last executing test programs: 3m9.02437581s ago: executing program 0 (id=43): socket$unix(0x1, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$GETVAL(0x0, 0x1, 0xc, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000003340)={0x2020}, 0x2020) pread64(r5, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) 3m6.75948466s ago: executing program 0 (id=49): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp850,shname=win95,shortname=win95,shortname=lower,shortname=win95,shortname=winnt,uni_xlate=0,utf8=1,utf8=1,tz=UTC,shortname=lower,iocharset=cp775,shortname=winnt,check=strict,nnonumtail=1,\x00\x00\x00\x00'], 0x1, 0x289, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000140)) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x453}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x24801}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r6 = socket$inet(0x2, 0xa, 0x2) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e29, @multicast1}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) fcntl$setlease(r5, 0x400, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 3m2.621181289s ago: executing program 0 (id=56): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd32", 0xb) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x8, 0x4, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="720ac4ff000400007110b100000000009500000000000000353ea06e65f3728560f6136aedded58dbb812cdd19370870a6bdbad92424e0d05f42ef9656182c82cac03b0826ebb4e5919825e78fb46f8f298c22a52ed109d2627a9629ce588f2012d1"], 0x0}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 3m0.66693417s ago: executing program 0 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(r4, 0x0, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 2m57.054410622s ago: executing program 0 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r7, &(0x7f0000001840)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r8, 0x731, 0x0, 0x25dfdbfe, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x4c044}, 0x4000010) 2m55.011928535s ago: executing program 0 (id=63): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101000, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143002) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400), 0x0, 0xf0ff) connect$inet(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab40809"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x80800) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000014c0)=""/4096) 2m38.957524594s ago: executing program 32 (id=63): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101000, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143002) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400), 0x0, 0xf0ff) connect$inet(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab40809"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x80800) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000014c0)=""/4096) 29.088316177s ago: executing program 2 (id=204): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) shutdown(r4, 0x0) syz_open_procfs$namespace(0x0, 0x0) 25.881401987s ago: executing program 3 (id=205): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000f908004457e4b4bf65320103e6c0"], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000200)}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000) 24.226444818s ago: executing program 3 (id=208): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1100) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_read_part_table(0x5af, &(0x7f0000000c80)="$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") syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@dioread_nolock}]}, 0x3, 0x47d, &(0x7f0000000580)="$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") 21.211401162s ago: executing program 2 (id=211): sync() socket$inet_smc(0x2b, 0x1, 0x0) sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close(r2) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) 20.902642951s ago: executing program 3 (id=212): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x1c) sched_getparam(r0, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x400001ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@loopback, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x12}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 18.578535004s ago: executing program 3 (id=214): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0xa, 0x300) fsopen(&(0x7f0000000400)='pstore\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') syz_fuse_handle_req(r4, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000000)=""/183) ioctl$KDSIGACCEPT(r5, 0x5607, 0x4) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0) open_by_handle_at(r6, &(0x7f0000000000)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x278, 0x0, 0x656}, 0x3}}, 0xa00) 16.197668317s ago: executing program 4 (id=216): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) recvmmsg(r3, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x4002000007) sendfile(r0, r4, 0x0, 0x7ffff004) socket(0x18, 0x800, 0xffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14.236172719s ago: executing program 1 (id=217): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r3, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x4}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000100)={0x23, 0x30}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14.137480661s ago: executing program 4 (id=218): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x4207, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = epoll_create1(0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001b}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_emit_vhci(0x0, 0xf) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x2c, 0x8}, &(0x7f0000000200)=0x10) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 12.402252445s ago: executing program 4 (id=219): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_getparam(r0, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0xf0, 0x67) socket$can_bcm(0x1d, 0x2, 0x2) 12.23881971s ago: executing program 1 (id=220): socket$inet6(0xa, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x2c020400) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 11.141669504s ago: executing program 2 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="700000000101010800000000000000000a000004400002800c0002800500010001"], 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x804) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r1 = syz_io_uring_setup(0x25, &(0x7f00000000c0)={0x0, 0x219a, 0x80, 0x8001, 0x143}, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000080)={0x9, r1, 0x3, {0x9, 0x7}}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x2220020, 0x0) 10.449035906s ago: executing program 4 (id=222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(r1, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) syz_emit_ethernet(0x46, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 9.616165452s ago: executing program 2 (id=223): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x1c) sched_getparam(r0, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x400001ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@loopback, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x12}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 9.594044522s ago: executing program 1 (id=224): open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2) syz_emit_ethernet(0x6e, &(0x7f0000000d80)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53244", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, "000100", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, [], "3356d55afb0de3af"}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0x7c, 0x0, 0x7fff0000}]}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 7.548199916s ago: executing program 2 (id=225): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") syz_mount_image$udf(&(0x7f0000001940), &(0x7f0000001980)='./file0\x00', 0x0, &(0x7f0000003340)=ANY=[@ANYBLOB="00e9c655ee4708d304c5a20d854fb29bc0815156d4a1c8c5e67b11054a016a1c8a5af527a4a5b6ffb6bc35a4a6f709bc361489eff75209e3297e9f2194a0fdb2bf3993ba8ec61a7ad684860088ed6c765bc3013ad5fdcc6fb1be44c2e460b8ce295d59cfbaa4175da1f5d9b3f9ca3c91a1f5790ae208ce2044fc8fb3f70de141152bf726b3838587d24802992b3995624fd7705f2d64c6524d9cea8cc909d0f727154985464ac46e974449dcef0b41b4465f50223fdb36bcae080bd6c92083765c0fa49fe536a392caf67f"], 0x1, 0x1905, &(0x7f0000001a00)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 3.096022084s ago: executing program 2 (id=226): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r4, &(0x7f00000000c0)="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", 0x21f) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x5a, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xbccf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0x1f2, 0x0, 0x0, 0x1000, 0x5, r0, 0x0, 0x3}}}, &(0x7f00000003c0)=0x0) r6 = open(&(0x7f0000000400)='./bus\x00', 0x840, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000600)='2\x00', 0x2) syz_ublk_setup_queues(r3, r5, &(0x7f0000000440)={0x0, 0x3f7a, 0x400, 0x2, 0x23e, 0x0, r6}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ed2, 0x2, 0x2, 0x75, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xef2, 0x0, 0x3, 0xa5, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c88, 0x8, 0x0, 0x70, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbe29, 0x20, 0x3, 0x3b5}}], 0x4, &(0x7f0000002240)={0x2e, 0x40, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, r7, '\x00', {0x3, 0xec0, 0x0, &(0x7f0000001240)=@buf_512="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"}}, &(0x7f00000022c0)) 3.095790854s ago: executing program 3 (id=227): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="fe"], 0x1, 0x176, &(0x7f0000000000)="$eJzskj9OAkEUxr9Zlj9aGEmsaCCRGCyUZVFjbLTE3gNIcEXiosKSKIRijTEUFsbSE3ANEy+ghfEA1BTE2oyZ2bfj4BWcX8G38837M++Fs6ATpAF8z4YNHECSwBLeGYMNIM8ib2pF+kT6Qco550LfKO6Q/DvSXIAM4Ptet7BXQFYY/cF5XRoAvqSnrGD/1sJUlvqcDRvi41hrwqmJHpMA0NFicjawIofgKsbGL+Ve+6oc9AcbrXa96TW9C9et7jhbjrPtlk9bvudEv0xrYclyoi2wDkDsa0G7TwK4p83NkwfTniZYBJiemwLwSHel1flsSx+dlOFF5aYB1fUIa2LRuA6Z5hZlFRtypBoYEnSoxCthqldGXmw2Lv2TERhYnDaGrWpUJkiqg6sfqrth/OwRaZG0RjomncTL+fOXSSKLEA90KoVACjf1Xq9bEUuKvpTnKs9dDvWFia7P1vxwrxYMBoPBYDAYDAaD4b/zEwAA//9yiHzx") bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x1, 0x3, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x2a56ea8b4750591f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x180680, 0x0, 0xffffffffffffff2a, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) semtimedop(0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x3, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.090714334s ago: executing program 4 (id=234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xd, 0x0, &(0x7f0000000440)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx;De', 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x7}], 0x8}) r5 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) fallocate(r5, 0x0, 0xbf5, 0x2000402) 3.089835165s ago: executing program 1 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060a63e57fd1b969000000", 0xd, 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000006540)) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) semget(0x1, 0x2, 0x210) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080), 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) 237.569623ms ago: executing program 3 (id=229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r1, 0x5402, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmdt(0x0) unshare(0x20400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fcntl$setlease(r4, 0x400, 0x3) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000a00000800040001000000", 0x24) 236.897613ms ago: executing program 1 (id=238): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) mount(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x2220020, 0x0) 80.740168ms ago: executing program 1 (id=230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0x1}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 0s ago: executing program 4 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = dup(r1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r2}, 0x18) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x10000000, 0xffffffff, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x161002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x2) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f000011dd40)={0x1, &(0x7f000011dc00)=[{0x8000001, 0x0, 0x0, 0x2, 0x6}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r6, r7, 0x0, 0x201f00) syz_mount_image$msdos(&(0x7f0000000b40), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x0, 0x2a5, &(0x7f0000000280)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 70.315088][ T5764] cgroup: Unknown subsys name 'net' [ 70.451058][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.438516][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.445158][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.041173][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.596638][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.603874][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.605162][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.619156][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.623602][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.633838][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.641808][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.649534][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.657111][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.664616][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.673355][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.682758][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.692062][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.708040][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.732716][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.736563][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.747620][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.760172][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.769260][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.776917][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.785233][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.785941][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.799404][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.800181][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.178566][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 74.268510][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 74.304466][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 74.369384][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.379944][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.388119][ T5780] bridge_slave_0: entered allmulticast mode [ 74.395863][ T5780] bridge_slave_0: entered promiscuous mode [ 74.411150][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.418525][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.425773][ T5780] bridge_slave_1: entered allmulticast mode [ 74.432621][ T5780] bridge_slave_1: entered promiscuous mode [ 74.478112][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 74.524011][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.536430][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.579781][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.587167][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.594684][ T5777] bridge_slave_0: entered allmulticast mode [ 74.601863][ T5777] bridge_slave_0: entered promiscuous mode [ 74.648609][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.655862][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.663077][ T5778] bridge_slave_0: entered allmulticast mode [ 74.670205][ T5778] bridge_slave_0: entered promiscuous mode [ 74.679209][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.686625][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.694028][ T5777] bridge_slave_1: entered allmulticast mode [ 74.701717][ T5777] bridge_slave_1: entered promiscuous mode [ 74.711454][ T5780] team0: Port device team_slave_0 added [ 74.726612][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.733869][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.741079][ T5778] bridge_slave_1: entered allmulticast mode [ 74.748220][ T5778] bridge_slave_1: entered promiscuous mode [ 74.785435][ T5780] team0: Port device team_slave_1 added [ 74.794424][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.846383][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.887627][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.900118][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.910079][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.918495][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.945029][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.969100][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.976355][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.983776][ T5779] bridge_slave_0: entered allmulticast mode [ 74.990654][ T5779] bridge_slave_0: entered promiscuous mode [ 75.010058][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.017246][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.024511][ T5779] bridge_slave_1: entered allmulticast mode [ 75.031656][ T5779] bridge_slave_1: entered promiscuous mode [ 75.039040][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.046408][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.072546][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.093275][ T5777] team0: Port device team_slave_0 added [ 75.103955][ T5777] team0: Port device team_slave_1 added [ 75.169908][ T5778] team0: Port device team_slave_0 added [ 75.189993][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.212089][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.219309][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.245693][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.258789][ T5778] team0: Port device team_slave_1 added [ 75.284018][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.316100][ T5780] hsr_slave_0: entered promiscuous mode [ 75.323296][ T5780] hsr_slave_1: entered promiscuous mode [ 75.330707][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.340684][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.370162][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.394059][ T5779] team0: Port device team_slave_0 added [ 75.400393][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.410706][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.439907][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.452349][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.460234][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.486672][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.507420][ T5779] team0: Port device team_slave_1 added [ 75.570650][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.578372][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.604555][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.626830][ T5777] hsr_slave_0: entered promiscuous mode [ 75.633760][ T5777] hsr_slave_1: entered promiscuous mode [ 75.639905][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.647821][ T5777] Cannot create hsr debugfs directory [ 75.664891][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.671859][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.698064][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.746450][ T5778] hsr_slave_0: entered promiscuous mode [ 75.752659][ T5778] hsr_slave_1: entered promiscuous mode [ 75.759010][ T5791] Bluetooth: hci1: command tx timeout [ 75.764519][ T5086] Bluetooth: hci3: command tx timeout [ 75.770729][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.779661][ T5778] Cannot create hsr debugfs directory [ 75.913556][ T5791] Bluetooth: hci0: command tx timeout [ 75.913783][ T5086] Bluetooth: hci2: command tx timeout [ 75.971033][ T5779] hsr_slave_0: entered promiscuous mode [ 75.977405][ T5779] hsr_slave_1: entered promiscuous mode [ 75.986383][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.994175][ T5779] Cannot create hsr debugfs directory [ 76.234446][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.248291][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.275224][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.287902][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.363140][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.378422][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.391642][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.402129][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.492585][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.502272][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.512878][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.523218][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.604791][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.615068][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.629671][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.641190][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.678595][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.728643][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.745030][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.752475][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.770284][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.777506][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.808844][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.880801][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.918363][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.925580][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.947176][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.962406][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.969603][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.018371][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.074260][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.091419][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.135004][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.142264][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.168466][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.175655][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.238073][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.266904][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.274110][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.302521][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.309774][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.396993][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.569244][ T5780] veth0_vlan: entered promiscuous mode [ 77.589206][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.617241][ T5780] veth1_vlan: entered promiscuous mode [ 77.710951][ T5778] veth0_vlan: entered promiscuous mode [ 77.752693][ T5780] veth0_macvtap: entered promiscuous mode [ 77.774528][ T5778] veth1_vlan: entered promiscuous mode [ 77.782319][ T5780] veth1_macvtap: entered promiscuous mode [ 77.816770][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.833791][ T5086] Bluetooth: hci3: command tx timeout [ 77.839438][ T5086] Bluetooth: hci1: command tx timeout [ 77.890259][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.902204][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.911960][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.922376][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.931139][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.950526][ T5778] veth0_macvtap: entered promiscuous mode [ 77.962421][ T5778] veth1_macvtap: entered promiscuous mode [ 77.993906][ T5086] Bluetooth: hci2: command tx timeout [ 78.007791][ T5086] Bluetooth: hci0: command tx timeout [ 78.042377][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.058198][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.072143][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.085962][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.096393][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.110070][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.124905][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.136672][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.187816][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.197700][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.210312][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.221783][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.231517][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.241030][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.285241][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.304713][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.364415][ T5779] veth0_vlan: entered promiscuous mode [ 78.401729][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.416062][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.446524][ T5777] veth0_vlan: entered promiscuous mode [ 78.454463][ T5779] veth1_vlan: entered promiscuous mode [ 78.537681][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.546051][ T5777] veth1_vlan: entered promiscuous mode [ 78.564737][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.598080][ T5779] veth0_macvtap: entered promiscuous mode [ 78.615946][ T5779] veth1_macvtap: entered promiscuous mode [ 78.664467][ T5777] veth0_macvtap: entered promiscuous mode [ 78.676425][ T5777] veth1_macvtap: entered promiscuous mode [ 78.724669][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.755159][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.783171][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.795911][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.914208][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.951664][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.979037][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.009398][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.052999][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.062849][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.079839][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.091543][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.111109][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.126311][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.161784][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.192881][ T5846] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2'. [ 79.276591][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.397609][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.636688][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.724466][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.738680][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.748428][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.778054][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.803123][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.831056][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.874110][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.885025][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.895894][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.907802][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.918185][ T5086] Bluetooth: hci1: command tx timeout [ 79.918201][ T5791] Bluetooth: hci3: command tx timeout [ 79.948567][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.957468][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.976117][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.993290][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.094153][ T5791] Bluetooth: hci0: command tx timeout [ 80.099661][ T5791] Bluetooth: hci2: command tx timeout [ 80.356062][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.480705][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.056915][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.078874][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.860989][ T5791] Bluetooth: hci3: command tx timeout [ 82.866691][ T5086] Bluetooth: hci1: command tx timeout [ 82.872212][ T5086] Bluetooth: hci2: command tx timeout [ 82.873400][ T5781] Bluetooth: hci0: command tx timeout [ 82.953575][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.961536][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.685314][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.726366][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.050900][ T5869] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 85.434525][ T5869] syz.0.1: attempt to access beyond end of device [ 85.434525][ T5869] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 85.448322][ T5869] XFS (nbd0): SB validate failed with error -5. [ 86.235812][ T5878] lo speed is unknown, defaulting to 1000 [ 86.241811][ T5878] lo speed is unknown, defaulting to 1000 [ 86.254748][ T5878] lo speed is unknown, defaulting to 1000 [ 86.280404][ T5878] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.328755][ T5878] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.570892][ T5878] lo speed is unknown, defaulting to 1000 [ 86.603461][ T5878] lo speed is unknown, defaulting to 1000 [ 86.615776][ T5878] lo speed is unknown, defaulting to 1000 [ 86.628265][ T5878] lo speed is unknown, defaulting to 1000 [ 90.284077][ T5905] syz.1.8[5905]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.783564][ T5901] ======================================================= [ 90.783564][ T5901] WARNING: The mand mount option has been deprecated and [ 90.783564][ T5901] and is ignored by this kernel. Remove the mand [ 90.783564][ T5901] option from the mount to silence this warning. [ 90.783564][ T5901] ======================================================= [ 92.455793][ T27] cfg80211: failed to load regulatory.db [ 95.740453][ T5926] loop2: detected capacity change from 0 to 2048 [ 96.784981][ T5924] sched: RT throttling activated [ 96.996992][ T5926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.009640][ T5926] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.981293][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.305203][ T5936] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 98.901568][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 98.913259][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 99.452452][ T5947] Zero length message leads to an empty skb [ 100.343109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 103.872158][ T5968] loop2: detected capacity change from 0 to 128 [ 103.889102][ T5968] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ0x0000000000000000" or missing value [ 106.344964][ T5973] loop2: detected capacity change from 0 to 128 [ 106.454064][ T5973] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.518111][ T5973] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.196329][ T5979] overlayfs: failed to resolve './file1': -2 [ 107.917497][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.421999][ T5986] syz.2.33: attempt to access beyond end of device [ 108.421999][ T5986] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 108.436171][ T5986] hfsplus: unable to find HFS+ superblock [ 109.531358][ T5989] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.295615][ T6002] loop0: detected capacity change from 0 to 32768 [ 111.365500][ T6002] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.519528][ T6002] XFS (loop0): Ending clean mount [ 111.545744][ T6002] XFS (loop0): Quotacheck needed: Please wait. [ 111.628918][ T6015] loop3: detected capacity change from 0 to 256 [ 111.660150][ T6002] XFS (loop0): Quotacheck: Done. [ 112.787252][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.752887][ T6046] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.824248][ T6058] tmpfs: Bad value for 'mpol' [ 117.320347][ T6063] loop3: detected capacity change from 0 to 512 [ 117.339189][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 118.004755][ T6063] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #15: comm syz.3.46: corrupted inode contents [ 118.118594][ T6063] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 118.289432][ T6060] loop2: detected capacity change from 0 to 2048 [ 118.371472][ T6063] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #15: comm syz.3.46: corrupted inode contents [ 118.433790][ T6063] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.46: mark_inode_dirty error [ 118.483042][ T6060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.537518][ T6063] EXT4-fs (loop3): 1 orphan inode deleted [ 118.574633][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.580142][ T6078] loop0: detected capacity change from 0 to 512 [ 119.009501][ T6082] mmap: syz.3.46 (6082) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.912320][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.000967][ T6091] sctp: failed to load transform for md5: -2 [ 121.102625][ T6086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.184473][ T6078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.381854][ T6078] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.113018][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.766579][ T6125] loop0: detected capacity change from 0 to 16 [ 127.418675][ T6125] erofs: (device loop0): mounted with root inode @ nid 36. [ 127.462199][ T6124] syz.0.59: attempt to access beyond end of device [ 127.462199][ T6124] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 127.495221][ T6124] syz.0.59: attempt to access beyond end of device [ 127.495221][ T6124] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 127.509408][ T6124] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 127.532136][ T28] audit: type=1800 audit(1781025522.512:2): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.59" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 127.632565][ T6124] syz.0.59 (6124) used greatest stack depth: 20336 bytes left [ 131.063113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.983339][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989657][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.815160][ T27] IPVS: starting estimator thread 0... [ 133.913274][ T6151] IPVS: using max 19 ests per chain, 45600 per kthread [ 134.853911][ T6148] 9pnet_fd: Insufficient options for proto=fd [ 134.898678][ T6157] loop2: detected capacity change from 0 to 128 [ 136.265363][ T6163] loop3: detected capacity change from 0 to 128 [ 136.840590][ T6163] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.853378][ T6163] hpfs: filesystem error: improperly stopped [ 136.859383][ T6163] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 136.867229][ T6163] hpfs: You really don't want any checks? You are crazy... [ 136.874894][ T6163] hpfs: hpfs_map_sector(): read error [ 136.880284][ T6163] hpfs: code page support is disabled [ 136.886586][ T6163] hpfs: hpfs_map_4sectors(): unaligned read [ 136.892690][ T6163] hpfs: hpfs_map_4sectors(): unaligned read [ 136.898622][ T6163] hpfs: filesystem error: unable to find root dir [ 136.942564][ T6165] loop2: detected capacity change from 0 to 8 [ 136.950010][ T6165] squashfs: Unknown parameter 'þ' [ 139.193902][ T6171] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 139.308413][ T6176] loop3: detected capacity change from 0 to 256 [ 139.588498][ T6179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 139.615261][ T6179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.73'. [ 139.670414][ T6176] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 139.719994][ T28] audit: type=1326 audit(1781025534.712:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd62a79ce59 code=0x0 [ 141.388290][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 142.287239][ T6194] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 144.076660][ T6202] warning: `syz.3.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.300695][ T6218] input: syz1 as /devices/virtual/input/input7 [ 148.469108][ T5781] Bluetooth: hci3: SCO packet for unknown connection handle 3840 [ 152.000289][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.018530][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.027772][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.053550][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.063522][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.076979][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.555749][ T6248] loop2: detected capacity change from 0 to 32768 [ 153.642233][ T6248] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.722052][ T6248] XFS (loop2): Ending clean mount [ 153.731399][ T6248] XFS (loop2): Quotacheck needed: Please wait. [ 153.800095][ T6248] XFS (loop2): Quotacheck: Done. [ 154.166290][ T5086] Bluetooth: hci4: command tx timeout [ 154.522754][ T5780] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.241695][ T5086] Bluetooth: hci4: command tx timeout [ 156.266822][ T6235] chnl_net:caif_netlink_parms(): no params data found [ 156.897575][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.674949][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.682183][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.689971][ T6235] bridge_slave_0: entered allmulticast mode [ 157.697391][ T6235] bridge_slave_0: entered promiscuous mode [ 157.768653][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.802326][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.825027][ T6235] bridge_slave_1: entered allmulticast mode [ 157.832438][ T6235] bridge_slave_1: entered promiscuous mode [ 157.851058][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 157.874616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 158.097277][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.195826][ T6288] loop2: detected capacity change from 0 to 512 [ 158.237842][ T6235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.255929][ T6288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.313007][ T5086] Bluetooth: hci4: command tx timeout [ 158.829851][ T6288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803e02c, mo2=0002] [ 158.928403][ T6288] System zones: 1-12 [ 159.195332][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.222150][ T6288] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.96: invalid block [ 159.240331][ T6288] EXT4-fs (loop2): Remounting filesystem read-only [ 159.263549][ T6288] EXT4-fs (loop2): 1 truncate cleaned up [ 159.293759][ T6288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.308894][ T6235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.806582][ T5086] Bluetooth: hci4: command tx timeout [ 160.819186][ T6294] loop3: detected capacity change from 0 to 128 [ 162.702210][ T5780] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 163.166229][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.190655][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.291298][ T6307] loop3: detected capacity change from 0 to 512 [ 163.305565][ T6307] ext4: Unknown parameter 'fsuuid' [ 164.820289][ T6235] team0: Port device team_slave_0 added [ 165.692486][ T6235] team0: Port device team_slave_1 added [ 166.903122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 167.469592][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.476764][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.533188][ T6235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.565738][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.597914][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.683743][ T6235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.524106][ T6235] hsr_slave_0: entered promiscuous mode [ 168.623368][ T6235] hsr_slave_1: entered promiscuous mode [ 168.663045][ T6235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.682932][ T6235] Cannot create hsr debugfs directory [ 169.645995][ T6336] loop3: detected capacity change from 0 to 128 [ 169.724175][ T6336] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.808422][ T6336] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.467223][ T6349] syz.3.106 (pid 6349) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 173.029597][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.946227][ T6358] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 174.057926][ T6235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.087894][ T6235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.248412][ T6235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.288245][ T6235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.328849][ T6373] loop3: detected capacity change from 0 to 512 [ 174.382144][ T6373] EXT4-fs: Ignoring removed i_version option [ 174.391457][ T6373] EXT4-fs: Ignoring removed nobh option [ 174.421121][ T6373] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 174.446269][ T6373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.503930][ T6373] EXT4-fs (loop3): 1 truncate cleaned up [ 174.510922][ T6373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.438868][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.908211][ T6235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.335155][ T6235] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.598824][ T6409] loop2: detected capacity change from 0 to 2048 [ 177.790185][ T6406] loop3: detected capacity change from 0 to 40427 [ 177.994617][ T6406] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 178.002711][ T6406] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 178.028871][ T6406] F2FS-fs (loop3): invalid crc value [ 178.129229][ T6406] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.292475][ T6409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.626607][ T6406] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 178.634122][ T6406] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.827274][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.834611][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.005163][ T6427] usb usb8: usbfs: process 6427 (syz.3.114) did not claim interface 0 before use [ 179.823211][ T59] hsr_slave_0: left promiscuous mode [ 179.855789][ T59] hsr_slave_1: left promiscuous mode [ 179.866811][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.886582][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.926795][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.963131][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.016366][ T59] bridge_slave_1: left allmulticast mode [ 180.068309][ T59] bridge_slave_1: left promiscuous mode [ 180.119580][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.240748][ T59] bridge_slave_0: left allmulticast mode [ 180.289382][ T59] bridge_slave_0: left promiscuous mode [ 180.338336][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.435961][ T59] veth1_macvtap: left promiscuous mode [ 180.442107][ T59] veth0_macvtap: left promiscuous mode [ 180.448215][ T59] veth1_vlan: left promiscuous mode [ 180.454217][ T59] veth0_vlan: left promiscuous mode [ 182.212054][ T6421] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 183.020110][ T6440] loop3: detected capacity change from 0 to 8192 [ 183.982868][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.787006][ T6455] netlink: 'syz.2.121': attribute type 3 has an invalid length. [ 188.927869][ T59] team0 (unregistering): Port device team_slave_1 removed [ 189.046160][ T59] team0 (unregistering): Port device team_slave_0 removed [ 189.154433][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.314014][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.492393][ T59] bond0 (unregistering): Released all slaves [ 193.605330][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.612657][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.534833][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544666][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.554780][ T6505] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 196.633553][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 196.639967][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 196.646352][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 198.287792][ T6512] loop3: detected capacity change from 0 to 256 [ 198.356258][ T6235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.797833][ T6532] sctp: failed to load transform for md5: -2 [ 201.303486][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 201.416428][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 201.427743][ T6235] veth0_vlan: entered promiscuous mode [ 201.645649][ T6235] veth1_vlan: entered promiscuous mode [ 202.397036][ T6235] veth0_macvtap: entered promiscuous mode [ 202.415591][ T6235] veth1_macvtap: entered promiscuous mode [ 202.454216][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.464855][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.475707][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.486317][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.498471][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.509163][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.523799][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.535959][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.547050][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.559069][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.569676][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.579637][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.591120][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.613011][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.641500][ T6235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.681218][ T6235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.694791][ T6235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.735625][ T6235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.972281][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.992994][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.509926][ T6601] sctp: failed to load transform for md5: -2 [ 209.973434][ T6612] siw: device registration error -23 [ 211.007799][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.026279][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.048953][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.064434][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.072154][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.079872][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.338003][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.614107][ T6630] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 213.113068][ T5791] Bluetooth: hci0: command tx timeout [ 213.196728][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.630420][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.652944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 216.314470][ T5791] Bluetooth: hci0: command tx timeout [ 217.851639][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.253027][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 218.393120][ T5791] Bluetooth: hci0: command tx timeout [ 218.653678][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.663044][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.684283][ T6615] bridge_slave_0: entered allmulticast mode [ 218.691328][ T6615] bridge_slave_0: entered promiscuous mode [ 219.177704][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.206121][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.227304][ T6615] bridge_slave_1: entered allmulticast mode [ 219.238737][ T6615] bridge_slave_1: entered promiscuous mode [ 219.825701][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.904723][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.146284][ T6615] team0: Port device team_slave_0 added [ 220.186433][ T6615] team0: Port device team_slave_1 added [ 220.346231][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.372777][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.444971][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.488096][ T5791] Bluetooth: hci0: command tx timeout [ 220.565112][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.572225][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.683057][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.731337][ T6693] loop2: detected capacity change from 0 to 512 [ 220.762261][ T6693] EXT4-fs: Ignoring removed i_version option [ 220.783858][ T6693] EXT4-fs: Ignoring removed nobh option [ 220.798476][ T6693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.831507][ T6693] EXT4-fs (loop2): 1 truncate cleaned up [ 220.839516][ T6693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.762212][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.886570][ T6700] loop3: detected capacity change from 0 to 1024 [ 221.933805][ T6700] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.969602][ T6700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.064917][ T6700] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 222.097063][ T6615] hsr_slave_0: entered promiscuous mode [ 222.109409][ T6615] hsr_slave_1: entered promiscuous mode [ 222.112196][ T6700] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 222.323795][ T6705] loop2: detected capacity change from 0 to 256 [ 222.448871][ T6615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.578836][ T6615] Cannot create hsr debugfs directory [ 222.783595][ T6705] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 222.874247][ T6356] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 223.715411][ T6713] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 224.609254][ T59] hsr_slave_0: left promiscuous mode [ 224.628657][ T59] hsr_slave_1: left promiscuous mode [ 224.655189][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.708348][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.755100][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.778204][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.999541][ T59] bridge_slave_1: left allmulticast mode [ 225.017582][ T59] bridge_slave_1: left promiscuous mode [ 225.049378][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.239838][ T59] bridge_slave_0: left allmulticast mode [ 225.347160][ T59] bridge_slave_0: left promiscuous mode [ 225.412770][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.663166][ T59] veth1_macvtap: left promiscuous mode [ 225.668867][ T59] veth0_macvtap: left promiscuous mode [ 225.707869][ T59] veth1_vlan: left promiscuous mode [ 225.715956][ T59] veth0_vlan: left promiscuous mode [ 226.684065][ T6742] Bluetooth: MGMT ver 1.22 [ 231.487023][ T59] team0 (unregistering): Port device team_slave_1 removed [ 231.616614][ T59] team0 (unregistering): Port device team_slave_0 removed [ 231.908181][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.083980][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.174676][ T59] bond0 (unregistering): Released all slaves [ 233.684494][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 234.803306][ T6767] process 'syz.1.171' launched './file1' with NULL argv: empty string added [ 238.582947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 240.902350][ T6615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.260597][ T6615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.319731][ T6615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.379155][ T6615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.147192][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.222844][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.248654][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.255968][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.329851][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.337043][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.409210][ T6810] siw: device registration error -23 [ 244.766968][ T6825] loop2: detected capacity change from 0 to 1024 [ 244.798458][ T6825] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.857317][ T6825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.892185][ T6825] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 244.950183][ T6825] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 246.932437][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.074792][ T6842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 247.093122][ T6842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.176'. [ 248.654607][ T28] audit: type=1326 audit(1781025643.642:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.1.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd62a79ce59 code=0x0 [ 248.824105][ T6841] syzkaller0: entered promiscuous mode [ 248.853032][ T6841] syzkaller0: entered allmulticast mode [ 249.158073][ T6841] tipc: Started in network mode [ 249.172957][ T6841] tipc: Node identity 82ef9fdc41e7, cluster identity 4711 [ 249.206157][ T6841] tipc: Enabled bearer , priority 0 [ 249.256919][ T6839] tipc: Resetting bearer [ 249.433074][ T6839] tipc: Disabling bearer [ 253.339353][ T6615] veth0_vlan: entered promiscuous mode [ 253.416220][ T6615] veth1_vlan: entered promiscuous mode [ 253.588283][ T6615] veth0_macvtap: entered promiscuous mode [ 253.657744][ T6615] veth1_macvtap: entered promiscuous mode [ 254.150401][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.372996][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.436758][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.493226][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.532918][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.573011][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.620013][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.757168][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.763550][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.085534][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.106466][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.127265][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.142473][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.152713][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.177409][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.201118][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.243909][ T6615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.257498][ T6894] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 257.277569][ T6894] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 257.286578][ T6615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.295391][ T6894] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 257.332596][ T6615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.353283][ T6615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.326846][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.342970][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.438001][ T6911] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 259.839738][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.910319][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.338547][ T6925] loop3: detected capacity change from 0 to 512 [ 260.422818][ T6929] loop4: detected capacity change from 0 to 1024 [ 260.468906][ T6925] EXT4-fs: Ignoring removed bh option [ 260.572040][ T6925] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.196: corrupted in-inode xattr: e_value size too large [ 260.634712][ T6925] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.196: couldn't read orphan inode 15 (err -117) [ 260.666947][ T6925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.153979][ T6936] bridge1: entered promiscuous mode [ 261.464085][ T6936] syz.4.80 (6936) used greatest stack depth: 20232 bytes left [ 262.705075][ T6946] input: syz1 as /devices/virtual/input/input10 [ 263.627543][ T6941] loop4: detected capacity change from 0 to 1024 [ 263.821426][ T6941] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.831627][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.899163][ T6941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.913152][ T6941] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 263.942719][ T6941] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 264.305471][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 264.364064][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.189'. [ 264.442722][ T6955] netlink: 48 bytes leftover after parsing attributes in process `syz.3.189'. [ 264.602329][ T6957] loop3: detected capacity change from 0 to 8 [ 264.944069][ T28] audit: type=1326 audit(1781025659.922:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.3.189" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde7ef9ce59 code=0x0 [ 265.102974][ T6769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.337563][ T6962] SQUASHFS error: Failed to read block 0x4de: -5 [ 265.348407][ T6962] SQUASHFS error: Failed to read block 0x4de: -5 [ 265.362422][ T28] audit: type=1800 audit(1781025660.352:6): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.189" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 270.800483][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.841112][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.893044][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.920156][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.963028][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.000796][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.862976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 271.936151][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.955989][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.975210][ T6997] ipvlan1: entered allmulticast mode [ 272.039904][ T6997] batadv_slave_1: entered allmulticast mode [ 272.057368][ T6997] batman_adv: batadv0: Adding interface: ipvlan1 [ 272.064163][ T6997] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.094954][ T6997] batman_adv: batadv0: Interface activated: ipvlan1 [ 272.263314][ T5839] IPVS: starting estimator thread 0... [ 272.373342][ T7006] IPVS: using max 19 ests per chain, 45600 per kthread [ 274.423039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 277.214465][ T7021] loop4: detected capacity change from 0 to 128 [ 281.210033][ T7052] loop3: detected capacity change from 0 to 2048 [ 281.973671][ T7054] loop4: detected capacity change from 0 to 8 [ 282.103037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 283.598333][ T7054] SQUASHFS error: Failed to read block 0x4de: -5 [ 283.664325][ T7054] SQUASHFS error: Failed to read block 0x4de: -5 [ 283.683449][ T28] audit: type=1800 audit(1781025678.662:7): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.209" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 286.043396][ T7070] loop4: detected capacity change from 0 to 2048 [ 286.069334][ T7070] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.133028][ T28] audit: type=1800 audit(1781025681.122:8): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.213" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 287.222981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 292.001103][ T7105] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 292.009833][ T7105] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 292.018396][ T7105] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 294.155586][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.221'. [ 294.183410][ T7128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.221'. [ 294.222758][ T7130] loop2: detected capacity change from 0 to 8 [ 294.305900][ T28] audit: type=1326 audit(1781025690.299:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.2.221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b7a19ce59 code=0x0 [ 294.632753][ T7137] SQUASHFS error: Failed to read block 0x4de: -5 [ 294.641398][ T7137] SQUASHFS error: Failed to read block 0x4de: -5 [ 294.917241][ T28] audit: type=1800 audit(1781025690.639:10): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.221" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 301.215138][ T7170] loop2: detected capacity change from 0 to 8192 [ 301.451260][ T7170] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 301.459325][ T7170] UDF-fs: Scanning with blocksize 512 failed [ 301.466787][ T7170] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 301.474260][ T7170] UDF-fs: Scanning with blocksize 1024 failed [ 301.480897][ T7170] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 301.488378][ T7170] UDF-fs: Scanning with blocksize 2048 failed [ 301.499513][ T7170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.808440][ T7177] loop3: detected capacity change from 0 to 8 [ 301.934032][ T7177] squashfs: Unknown parameter 'þ' [ 304.827331][ T7203] [ 304.829730][ T7203] ============================= [ 304.835007][ T7203] WARNING: suspicious RCU usage [ 304.840732][ T7203] syzkaller #0 Not tainted [ 304.845558][ T7203] ----------------------------- [ 304.850435][ T7203] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 304.859163][ T7203] [ 304.859163][ T7203] other info that might help us debug this: [ 304.859163][ T7203] [ 304.869506][ T7203] [ 304.869506][ T7203] rcu_scheduler_active = 2, debug_locks = 1 [ 304.877798][ T7203] 1 lock held by syz.1.230/7203: [ 304.882778][ T7203] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 304.891729][ T7203] [ 304.891729][ T7203] stack backtrace: [ 304.897792][ T7203] CPU: 1 PID: 7203 Comm: syz.1.230 Not tainted syzkaller #0 [ 304.905116][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 304.915211][ T7203] Call Trace: [ 304.918531][ T7203] [ 304.921499][ T7203] dump_stack_lvl+0x18c/0x250 [ 304.926218][ T7203] ? show_regs_print_info+0x20/0x20 [ 304.931451][ T7203] ? load_image+0x420/0x420 [ 304.936005][ T7203] lockdep_rcu_suspicious+0x1e1/0x300 [ 304.941424][ T7203] ieee80211_check_concurrent_iface+0x475/0x950 [ 304.947744][ T7203] ieee80211_open+0xc1/0x200 [ 304.952390][ T7203] __dev_open+0x2cb/0x430 [ 304.956790][ T7203] ? dev_open+0x190/0x190 [ 304.961177][ T7203] __dev_change_flags+0x211/0x6a0 [ 304.966244][ T7203] ? dev_get_flags+0x1c0/0x1c0 [ 304.971049][ T7203] ? mutex_lock_nested+0x20/0x20 [ 304.976100][ T7203] dev_change_flags+0x88/0x1a0 [ 304.980927][ T7203] dev_ioctl+0x7b4/0x1140 [ 304.985333][ T7203] sock_do_ioctl+0x239/0x310 [ 304.989968][ T7203] ? sock_show_fdinfo+0xb0/0xb0 [ 304.994879][ T7203] sock_ioctl+0x5ba/0x7e0 [ 304.999263][ T7203] ? sock_poll+0x3e0/0x3e0 [ 305.003725][ T7203] ? bpf_lsm_file_ioctl+0x9/0x10 [ 305.008696][ T7203] ? security_file_ioctl+0x80/0xa0 [ 305.013865][ T7203] ? sock_poll+0x3e0/0x3e0 [ 305.018336][ T7203] __se_sys_ioctl+0xfd/0x170 [ 305.022985][ T7203] do_syscall_64+0x55/0xb0 [ 305.027454][ T7203] ? clear_bhb_loop+0x40/0x90 [ 305.032163][ T7203] ? clear_bhb_loop+0x40/0x90 [ 305.036897][ T7203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.042844][ T7203] RIP: 0033:0x7fd62a79ce59 [ 305.047314][ T7203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.066987][ T7203] RSP: 002b:00007fd62b72d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.075455][ T7203] RAX: ffffffffffffffda RBX: 00007fd62aa15fa0 RCX: 00007fd62a79ce59 [ 305.083467][ T7203] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000008 [ 305.091474][ T7203] RBP: 00007fd62a832d6f R08: 0000000000000000 R09: 0000000000000000 [ 305.099479][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.107481][ T7203] R13: 00007fd62aa16038 R14: 00007fd62aa15fa0 R15: 00007fff447c30d8 [ 305.115517][ T7203] [ 305.754085][ T7210] loop4: detected capacity change from 0 to 128 [ 305.778125][ T7210] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ0x0000000000000000" or missing value [ 306.971566][ T7213] loop2: detected capacity change from 0 to 128