1102.359566][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1102.409064][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.416204][ T5408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.491383][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1102.549304][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1102.678611][ C1] net_ratelimit: 10 callbacks suppressed [ 1102.739372][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1102.768872][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1102.829391][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1102.864614][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1102.989471][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1103.039229][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1103.105594][T16949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1103.343444][T16949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1103.868216][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1104.041321][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1104.079348][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1104.411873][T17238] syzkaller0: renamed from gre1 [ 1105.361034][T17260] overlayfs: failed to clone upperpath [ 1106.510420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1106.546044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1106.747914][T16949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.038504][ C1] net_ratelimit: 7 callbacks suppressed [ 1108.981673][T17287] loop1: detected capacity change from 0 to 1024 [ 1109.440438][T17293] infiniband syz0: set down [ 1109.444994][T17293] infiniband syz0: added veth1_to_bridge [ 1109.560982][T17293] RDS/IB: syz0: added [ 1109.565042][T17293] smc: adding ib device syz0 with port count 1 [ 1109.571271][T17293] smc: ib device syz0 port 1 has pnetid [ 1109.814448][T17292] xt_cgroup: invalid path, errno=-2 [ 1113.078387][ C0] net_ratelimit: 8 callbacks suppressed [ 1113.404918][T17346] device ip6gretap0 entered promiscuous mode [ 1113.528881][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3167'. [ 1114.767205][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1114.780808][T17346] device-mapper: ioctl: Invalid ioctl structure: name c, dev f800 [ 1114.796298][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1115.838570][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.844863][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.078870][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1116.113043][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1116.169948][T16949] device veth0_vlan entered promiscuous mode [ 1116.217915][T17350] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 1116.272151][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1116.292108][T17350] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 1116.314203][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1116.363401][T17350] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 1116.388148][T16949] device veth1_vlan entered promiscuous mode [ 1117.592402][T17374] futex_wake_op: syz.5.3174 tries to shift op by 144; fix this program [ 1117.615948][T17350] Error parsing options; rc = [-22] [ 1117.796542][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1117.823488][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1117.991081][T16949] device veth0_macvtap entered promiscuous mode [ 1118.050280][T16949] device veth1_macvtap entered promiscuous mode [ 1118.136366][T16949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.178577][T16949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.353326][T11054] net_ratelimit: 11 callbacks suppressed [ 1118.378609][T16949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.392329][T16949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.410421][T16949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.417973][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1118.433831][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1118.794832][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1118.905400][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1119.224481][T16949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.298397][T16949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.342009][T16949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.567423][T16949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.590196][T16949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.601416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1119.611582][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1120.171668][T16949] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.338811][T16949] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.347580][T16949] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.408756][T16949] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.572913][T17417] loop1: detected capacity change from 0 to 164 [ 1121.351480][T17428] device ip6gretap0 entered promiscuous mode [ 1122.138393][T11166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.365395][ T4383] net_ratelimit: 53 callbacks suppressed [ 1123.375729][T11166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.616645][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1123.834957][T11166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.951467][T11166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.004335][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1128.758465][ C1] net_ratelimit: 19 callbacks suppressed [ 1130.996087][T17506] netlink: 'syz.5.3207': attribute type 16 has an invalid length. [ 1131.004452][T17506] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3207'. [ 1134.198748][ C1] net_ratelimit: 28 callbacks suppressed [ 1135.822473][T17552] netlink: 'syz.8.3208': attribute type 1 has an invalid length. [ 1136.006102][T17552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1136.181473][T17556] bond1: (slave gretap1): making interface the new active one [ 1136.237693][T17556] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1136.303455][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1136.772849][T17548] futex_wake_op: syz.6.3205 tries to shift op by 144; fix this program [ 1138.681444][T17585] loop6: detected capacity change from 0 to 1024 [ 1138.900149][T17585] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.3212: lblock 2 mapped to illegal pblock 2 (length 1) [ 1138.928701][T17585] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1138.936955][T17585] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.3212: lblock 0 mapped to illegal pblock 48 (length 1) [ 1139.331990][T17585] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1139.342108][T17585] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.3212: Failed to acquire dquot type 0 [ 1139.357326][T17585] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1139.369411][T17585] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.3212: mark_inode_dirty error [ 1139.381034][T17585] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1139.391701][T17585] EXT4-fs (loop6): 1 orphan inode deleted [ 1139.397474][T17585] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1139.968382][ C1] net_ratelimit: 26 callbacks suppressed [ 1140.105648][T11054] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1140.183143][T11054] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1140.197350][T11054] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 1140.224216][T16949] EXT4-fs (loop6): unmounting filesystem. [ 1140.233637][T17595] netlink: 'syz.1.3216': attribute type 2 has an invalid length. [ 1140.244866][T16949] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1140.448530][T16949] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1140.561253][T16949] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1142.466162][T17631] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3227'. [ 1145.878436][ C1] net_ratelimit: 31 callbacks suppressed [ 1146.531570][T17679] rdma_rxe: rxe_register_device failed with error -23 [ 1146.538555][T17679] rdma_rxe: failed to add veth1_to_bridge [ 1147.833142][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3232'. [ 1147.882405][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3232'. [ 1148.016995][T17693] tipc: Started in network mode [ 1148.043528][T17693] tipc: Node identity 4, cluster identity 4711 [ 1148.109712][T17693] tipc: Node number set to 4 [ 1148.117614][T17698] tipc: Enabled bearer , priority 0 [ 1148.140225][T17693] tipc: Resetting bearer [ 1148.391426][T17693] tipc: Disabling bearer [ 1150.924504][ C0] net_ratelimit: 19 callbacks suppressed [ 1153.619985][T17717] loop1: detected capacity change from 0 to 2048 [ 1153.668003][T17717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1156.469786][ C0] net_ratelimit: 17 callbacks suppressed [ 1160.374660][T17795] loop1: detected capacity change from 0 to 512 [ 1160.489513][T17795] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 1160.653674][T17795] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3252: inode #15: comm syz.1.3252: iget: illegal inode # [ 1161.409786][T17795] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3252: couldn't read orphan inode 15 (err -117) [ 1161.621098][ C0] net_ratelimit: 17 callbacks suppressed [ 1161.839356][T17795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1161.901011][T16642] EXT4-fs (loop1): unmounting filesystem. [ 1163.852988][T17851] using random self ethernet address [ 1163.864803][T17851] using random host ethernet address [ 1163.882458][T17851] netlink: 'syz.1.3269': attribute type 11 has an invalid length. [ 1163.895834][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 1164.038793][ T4287] Bluetooth: hci1: hardware error 0x04 [ 1165.303770][T17858] device wlan0 entered promiscuous mode [ 1166.164312][ T4287] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1166.593237][T17884] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 1166.955268][T11054] net_ratelimit: 24 callbacks suppressed [ 1170.937904][T17925] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3285'. [ 1172.102696][ C0] net_ratelimit: 22 callbacks suppressed [ 1173.836555][T17967] netlink: 'syz.8.3295': attribute type 2 has an invalid length. [ 1173.846691][T17967] netlink: 'syz.8.3295': attribute type 2 has an invalid length. [ 1173.854448][T17967] netlink: 'syz.8.3295': attribute type 2 has an invalid length. [ 1173.862404][T17967] netlink: 'syz.8.3295': attribute type 2 has an invalid length. [ 1174.336474][T17975] loop1: detected capacity change from 0 to 512 [ 1174.455269][T17975] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 1174.470994][T17975] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3289: inode #15: comm syz.1.3289: iget: illegal inode # [ 1174.512432][T17975] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3289: couldn't read orphan inode 15 (err -117) [ 1174.550832][T17975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1174.854071][T16642] EXT4-fs (loop1): unmounting filesystem. [ 1175.920039][T17993] loop1: detected capacity change from 0 to 1024 [ 1176.376106][T17993] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.3301: lblock 2 mapped to illegal pblock 2 (length 1) [ 1176.392096][T17993] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1176.400759][T17993] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.3301: lblock 0 mapped to illegal pblock 48 (length 1) [ 1176.456187][T17993] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1176.467312][T17993] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3301: Failed to acquire dquot type 0 [ 1176.479798][T17993] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1176.489955][T17993] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.3301: mark_inode_dirty error [ 1176.502382][T17993] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1176.512763][T17993] EXT4-fs (loop1): 1 orphan inode deleted [ 1176.518828][T17993] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1176.581662][ T6487] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 1176.707210][ T6487] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1176.756666][ T6487] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 0 [ 1176.838612][T17998] tipc: Enabled bearer , priority 0 [ 1176.846562][T16642] EXT4-fs (loop1): unmounting filesystem. [ 1176.861581][T16642] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1176.902337][T16642] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1176.934977][ T27] audit: type=1800 audit(2000000983.607:613): pid=18001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3297" name="idProduct" dev="configfs" ino=79354 res=0 errno=0 [ 1176.949688][T16642] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1177.042363][T17998] tipc: Disabling bearer [ 1177.082130][ T27] audit: type=1800 audit(2000000983.756:614): pid=18006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3297" name="UDC" dev="configfs" ino=79355 res=0 errno=0 [ 1177.180638][ C1] net_ratelimit: 17 callbacks suppressed [ 1177.220744][T18009] Config c/1 of g1 needs at least one function. [ 1177.232496][T18006] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1177.252580][T18006] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.283624][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.290000][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.320381][T18009] udc dummy_udc.0: failed to start g1: -22 [ 1177.336920][T18009] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1177.547443][T18006] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1177.555357][T18009] UDC core: g1: couldn't find an available UDC or it's busy [ 1180.686150][T18054] netlink: 'syz.9.3316': attribute type 2 has an invalid length. [ 1180.915175][T18057] IPVS: stopping master sync thread 13281 ... [ 1181.625052][T18064] tipc: Started in network mode [ 1182.236451][ C1] net_ratelimit: 20 callbacks suppressed [ 1182.242849][T18064] tipc: Node identity 4, cluster identity 4711 [ 1182.271571][T18064] tipc: Node number set to 4 [ 1182.278717][T18070] tipc: Enabled bearer , priority 0 [ 1182.581881][T18071] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3317'. [ 1182.590966][T18071] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3317'. [ 1182.603024][T18070] tipc: Resetting bearer [ 1183.067666][T18070] tipc: Disabling bearer [ 1184.407244][T18076] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1184.442851][T18076] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.730900][T18076] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1187.377205][ C0] net_ratelimit: 23 callbacks suppressed [ 1187.627426][T18139] loop1: detected capacity change from 0 to 512 [ 1188.808663][T18155] No such timeout policy "syz1" [ 1192.051735][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1192.061747][T18181] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1192.080666][ T4385] ------------[ cut here ]------------ [ 1192.087377][ T4385] WARNING: CPU: 1 PID: 4385 at io_uring/io_uring.c:2892 io_ring_exit_work+0x329/0x760 [ 1192.097035][ T4385] Modules linked in: [ 1192.097102][ T4385] [ 1192.097112][ T4385] CPU: 1 PID: 4385 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1192.103945][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.122086][ T4385] Workqueue: events_unbound io_ring_exit_work [ 1192.128370][ T4385] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 1192.128399][ T4385] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 7e 30 11 00 48 85 c0 75 40 e8 64 d4 56 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 d4 56 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 1192.153858][ T4385] RSP: 0018:ffffc9000479fac0 EFLAGS: 00010293 [ 1192.153888][ T4385] RAX: ffffffff8a2b722b RBX: 1ffff110046b3403 RCX: ffff88807aed3c00 [ 1192.167956][ T4385] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 1192.167973][ T4385] RBP: ffffc9000479fc30 R08: ffffc9000479fa47 R09: 1ffff920008f3f48 [ 1192.167985][ T4385] R10: dffffc0000000000 R11: fffff520008f3f49 R12: dffffc0000000000 [ 1192.167997][ T4385] R13: 0000000100015bbb R14: 0000000100015bc0 R15: ffff88802359a018 [ 1192.168009][ T4385] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1192.176423][ T4385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1192.192427][ T4385] CR2: 00007f6963ff12f8 CR3: 0000000096de3000 CR4: 00000000003506e0 [ 1192.209385][ T4385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1192.224009][ T4385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1192.224029][ T4385] Call Trace: [ 1192.240008][ T4385] [ 1192.246258][ T4385] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 1192.246297][ T4385] ? _raw_spin_unlock+0x40/0x40 [ 1192.256977][ T4385] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1192.257012][ T4385] ? process_one_work+0x7b4/0x1160 [ 1192.267384][ T4385] process_one_work+0x8ab/0x1160 [ 1192.267435][ T4385] ? worker_detach_from_pool+0x240/0x240 [ 1192.278042][ T4385] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1192.278071][ T4385] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1192.289253][ T4385] ? wq_worker_running+0x97/0x190 [ 1192.289292][ T4385] worker_thread+0xaf5/0x12a0 [ 1192.299044][ T4385] kthread+0x29d/0x330 [ 1192.303149][ T4385] ? worker_clr_flags+0x1a0/0x1a0 [ 1192.308185][ T4385] ? kthread_blkcg+0xd0/0xd0 [ 1192.308767][ T53] sd 0:0:1:0: cmd ffff88802612e920 CDB: 0x35 [ 1192.312823][ T4385] ret_from_fork+0x1f/0x30 [ 1192.312863][ T4385] [ 1192.312889][ T4385] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1192.312899][ T4385] CPU: 1 PID: 4385 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1192.312916][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.312926][ T4385] Workqueue: events_unbound io_ring_exit_work [ 1192.312947][ T4385] Call Trace: [ 1192.312954][ T4385] [ 1192.312961][ T4385] dump_stack_lvl+0x188/0x24e [ 1192.312982][ T4385] ? memcpy+0x3c/0x60 [ 1192.312998][ T4385] ? show_regs_print_info+0x12/0x12 [ 1192.313015][ T4385] ? load_image+0x410/0x410 [ 1192.313042][ T4385] panic+0x2d3/0x710 [ 1192.313070][ T4385] ? bpf_jit_dump+0xd0/0xd0 [ 1192.313101][ T4385] ? ret_from_fork+0x1f/0x30 [ 1192.313124][ T4385] __warn+0x2f8/0x4f0 [ 1192.313142][ T4385] ? io_ring_exit_work+0x329/0x760 [ 1192.313161][ T4385] ? io_ring_exit_work+0x329/0x760 [ 1192.313176][ T4385] report_bug+0x2ba/0x4f0 [ 1192.313196][ T4385] ? io_ring_exit_work+0x329/0x760 [ 1192.313217][ T4385] handle_bug+0x3a/0x70 [ 1192.313237][ T4385] exc_invalid_op+0x16/0x40 [ 1192.313265][ T4385] asm_exc_invalid_op+0x16/0x20 [ 1192.313285][ T4385] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 1192.313302][ T4385] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 7e 30 11 00 48 85 c0 75 40 e8 64 d4 56 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 d4 56 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 1192.313316][ T4385] RSP: 0018:ffffc9000479fac0 EFLAGS: 00010293 [ 1192.313331][ T4385] RAX: ffffffff8a2b722b RBX: 1ffff110046b3403 RCX: ffff88807aed3c00 [ 1192.313345][ T4385] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 1192.313356][ T4385] RBP: ffffc9000479fc30 R08: ffffc9000479fa47 R09: 1ffff920008f3f48 [ 1192.313369][ T4385] R10: dffffc0000000000 R11: fffff520008f3f49 R12: dffffc0000000000 [ 1192.313381][ T4385] R13: 0000000100015bbb R14: 0000000100015bc0 R15: ffff88802359a018 [ 1192.313400][ T4385] ? io_ring_exit_work+0x329/0x760 [ 1192.313432][ T4385] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 1192.313458][ T4385] ? _raw_spin_unlock+0x40/0x40 [ 1192.313478][ T4385] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1192.313495][ T4385] ? process_one_work+0x7b4/0x1160 [ 1192.313517][ T4385] process_one_work+0x8ab/0x1160 [ 1192.313550][ T4385] ? worker_detach_from_pool+0x240/0x240 [ 1192.313574][ T4385] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1192.313590][ T4385] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1192.313609][ T4385] ? wq_worker_running+0x97/0x190 [ 1192.313628][ T4385] worker_thread+0xaf5/0x12a0 [ 1192.313673][ T4385] kthread+0x29d/0x330 [ 1192.313687][ T4385] ? worker_clr_flags+0x1a0/0x1a0 [ 1192.313704][ T4385] ? kthread_blkcg+0xd0/0xd0 [ 1192.313722][ T4385] ret_from_fork+0x1f/0x30 [ 1192.313755][ T4385] [ 1192.319244][ T4385] Kernel Offset: disabled [ 1192.585429][ T4385] Rebooting in 86400 seconds..