last executing test programs: 9m7.713052909s ago: executing program 32 (id=45): setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m35.791459001s ago: executing program 5 (id=301): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x3, 0x5f8, &(0x7f0000000c80)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(0x0, 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44042, 0x8) sendfile(r2, r0, 0x0, 0x8) 7m35.159697794s ago: executing program 5 (id=306): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7m32.273560422s ago: executing program 5 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x802, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 7m31.747449423s ago: executing program 33 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x802, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 7m0.298067514s ago: executing program 2 (id=412): syz_emit_ethernet(0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$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") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x80086c42, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000000000), &(0x7f0000000bc0)=""/4096}, 0x20) 6m57.990446529s ago: executing program 2 (id=417): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x40040c0, &(0x7f0000000080)={0xa, 0x3, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) listen(r0, 0x100101) r1 = accept4(r0, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x406, r3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) 6m57.579491506s ago: executing program 2 (id=418): mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600)='\x00\x00\x00\x00', &(0x7f0000001700)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r2, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m56.41948664s ago: executing program 2 (id=421): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x158, 0x4c, 0x1a, 0x158, 0x73, 0x220, 0x258, 0x258, 0x220, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x76}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x5}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FITRIM(r1, 0x400448c9, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040) 6m56.112955485s ago: executing program 2 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) read$msr(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f00009a1000/0x10000)=nil, 0x10000) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 6m54.679899066s ago: executing program 2 (id=431): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) 6m40.165246572s ago: executing program 34 (id=427): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x0) 6m39.520250858s ago: executing program 35 (id=431): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) 5m40.671198147s ago: executing program 0 (id=606): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 5m37.709260264s ago: executing program 0 (id=613): openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 5m37.15189659s ago: executing program 0 (id=615): syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000280)='./file1\x00', 0x200802, &(0x7f0000000500)=ANY=[], 0x9, 0x20e, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) 5m35.790958683s ago: executing program 0 (id=620): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x81, 0x40, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5m34.806694139s ago: executing program 0 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x5, 0x6}}, './cgroup.cpu/test/cgroup.procs\x00'}) 5m32.701719147s ago: executing program 0 (id=631): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000340)={0x40002009}) 5m17.557343593s ago: executing program 36 (id=631): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000340)={0x40002009}) 3m18.141140541s ago: executing program 3 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280000000000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000040000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m17.127641902s ago: executing program 3 (id=974): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x2) signalfd(r0, &(0x7f00000006c0), 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f00000003c0)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x202, 0x12) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 3m15.93623416s ago: executing program 3 (id=977): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m14.291576662s ago: executing program 3 (id=983): socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40286608, 0x0) 3m12.950357522s ago: executing program 3 (id=988): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000019}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 3m10.953246188s ago: executing program 3 (id=991): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2m54.515870512s ago: executing program 37 (id=991): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1m52.167686662s ago: executing program 1 (id=1180): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sysinfo(0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0) 1m49.762892093s ago: executing program 1 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) 1m48.293911578s ago: executing program 1 (id=1187): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m45.528178585s ago: executing program 9 (id=1195): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x401, @local, 0xdf9}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x5, 0x5}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000020301000000000000000000000000000800010001000000090002000000ffff0209"], 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x20008802) 1m44.145820353s ago: executing program 9 (id=1199): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = syz_open_procfs(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, 0x0) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 1m41.978568005s ago: executing program 1 (id=1203): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 1m39.372821427s ago: executing program 1 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) 1m38.25508033s ago: executing program 9 (id=1212): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x1}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x64, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}]}, 0x64}}, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1m36.799478484s ago: executing program 9 (id=1216): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) sendto$inet(r0, &(0x7f0000000900)="df90d431aceae2af4e026a360e74143b59fc2a9b88a405135596918db7b8a165a911ab53b1bc1dd21048b4d355ea01130fc06b04d34ae294a94669641b4141c72f80ddad0dced57062aaa3a50560338cbd7c80352be8ab210d0c", 0x5a, 0x20000890, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) shutdown(r0, 0x1) 1m36.675707759s ago: executing program 1 (id=1217): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e24, @loopback}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800400, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 1m35.893702562s ago: executing program 38 (id=1217): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e24, @loopback}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800400, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 1m35.866142418s ago: executing program 9 (id=1219): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1m33.966901074s ago: executing program 9 (id=1222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003380)=@newtfilter={0x30, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m18.831426497s ago: executing program 39 (id=1222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003380)=@newtfilter={0x30, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 13.517352134s ago: executing program 7 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.260709185s ago: executing program 7 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x2c, 0x400}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 12.205980827s ago: executing program 8 (id=1362): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa00000000"], 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 12.083756512s ago: executing program 6 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r4, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968c18a}, 0x8006) 11.240590548s ago: executing program 7 (id=1365): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 11.054685317s ago: executing program 8 (id=1366): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, 0x0) userfaultfd(0x80001) syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbd4bb00afb3ab99"], 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000780)) setresuid(0xee01, 0xee01, 0xee00) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x9, 0x8000000000000002, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x4, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 11.034231991s ago: executing program 7 (id=1367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1, 0x0) fcntl$setpipe(r4, 0x408, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.724057094s ago: executing program 5 (id=1218): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) exit(0x4) preadv(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x2, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000940)=""/4096, 0x7151}], 0x1) splice(r0, 0x0, r1, 0x0, 0x7151, 0x0) 8.027076978s ago: executing program 7 (id=1369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010417000000000000000a00000a0900010073"], 0x78}, 0x1, 0x0, 0x0, 0x40090}, 0x200450c0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x4014}}, 0x40) 8.021804199s ago: executing program 6 (id=1370): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3900}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 7.802978864s ago: executing program 8 (id=1371): r0 = memfd_create(&(0x7f0000000540)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x66) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0x89, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 'rr\x00', 0x17, 0x3, 0x1f}, {@empty, 0x4e22, 0x0, 0xd, 0x6, 0xffffffff}}, 0x44) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xb1bd, 0x0, 0xfffffffffffffffc, 0x0, 0x1b}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.567015342s ago: executing program 4 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 6.42926974s ago: executing program 8 (id=1374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000000c0)="42ec6c47ba0e0db8912dde8ff2d341c9ca619478532a41944e024588ab567f8770fbd97d", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="7b8a4c3a1c20ac1600354b0636b3fcac9e125fcd0555069ade3c2dd6d57acab209ac21", 0x23}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48045) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.538631716s ago: executing program 6 (id=1375): open(&(0x7f00000000c0)='.\x00', 0x4c1c0, 0x50) setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xffffffff, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) 5.358185474s ago: executing program 4 (id=1376): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa00000000"], 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 4.0309254s ago: executing program 6 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x58b}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0xa, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xaf}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0xff1, &(0x7f0000001cc0)=""/4081, 0x41100, 0x22}, 0x94) 3.990715688s ago: executing program 4 (id=1378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) getpid() syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 3.909803835s ago: executing program 8 (id=1379): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYBLOB], 0x1, 0x217, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x10001) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 2.962504333s ago: executing program 6 (id=1380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 2.907699244s ago: executing program 5 (id=1381): openat$kvm(0xffffffffffffff9c, 0x0, 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 2.457747618s ago: executing program 4 (id=1382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000800180004ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 2.328891145s ago: executing program 6 (id=1383): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000240)=',\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004280)=ANY=[@ANYBLOB="0500000001000000a003000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0xa, 0x3, 0x87) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 2.285076154s ago: executing program 8 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1.305792038s ago: executing program 4 (id=1385): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009967, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 351.630286ms ago: executing program 5 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) getpeername$packet(r3, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000001c0)={0x1d, r5, 0x1, {0x0, 0x1, 0x4}}, 0x18) connect$can_j1939(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 3.917869ms ago: executing program 7 (id=1387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 0s ago: executing program 4 (id=1388): timer_create(0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) kernel console output (not intermixed with test programs): 8] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.347243][ T26] audit: type=1326 audit(2000000112.930:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549659e159 code=0x7ffc0000 [ 300.392482][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.428520][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 300.441987][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.461695][ T26] audit: type=1326 audit(2000000112.930:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f549659e159 code=0x7ffc0000 [ 300.522124][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.561520][ T26] audit: type=1326 audit(2000000112.930:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549659e159 code=0x7ffc0000 [ 300.562168][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.684332][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.704116][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.731856][ T6568] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.743288][ T6568] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.759605][ T26] audit: type=1326 audit(2000000112.930:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549659e159 code=0x7ffc0000 [ 300.793111][ T6568] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.807225][ T6568] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.823149][ T26] audit: type=1326 audit(2000000112.950:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f549659e159 code=0x7ffc0000 [ 300.886417][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.902960][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.923017][ T26] audit: type=1326 audit(2000000112.950:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549659e159 code=0x7ffc0000 [ 300.984997][ T26] audit: type=1326 audit(2000000112.950:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549659e159 code=0x7ffc0000 [ 301.892078][ T26] audit: type=1326 audit(2000000112.960:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f549659e159 code=0x7ffc0000 [ 302.027016][ T26] audit: type=1326 audit(2000000112.960:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549659e159 code=0x7ffc0000 [ 302.234805][ T5203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.336919][ T5203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.470788][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.488765][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.498211][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.505931][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.522064][ T4322] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 302.621550][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.655315][ T7168] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 302.702093][ T4322] usb 1-1: Using ep0 maxpacket: 16 [ 302.710737][ T4322] usb 1-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 302.742275][ T4322] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.764760][ T7168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.818057][ T4322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.857448][ T4322] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 302.884119][ T7171] bond4: (slave geneve2): making interface the new active one [ 302.898463][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.926060][ T7171] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 302.942037][ C1] net_ratelimit: 87 callbacks suppressed [ 302.978962][ T4322] usb 1-1: config 0 descriptor?? [ 302.988668][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.029123][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 303.048397][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.068082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.086488][ T4322] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 304.671466][ T7204] device syzkaller0 entered promiscuous mode [ 305.497497][ T4596] usb 1-1: USB disconnect, device number 5 [ 306.665226][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 307.801384][ T7225] netlink: 'syz.8.609': attribute type 1 has an invalid length. [ 307.825272][ T7227] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.835186][ T7227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.842823][ T7227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.932290][ T7230] 8021q: VLANs not supported on wg0 [ 308.052000][ C0] net_ratelimit: 44 callbacks suppressed [ 309.613544][ T7263] loop0: detected capacity change from 0 to 8 [ 310.129937][ T7269] SQUASHFS error: Failed to read block 0x4de: -5 [ 310.141709][ T7269] SQUASHFS error: Failed to read block 0x4de: -5 [ 310.161539][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 310.161691][ T26] audit: type=1800 audit(2000000122.810:444): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.615" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 311.264596][ T7275] tipc: Failed to remove unknown binding: 66,0,0/2886997039:693753456/693753458 [ 311.328523][ T7275] tipc: Failed to remove unknown binding: 66,0,0/2886997039:693753456/693753457 [ 311.401341][ T7275] tipc: Failed to remove unknown binding: 66,0,0/2886997039:693753456/693753458 [ 311.468555][ T7280] netlink: 'syz.4.622': attribute type 12 has an invalid length. [ 311.502767][ T7275] tipc: Failed to remove unknown binding: 66,0,0/2886997039:693753456/693753457 [ 311.803202][ T4322] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 312.925139][ T4322] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.954330][ T4322] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 312.988061][ T4322] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 313.031045][ T4322] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 313.059641][ T4322] usb 8-1: SerialNumber: syz [ 313.092009][ C0] net_ratelimit: 34 callbacks suppressed [ 313.356807][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.576488][ T4596] usb 8-1: USB disconnect, device number 2 [ 314.294825][ T7331] loop8: detected capacity change from 0 to 8 [ 315.453183][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.582973][ T7340] SQUASHFS error: Failed to read block 0x4de: -5 [ 315.592239][ T7340] SQUASHFS error: Failed to read block 0x4de: -5 [ 315.600386][ T26] audit: type=1800 audit(2000000128.250:445): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.646" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 315.779653][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.859444][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.919554][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.319544][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.098937][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111407][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.372069][ C1] net_ratelimit: 38 callbacks suppressed [ 319.634766][ T7394] input: syz1 as /devices/virtual/input/input8 [ 321.465948][ T7429] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 322.162197][ T4597] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 323.274158][ T4597] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 323.297430][ T4597] usb 9-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 323.311750][ T4597] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 323.320951][ T4597] usb 9-1: Product: syz [ 323.325615][ T4597] usb 9-1: Manufacturer: syz [ 323.398151][ T4597] hso 9-1:1.0: Can't find INT IN endpoint [ 323.501977][ C1] net_ratelimit: 49 callbacks suppressed [ 323.717043][ T4597] usb 9-1: USB disconnect, device number 2 [ 323.731552][ T7460] __vm_enough_memory: pid: 7460, comm: syz.4.665, no enough memory for the allocation [ 325.148711][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.8.669'. [ 326.340924][ T7494] bond1: option mode: unable to set because the bond device has slaves [ 326.473920][ T7494] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 326.798666][ T7503] fuse: Bad value for 'fd' [ 328.612892][ T5211] net_ratelimit: 48 callbacks suppressed [ 328.851699][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 329.023199][ T7538] mmap: syz.8.687 (7538) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 329.124412][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.828787][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.836462][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.844089][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.851547][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.859183][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.866698][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.874660][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.882481][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.890047][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.898333][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.905962][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.913518][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.921114][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.930254][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.937895][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.945447][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 329.953162][ T4596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 330.023568][ T4596] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.0e Device [syz0] on syz0 [ 330.681011][ T7549] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 331.337974][ T7541] fido_id[7541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 331.716712][ T5309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.765348][ T5309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.050852][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.074186][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.085702][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.095752][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.108707][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.116759][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.439246][ T5309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.522994][ T5309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.838308][ T5309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.969835][ T5309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.759428][ T47] net_ratelimit: 40 callbacks suppressed [ 333.880307][ T5309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.962161][ T5309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.212094][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 334.499328][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.701'. [ 335.735757][ T5309] tipc: Disabling bearer [ 335.761188][ T5309] tipc: Left network mode [ 335.976590][ T7593] syz.7.705 uses obsolete (PF_INET,SOCK_PACKET) [ 336.302235][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 336.712064][ T4597] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 336.917318][ T4597] usb 8-1: Using ep0 maxpacket: 32 [ 336.926860][ T4597] usb 8-1: config 0 has no interfaces? [ 336.970256][ T4597] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 337.064084][ T7602] xt_TCPMSS: Only works on TCP SYN packets [ 337.128166][ T4597] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.314399][ T4597] usb 8-1: Product: syz [ 337.423586][ T4597] usb 8-1: Manufacturer: syz [ 337.583183][ T4597] usb 8-1: SerialNumber: syz [ 337.836732][ T4597] usb 8-1: config 0 descriptor?? [ 338.327626][ T4596] usb 8-1: USB disconnect, device number 3 [ 338.372247][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 338.932012][ C1] net_ratelimit: 34 callbacks suppressed [ 339.168664][ T7614] loop3: detected capacity change from 0 to 512 [ 339.343547][ T7560] chnl_net:caif_netlink_parms(): no params data found [ 339.738574][ T7614] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 340.462148][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 340.501376][ T7624] tipc: Started in network mode [ 340.508008][ T7624] tipc: Node identity 4, cluster identity 4711 [ 340.710969][ T7624] tipc: Node number set to 4 [ 341.215344][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 341.369058][ T7631] futex_wake_op: syz.4.716 tries to shift op by 144; fix this program [ 343.139026][ T7656] loop8: detected capacity change from 0 to 1024 [ 343.198704][ T7656] EXT4-fs: Ignoring removed bh option [ 343.320399][ T7656] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 343.982720][ T11] net_ratelimit: 57 callbacks suppressed [ 344.027754][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.041236][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.049924][ T7560] device bridge_slave_0 entered promiscuous mode [ 344.076726][ T6587] EXT4-fs (loop8): unmounting filesystem. [ 344.084550][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.095603][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.458236][ T7560] device bridge_slave_1 entered promiscuous mode [ 347.613052][ T7560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.637943][ T7560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.750645][ T7560] team0: Port device team_slave_0 added [ 349.091984][ C0] net_ratelimit: 36 callbacks suppressed [ 349.160877][ T5309] device hsr_slave_0 left promiscuous mode [ 349.233009][ T5309] device hsr_slave_1 left promiscuous mode [ 349.292910][ T5309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.385387][ T5309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.403481][ T5309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.419700][ T5309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.446363][ T5309] device bridge_slave_1 left promiscuous mode [ 349.460157][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.569144][ T5309] device bridge_slave_0 left promiscuous mode [ 349.749293][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.630433][ T5309] device veth1_macvtap left promiscuous mode [ 350.663218][ T5309] device veth0_macvtap left promiscuous mode [ 350.691011][ T5309] device veth1_vlan left promiscuous mode [ 350.736949][ T5309] device veth0_vlan left promiscuous mode [ 353.261815][ T5309] bond2 (unregistering): (slave bond4): Releasing backup interface [ 353.306963][ T7752] loop7: detected capacity change from 0 to 128 [ 353.342316][ T5309] bond4 (unregistering): Released all slaves [ 353.498594][ T7752] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 353.533606][ T7752] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.078532][ T5309] bond2 (unregistering): (slave bond3): Releasing backup interface [ 354.108894][ T5309] bond3 (unregistering): Released all slaves [ 354.178343][ T5309] bond2 (unregistering): Released all slaves [ 354.297015][ T6568] EXT4-fs (loop7): unmounting filesystem. [ 354.367532][ T5309] bond1 (unregistering): (slave veth1): Releasing backup interface [ 354.429070][ T5309] bond1 (unregistering): Released all slaves [ 354.487657][ T7757] loop7: detected capacity change from 0 to 512 [ 354.516722][ T7757] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 354.532010][ C0] net_ratelimit: 48 callbacks suppressed [ 354.551347][ T7757] EXT4-fs (loop7): 1 truncate cleaned up [ 354.584734][ T7757] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 355.991517][ T6568] EXT4-fs (loop7): unmounting filesystem. [ 357.420006][ T5309] team0 (unregistering): Port device team_slave_1 removed [ 357.491414][ T5309] team0 (unregistering): Port device team_slave_0 removed [ 357.553903][ T5309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.629233][ T5309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.120143][ T5309] bond0 (unregistering): Released all slaves [ 358.251216][ T7560] team0: Port device team_slave_1 added [ 358.337390][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.349989][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.399174][ T7560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.421517][ T7741] device batadv_slave_1 entered promiscuous mode [ 358.472020][ T7741] device batadv_slave_1 left promiscuous mode [ 358.542208][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 359.576418][ C0] net_ratelimit: 33 callbacks suppressed [ 359.773225][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 359.810951][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.821348][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.923176][ T7783] loop8: detected capacity change from 0 to 8 [ 360.368870][ T7783] SQUASHFS error: lzo decompression failed, data probably corrupt [ 360.377433][ T7783] SQUASHFS error: Failed to read block 0x91: -5 [ 360.383943][ T7783] SQUASHFS error: Unable to read metadata cache entry [8f] [ 360.391226][ T7783] SQUASHFS error: Unable to read inode 0x7 [ 360.609069][ T7560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.964676][ T7560] device hsr_slave_0 entered promiscuous mode [ 360.983572][ T7560] device hsr_slave_1 entered promiscuous mode [ 361.006645][ T7560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.035054][ T7560] Cannot create hsr debugfs directory [ 361.040676][ T7792] netlink: 'syz.8.753': attribute type 1 has an invalid length. [ 361.138552][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.7.750'. [ 361.221560][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.8.753'. [ 361.274838][ T7796] device bond1 entered promiscuous mode [ 361.315626][ T7796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.357301][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.7.750'. [ 361.410599][ T7807] x86/PAT: syz.3.755:7807 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 361.422104][ T7799] device bridge1 entered promiscuous mode [ 361.474723][ T7799] bond1: (slave bridge1): making interface the new active one [ 361.508233][ T7799] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 361.532344][ T7805] x86/PAT: syz.3.755:7805 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 361.623130][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 362.202116][ T4596] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 362.467335][ T4596] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 363.016828][ T4596] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 363.043227][ T4596] usb 8-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 363.072130][ T4596] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.080210][ T4596] usb 8-1: Product: syz [ 363.131343][ T4596] usb 8-1: Manufacturer: syz [ 363.154861][ T4596] usb 8-1: SerialNumber: syz [ 363.273774][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 363.635725][ T4596] usb 8-1: Can't get UAC3 power state for id 10 [ 363.692312][ T4596] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 363.710110][ T4596] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 363.835940][ T4596] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 363.878252][ T4596] usb 8-1: USB disconnect, device number 4 [ 364.073642][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.082488][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.124638][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.173392][ T7837] loop8: detected capacity change from 0 to 256 [ 364.191346][ T7837] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 364.209413][ T7837] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 364.227502][ T7837] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 364.246654][ T7837] exFAT-fs (loop8): failed to load alloc-bitmap [ 364.253510][ T7837] exFAT-fs (loop8): failed to recognize exfat type [ 365.475916][ C1] net_ratelimit: 40 callbacks suppressed [ 366.957621][ T7825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.997737][ T7825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.295248][ T7825] device veth0_vlan left promiscuous mode [ 367.640648][ T7825] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.650033][ T7825] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.659025][ T7825] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.668288][ T7825] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.025835][ T7850] loop8: detected capacity change from 0 to 2048 [ 368.129983][ T7850] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 369.144723][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 369.191522][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.766'. [ 369.240464][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.766'. [ 369.249056][ T7560] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 369.297108][ T7560] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 369.374628][ T7560] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 369.454446][ T7560] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 369.511470][ T6587] EXT4-fs (loop8): unmounting filesystem. [ 370.701982][ C1] net_ratelimit: 41 callbacks suppressed [ 370.876904][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 371.010566][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.134686][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.177928][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.211708][ T7560] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.291464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.343525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.405210][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.412446][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.511442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.547972][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.700286][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.781063][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.788273][ T5203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.825615][ T7560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.836673][ T7560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.860679][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.893165][ T7888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.998234][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 372.134013][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 372.476161][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 372.520298][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 372.573374][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 372.619110][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.628062][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.639513][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 372.648603][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.671858][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 372.700066][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.613265][ T7929] batman_adv: batadv0: Adding interface: veth0 [ 375.627183][ T7929] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.705704][ T7929] batman_adv: batadv0: Interface activated: veth0 [ 375.736641][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.742330][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 375.769330][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.783302][ T7929] batman_adv: batadv0: Interface deactivated: veth0 [ 376.031322][ T7929] batman_adv: batadv0: Removing interface: veth0 [ 376.110046][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 376.158738][ T7560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.211754][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 376.220680][ C1] net_ratelimit: 32 callbacks suppressed [ 376.686416][ T7954] 9pnet_virtio: no channels available for device 127.0.0.1 [ 377.537011][ T7960] futex_wake_op: syz.3.790 tries to shift op by 144; fix this program [ 377.719496][ T7964] device syzkaller0 entered promiscuous mode [ 377.922646][ T7844] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 378.114370][ T7844] usb 8-1: config index 0 descriptor too short (expected 153, got 18) [ 378.130986][ T7960] futex_wake_op: syz.3.790 tries to shift op by 144; fix this program [ 378.157007][ T7844] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.208841][ T7844] usb 8-1: config 0 has no interfaces? [ 378.254906][ T7844] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 378.305573][ T7844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.350525][ T7844] usb 8-1: Product: syz [ 378.366161][ T7844] usb 8-1: Manufacturer: syz [ 378.402050][ T7844] usb 8-1: SerialNumber: syz [ 378.408851][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.424795][ T7844] usb 8-1: config 0 descriptor?? [ 378.436929][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.535509][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.541961][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.571557][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.611168][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.656770][ T7560] device veth0_vlan entered promiscuous mode [ 378.676662][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.706159][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.774151][ T7560] device veth1_vlan entered promiscuous mode [ 378.913420][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 378.928942][ T7844] usb 8-1: USB disconnect, device number 5 [ 378.946270][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 379.026585][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.072440][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.103303][ T7560] device veth0_macvtap entered promiscuous mode [ 379.145521][ T7560] device veth1_macvtap entered promiscuous mode [ 379.184258][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.194986][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.207227][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.223011][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.234326][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.243293][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.253724][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.275343][ T7560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.291729][ T7560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.310749][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.327338][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.344476][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.358403][ T7560] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.376642][ T7560] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.386328][ T7560] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.396021][ T7560] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.655178][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.674354][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.689304][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 379.871262][ T4603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.888497][ T4603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.901245][ T7989] netlink: 'syz.8.796': attribute type 2 has an invalid length. [ 379.940926][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 381.269456][ T8005] netlink: 'syz.4.801': attribute type 2 has an invalid length. [ 381.333684][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 381.731971][ C1] net_ratelimit: 81 callbacks suppressed [ 381.967443][ T8010] loop9: detected capacity change from 0 to 256 [ 382.123565][ T8010] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 382.183797][ T8010] syz.9.688: attempt to access beyond end of device [ 382.183797][ T8010] loop9: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 382.265604][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 382.276932][ T4282] CPU: 1 PID: 4282 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 382.284548][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.294644][ T4282] Workqueue: hci1 hci_rx_work [ 382.299397][ T4282] Call Trace: [ 382.302708][ T4282] [ 382.305702][ T4282] dump_stack_lvl+0x188/0x24e [ 382.310430][ T4282] ? show_regs_print_info+0x12/0x12 [ 382.315673][ T4282] ? load_image+0x410/0x410 [ 382.320236][ T4282] sysfs_create_dir_ns+0x26a/0x290 [ 382.325385][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 382.330100][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 382.335363][ T4282] kobject_add_internal+0x617/0xca0 [ 382.340604][ T4282] kobject_add+0x160/0x230 [ 382.345065][ T4282] ? kobject_init+0x1c0/0x1c0 [ 382.349880][ T4282] ? __raw_spin_lock_init+0x41/0x100 [ 382.355202][ T4282] ? klist_children_get+0x50/0x50 [ 382.360243][ T4282] ? get_device_parent+0x121/0x3e0 [ 382.365399][ T4282] device_add+0x470/0x1050 [ 382.369852][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 382.374822][ T4282] le_conn_complete_evt+0xf93/0x15c0 [ 382.380151][ T4282] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 382.386431][ T4282] ? param_get_dyndbg_classes+0x160/0x160 [ 382.392188][ T4282] ? mutex_unlock+0x10/0x10 [ 382.396726][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 382.402337][ T4282] ? hci_remote_host_features_evt+0x230/0x230 [ 382.408458][ T4282] hci_event_packet+0x7b3/0x1290 [ 382.413430][ T4282] ? lock_chain_count+0x20/0x20 [ 382.418309][ T4282] ? bis_list+0x280/0x280 [ 382.422757][ T4282] ? lockdep_hardirqs_on+0x94/0x140 [ 382.427999][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 382.433233][ T4282] hci_rx_work+0x3eb/0xd40 [ 382.437701][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 382.442595][ T4282] ? process_one_work+0x7b4/0x1160 [ 382.447737][ T4282] process_one_work+0x8ab/0x1160 [ 382.452718][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 382.458379][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 382.463441][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 382.469025][ T4282] ? wq_worker_running+0x97/0x190 [ 382.474077][ T4282] worker_thread+0xaf5/0x12a0 [ 382.478804][ T4282] kthread+0x29d/0x330 [ 382.482919][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 382.487980][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 382.492608][ T4282] ret_from_fork+0x1f/0x30 [ 382.497067][ T4282] [ 382.503899][ T4282] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 382.517846][ T4282] Bluetooth: hci1: failed to register connection device [ 382.575165][ T8010] syz.9.688: attempt to access beyond end of device [ 382.575165][ T8010] loop9: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 382.742872][ T26] audit: type=1800 audit(2000000195.360:446): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.688" name="file1" dev="loop9" ino=1048623 res=0 errno=0 [ 385.540243][ T8055] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 385.578556][ T8055] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 386.389792][ T8058] netlink: 180 bytes leftover after parsing attributes in process `syz.7.809'. [ 386.771975][ C0] net_ratelimit: 43 callbacks suppressed [ 388.222695][ T8089] xt_CONNSECMARK: invalid mode: 66 [ 388.953238][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 389.568369][ T8086] netlink: 144 bytes leftover after parsing attributes in process `syz.9.819'. [ 390.737196][ T4594] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 391.486829][ T4594] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 391.688967][ T4594] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.823933][ C0] net_ratelimit: 33 callbacks suppressed [ 391.893450][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.823'. [ 391.903354][ T4594] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 391.912955][ T4594] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.940346][ T4594] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.950628][ T4594] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.959196][ T4594] usb 9-1: Product: syz [ 391.964075][ T4594] usb 9-1: Manufacturer: syz [ 391.985937][ T4594] cdc_wdm 9-1:1.0: skipping garbage [ 391.995904][ T4594] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 392.261127][ T4594] usb 9-1: USB disconnect, device number 3 [ 392.427490][ T8128] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 392.902115][ T4594] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 393.179107][ T4594] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 393.197453][ T4594] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.268905][ T4594] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 393.287203][ T4594] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.325218][ T4594] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 393.346948][ T4594] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 393.359422][ T4594] usb 9-1: Product: syz [ 393.369251][ T4594] usb 9-1: Manufacturer: syz [ 393.407634][ T4594] cdc_wdm 9-1:1.0: skipping garbage [ 393.417858][ T4594] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 393.544599][ T4594] usb 9-1: USB disconnect, device number 4 [ 394.037002][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.044679][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.028692][ T8111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.086458][ T8111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.608371][ T8111] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.625310][ T8111] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.634725][ T8111] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.644078][ T8111] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.820455][ T8112] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 396.858925][ T8112] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 396.897350][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.913886][ T8112] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 396.922172][ T8167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.966791][ T8176] loop9: detected capacity change from 0 to 1024 [ 396.974514][ T8176] ext4: Unknown parameter 'nouser_xattr' [ 397.033006][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.040515][ T8167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.091965][ C0] net_ratelimit: 48 callbacks suppressed [ 397.290929][ T8177] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 400.079340][ T8206] loop9: detected capacity change from 0 to 2048 [ 400.248332][ T8206] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 400.326466][ T8206] UDF-fs: Scanning with blocksize 512 failed [ 400.475665][ T8206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.890262][ T8226] loop3: detected capacity change from 0 to 1024 [ 400.941548][ T8226] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 400.953098][ T8226] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 400.974623][ T8226] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.844: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 400.998463][ T8226] EXT4-fs (loop3): no journal found [ 401.003855][ T8226] EXT4-fs (loop3): can't get journal size [ 401.151956][ T8226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 401.535910][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.846'. [ 401.711744][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 402.542237][ T8245] CIFS mount error: No usable UNC path provided in device string! [ 402.542237][ T8245] [ 402.552622][ T8245] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 402.691963][ C1] net_ratelimit: 23 callbacks suppressed [ 403.315540][ T8254] futex_wake_op: syz.9.853 tries to shift op by 144; fix this program [ 403.606635][ T8258] xt_CONNSECMARK: invalid mode: 0 [ 404.419589][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.427256][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.310622][ T8276] loop3: detected capacity change from 0 to 4096 [ 405.385209][ T8276] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 406.762606][ T8223] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.771678][ T8223] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.788909][ T8223] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.798261][ T8223] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.572256][ T5144] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 407.798181][ T5144] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 407.971965][ C0] net_ratelimit: 24 callbacks suppressed [ 408.117786][ T5144] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 408.307371][ T8317] loop8: detected capacity change from 0 to 256 [ 408.377672][ T5144] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.385940][ T5144] usb 10-1: Product: syz [ 408.390224][ T5144] usb 10-1: Manufacturer: syz [ 408.411158][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 408.419551][ T5144] usb 10-1: SerialNumber: syz [ 408.499459][ T8181] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.838340][ T5144] usb 10-1: 1:1 : format type 0 is detected, processed as PCM [ 409.871976][ T5144] usb 10-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 409.896800][ T5144] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 410.101472][ T5144] usb 10-1: USB disconnect, device number 2 [ 411.122021][ T4596] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 411.150736][ T8363] netlink: 'syz.4.872': attribute type 1 has an invalid length. [ 411.192101][ T5144] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 411.265941][ T8363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 411.325981][ T4596] usb 8-1: config index 0 descriptor too short (expected 100, got 68) [ 411.337113][ T4596] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 411.404255][ T5144] usb 10-1: not running at top speed; connect to a high speed hub [ 411.425865][ T5144] usb 10-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 411.495020][ T5144] usb 10-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 411.543526][ T4596] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 411.558962][ T4596] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.568186][ T4596] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 411.576372][ T4596] usb 8-1: SerialNumber: syz [ 411.608508][ T8355] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 411.622244][ T5144] usb 10-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 411.647429][ T5144] usb 10-1: Product: syz [ 411.671157][ T5144] usb 10-1: Manufacturer: syz [ 411.904876][ T5144] usb 10-1: Found UVC 1.00 device syz (225a:e1d4) [ 412.116061][ T5144] usb 10-1: No streaming interface found for terminal 2. [ 412.287572][ T8323] udevd[8323]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.330799][ T5144] usb 10-1: USB disconnect, device number 3 [ 412.393813][ T8355] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 412.424027][ T8367] bond5: (slave veth7): Enslaving as an active interface with a down link [ 412.650273][ T8363] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 412.865704][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.876'. [ 413.655760][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.707911][ T8363] bond5: (slave batadv1): making interface the new active one [ 413.742500][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.786259][ T8363] device batadv1 entered promiscuous mode [ 413.844124][ T8363] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 414.015409][ C1] net_ratelimit: 12 callbacks suppressed [ 414.097600][ T8369] bond5: (slave veth9): Enslaving as an active interface with a down link [ 414.142490][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 414.185333][ T8387] loop9: detected capacity change from 0 to 128 [ 414.206998][ T4596] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 414.258633][ T4596] usb 8-1: USB disconnect, device number 6 [ 414.682268][ T4318] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 414.918565][ T4318] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 415.369847][ T4318] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 415.456137][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.531112][ T4318] usb 4-1: Product: syz [ 415.537792][ T4318] usb 4-1: Manufacturer: syz [ 415.543695][ T4318] usb 4-1: SerialNumber: syz [ 416.592504][ T8415] netlink: 'syz.7.886': attribute type 8 has an invalid length. [ 416.635645][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.886'. [ 417.351211][ T8415] device bond0 entered promiscuous mode [ 417.416712][ T8415] device bond_slave_0 entered promiscuous mode [ 417.432114][ T8415] device bond_slave_1 entered promiscuous mode [ 417.455740][ T8415] device gretap0 entered promiscuous mode [ 417.493464][ T8415] device team0 entered promiscuous mode [ 417.499124][ T8415] device team_slave_0 entered promiscuous mode [ 417.558109][ T8415] device team_slave_1 entered promiscuous mode [ 417.603763][ T8415] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 417.644657][ T4318] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 417.666541][ T4318] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 417.678028][ T8415] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 417.688726][ T4318] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 417.701227][ T8415] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 417.737796][ T8415] device hsr1 entered promiscuous mode [ 417.836747][ T4318] usb 4-1: USB disconnect, device number 6 [ 418.275785][ T8323] udevd[8323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.059916][ C1] net_ratelimit: 15 callbacks suppressed [ 419.237460][ T8446] fuse: Bad value for 'fd' [ 419.345628][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.471678][ T8452] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 420.300015][ T8453] netlink: 'syz.3.894': attribute type 9 has an invalid length. [ 420.418764][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.895'. [ 422.060666][ T26] audit: type=1326 audit(2000000234.710:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.8.893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc30259e159 code=0x0 [ 422.124162][ T8485] lo: Caught tx_queue_len zero misconfig [ 422.151648][ T8485] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 422.209872][ T8487] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 423.646163][ T8511] loop9: detected capacity change from 0 to 256 [ 423.676477][ T8511] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 424.211961][ C1] net_ratelimit: 42 callbacks suppressed [ 424.756914][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.8.909'. [ 424.994576][ T8526] bridge2: port 1(veth3) entered blocking state [ 425.021403][ T8526] bridge2: port 1(veth3) entered disabled state [ 425.072891][ T8526] device veth3 entered promiscuous mode [ 425.177038][ T8524] bridge2: port 2(veth0_to_bond) entered blocking state [ 425.459862][ T8524] bridge2: port 2(veth0_to_bond) entered disabled state [ 425.973157][ T8524] device veth0_to_bond entered promiscuous mode [ 426.264145][ T8530] bridge2: port 3(veth5) entered blocking state [ 426.312479][ T8530] bridge2: port 3(veth5) entered disabled state [ 426.375985][ T8530] device veth5 entered promiscuous mode [ 427.592539][ T26] audit: type=1326 audit(2000000240.180:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 427.905323][ T5201] device batadv1 left promiscuous mode [ 428.251336][ T26] audit: type=1326 audit(2000000240.180:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 428.300770][ T26] audit: type=1326 audit(2000000240.180:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 428.425468][ T26] audit: type=1326 audit(2000000240.180:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 429.251945][ C1] net_ratelimit: 26 callbacks suppressed [ 429.299442][ T26] audit: type=1326 audit(2000000240.180:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 429.334473][ T26] audit: type=1326 audit(2000000240.180:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 429.538321][ T26] audit: type=1326 audit(2000000240.180:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 429.789459][ T26] audit: type=1326 audit(2000000240.180:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 429.937270][ T26] audit: type=1326 audit(2000000240.180:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 430.089944][ T26] audit: type=1326 audit(2000000240.180:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.9.915" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe519e159 code=0x7ffc0000 [ 430.184096][ T8608] loop7: detected capacity change from 0 to 256 [ 430.215873][ T8608] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 432.602197][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.926'. [ 434.691955][ C1] net_ratelimit: 19 callbacks suppressed [ 434.942856][ T8661] loop8: detected capacity change from 0 to 1024 [ 434.982018][ T8661] EXT4-fs (loop8): inodes count not valid: 1 vs 32 [ 435.046176][ T8666] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 435.046176][ T8666] The task syz.4.934 (8666) triggered the difference, watch for misbehavior. [ 437.074948][ T8695] loop9: detected capacity change from 0 to 736 [ 437.149205][ T8701] Cannot find add_set index 0 as target [ 439.891977][ C0] net_ratelimit: 19 callbacks suppressed [ 439.975987][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.982425][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.383936][ T8751] loop9: detected capacity change from 0 to 32768 [ 441.470973][ T8751] (syz.9.953,8751,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 441.496295][ T8751] (syz.9.953,8751,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 441.614263][ T8751] JBD2: Ignoring recovery information on journal [ 441.943434][ T8751] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 442.695927][ T4282] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 442.705127][ T4282] Bluetooth: hci2: Injecting HCI hardware error event [ 442.716164][ T4275] Bluetooth: hci2: hardware error 0x00 [ 442.737468][ T8770] loop7: detected capacity change from 0 to 32768 [ 442.752634][ T8770] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.956 (8770) [ 442.811624][ T8770] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 442.822174][ T8770] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 442.831039][ T8770] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 442.841245][ T8770] BTRFS info (device loop7): use zstd compression, level 3 [ 442.848666][ T8770] BTRFS info (device loop7): force clearing of disk cache [ 442.855976][ T8770] BTRFS info (device loop7): enabling disk space caching [ 442.863117][ T8770] BTRFS info (device loop7): disk space caching is enabled [ 442.958182][ T7560] ocfs2: Unmounting device (7,9) on (node local) [ 443.083434][ T8774] syz.3.959 (8774): drop_caches: 2 [ 443.182193][ T8770] BTRFS info (device loop7): enabling ssd optimizations [ 443.204932][ T8770] BTRFS info (device loop7): rebuilding free space tree [ 443.249287][ T8770] BTRFS info (device loop7): disabling free space tree [ 443.256599][ T8770] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 443.266814][ T8770] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 444.852088][ T4275] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 444.872871][ T6568] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 445.022239][ C1] net_ratelimit: 18 callbacks suppressed [ 445.650591][ T8818] netlink: 'syz.4.965': attribute type 4 has an invalid length. [ 446.393225][ T8830] loop8: detected capacity change from 0 to 128 [ 446.438258][ T8830] affs: No valid root block on device loop8 [ 447.640784][ T8845] xt_nat: multiple ranges no longer supported [ 450.372008][ C1] net_ratelimit: 6 callbacks suppressed [ 450.513520][ T8877] netlink: 'syz.9.975': attribute type 1 has an invalid length. [ 450.678559][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.9.975'. [ 450.714527][ T8879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.563146][ T8881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.623900][ T8881] bond1: (slave geneve2): Error -99 calling set_mac_address [ 451.907510][ T8897] loop7: detected capacity change from 0 to 512 [ 452.075313][ T8897] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 452.092290][ T8897] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.397421][ T8907] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 0 [ 453.517966][ T6568] EXT4-fs (loop7): unmounting filesystem. [ 454.140374][ T8927] loop7: detected capacity change from 0 to 8 [ 454.297489][ T8930] loop3: detected capacity change from 0 to 512 [ 454.343375][ T8930] EXT4-fs: inline encryption not supported [ 454.404198][ T8930] EXT4-fs (loop3): Test dummy encryption mode enabled [ 454.475682][ T8930] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 454.552148][ T4318] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 454.584342][ T8930] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.988: bad orphan inode 131083 [ 454.605059][ T8930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 454.755666][ T4318] usb 10-1: Using ep0 maxpacket: 16 [ 454.763314][ T4318] usb 10-1: config 0 has an invalid interface number: 98 but max is 0 [ 454.882098][ T4318] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.995551][ T8941] overlayfs: failed to clone upperpath [ 455.411936][ C0] net_ratelimit: 8 callbacks suppressed [ 455.699306][ T4318] usb 10-1: config 0 has no interface number 0 [ 455.705617][ T4318] usb 10-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 455.715616][ T4318] usb 10-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.715649][ T4318] usb 10-1: config 0 interface 98 has no altsetting 0 [ 455.773703][ T4318] usb 10-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 455.803126][ T4318] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.846760][ T4318] usb 10-1: Product: syz [ 455.851102][ T4318] usb 10-1: Manufacturer: syz [ 455.869721][ T8947] overlayfs: failed to clone upperpath [ 455.884305][ T4318] usb 10-1: SerialNumber: syz [ 456.082479][ T4318] usb 10-1: config 0 descriptor?? [ 456.090241][ T8928] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 456.099207][ T4318] asix: probe of 10-1:0.98 failed with error -22 [ 456.862146][ T14] usb 10-1: USB disconnect, device number 4 [ 457.159778][ T8967] loop8: detected capacity change from 0 to 512 [ 457.183487][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 457.183504][ T26] audit: type=1326 audit(2000000269.840:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 457.201468][ T26] audit: type=1326 audit(2000000269.840:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 457.321487][ T26] audit: type=1326 audit(2000000269.840:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 457.365297][ T8967] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 457.387366][ T8967] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.402103][ T26] audit: type=1326 audit(2000000269.840:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 457.487235][ T26] audit: type=1326 audit(2000000269.870:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 457.584026][ T8538] EXT4-fs (loop3): unmounting filesystem. [ 457.592124][ T26] audit: type=1326 audit(2000000269.870:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 457.723533][ T26] audit: type=1326 audit(2000000269.870:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 458.048169][ T26] audit: type=1326 audit(2000000269.900:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 458.072860][ T26] audit: type=1326 audit(2000000269.900:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 458.135317][ T26] audit: type=1326 audit(2000000269.900:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.7.996" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f65c759e159 code=0x7ffc0000 [ 458.523731][ T8984] netlink: 'syz.9.1000': attribute type 11 has an invalid length. [ 458.582762][ T6587] EXT4-fs (loop8): unmounting filesystem. [ 459.325063][ T9000] sctp: [Deprecated]: syz.7.1003 (pid 9000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.325063][ T9000] Use struct sctp_sack_info instead [ 461.014991][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 461.092352][ T5225] net_ratelimit: 14 callbacks suppressed [ 462.529703][ T9069] loop9: detected capacity change from 0 to 512 [ 463.635472][ T9069] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 463.738681][ T9069] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.847352][ T9080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1014'. [ 466.005712][ T7560] EXT4-fs (loop9): unmounting filesystem. [ 466.883422][ T5223] net_ratelimit: 9 callbacks suppressed [ 467.764098][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 467.827217][ T9132] Cannot find add_set index 0 as target [ 468.529252][ T9135] loop8: detected capacity change from 0 to 512 [ 470.252847][ T9135] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 470.309796][ T9135] EXT4-fs (loop8): orphan file too big: 67108874 [ 470.330073][ T9135] EXT4-fs (loop8): mount failed [ 472.354312][ T9168] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.363331][ T9168] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.372347][ T9168] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.381107][ T9168] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.382052][ C1] net_ratelimit: 9 callbacks suppressed [ 472.431225][ T9168] device vxlan0 entered promiscuous mode [ 472.440461][ T9168] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 474.184274][ T9180] ip_tables: iptables: counters copy to user failed while replacing table [ 474.288210][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 474.298744][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.306438][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.332195][ T9182] device syzkaller0 left promiscuous mode [ 474.340587][ T9182] device bond3 left promiscuous mode [ 475.329893][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 475.582277][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 475.593574][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 475.602860][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 475.612859][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 475.624111][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 475.632806][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 477.421982][ C1] net_ratelimit: 6 callbacks suppressed [ 477.712063][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 478.229434][ T9223] loop9: detected capacity change from 0 to 512 [ 478.340032][ T9188] chnl_net:caif_netlink_parms(): no params data found [ 478.359111][ T9223] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 478.408061][ T9223] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 478.441451][ T9223] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.719158][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.732209][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 479.824340][ T7560] EXT4-fs (loop9): unmounting filesystem. [ 479.840838][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.872405][ T9188] device bridge_slave_0 entered promiscuous mode [ 479.924923][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.994187][ T9250] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 480.053195][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.096213][ T9188] device bridge_slave_1 entered promiscuous mode [ 480.861248][ T9258] netlink: 'syz.4.1051': attribute type 10 has an invalid length. [ 480.898295][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.905917][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.970860][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.978131][ T9258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.985723][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.992930][ T9258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.066084][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.073460][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.355311][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'. [ 481.823783][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 482.017255][ T9259] device vlan2 left promiscuous mode [ 482.026237][ T9259] device bond0 left promiscuous mode [ 482.035930][ T9259] device macvlan2 left promiscuous mode [ 482.042508][ T9259] bridge0: port 3(vlan2) entered disabled state [ 482.055109][ T9259] device bridge_slave_1 left promiscuous mode [ 482.061408][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.079849][ T9259] device bridge_slave_0 left promiscuous mode [ 482.099466][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.240834][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.287389][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.499378][ T9188] team0: Port device team_slave_0 added [ 482.515099][ T9188] team0: Port device team_slave_1 added [ 482.582667][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.589676][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.622216][ T9188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.639701][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.649998][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.691951][ C1] net_ratelimit: 7 callbacks suppressed [ 482.715236][ T9188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.906039][ T9188] device hsr_slave_0 entered promiscuous mode [ 482.924398][ T9188] device hsr_slave_1 entered promiscuous mode [ 482.944631][ T9188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.976258][ T9188] Cannot create hsr debugfs directory [ 483.892234][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 484.397381][ T9188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 484.440764][ T9188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 484.468618][ T9188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 484.499367][ T9188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 484.711300][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.740358][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.757404][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.771633][ T9188] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.785201][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 484.795287][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.804210][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.811327][ T5228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.831289][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.841583][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.858052][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.869397][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.876629][ T5228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.893155][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.909433][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.924834][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.960157][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.978814][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.996528][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.013807][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 485.027592][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.037155][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.055713][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.065725][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.079106][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 485.444113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.451709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.467276][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.513833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.524530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.550782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.561157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.574030][ T9188] device veth0_vlan entered promiscuous mode [ 485.584253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 485.594373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 485.618955][ T9188] device veth1_vlan entered promiscuous mode [ 485.680228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 485.690339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 485.699452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 485.709770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 485.723831][ T9188] device veth0_macvtap entered promiscuous mode [ 485.738724][ T9188] device veth1_macvtap entered promiscuous mode [ 485.779637][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.788191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 485.798133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 485.807067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.817151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.833930][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.841541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.855339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.867936][ T9188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.878951][ T9188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.891726][ T9188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.916517][ T9188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.110654][ T5199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.130844][ T5199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.154870][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 486.216633][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.230940][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.239844][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 486.588988][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 488.051931][ C1] net_ratelimit: 42 callbacks suppressed [ 489.397128][ T9382] file system registered [ 489.624211][ T6587] ffs_data_put(): freeing [ 493.491963][ C0] net_ratelimit: 19 callbacks suppressed [ 493.983170][ T9436] ip_tables: iptables: counters copy to user failed while replacing table [ 499.172281][ C0] net_ratelimit: 18 callbacks suppressed [ 500.425978][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 500.464600][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 500.464615][ T26] audit: type=1326 audit(2000000313.120:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9496 comm="syz.1.1090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79f9b9e159 code=0x0 [ 500.826922][ T9495] bridge0: port 1(erspan0) entered blocking state [ 500.839448][ T9495] bridge0: port 1(erspan0) entered disabled state [ 500.848129][ T9495] device erspan0 entered promiscuous mode [ 500.982079][ T9495] bridge0: port 1(erspan0) entered blocking state [ 500.988720][ T9495] bridge0: port 1(erspan0) entered forwarding state [ 501.542617][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.549046][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.208530][ T9517] block device autoloading is deprecated and will be removed. [ 502.220302][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 502.232962][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 502.243197][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 502.255507][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 502.266867][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 503.210500][ T9531] capability: warning: `syz.9.1098' uses deprecated v2 capabilities in a way that may be insecure [ 504.419080][ T9540] fuse: Unknown parameter 'group_i' [ 504.565934][ T5199] net_ratelimit: 21 callbacks suppressed [ 505.455897][ T9564] Bluetooth: MGMT ver 1.22 [ 507.762594][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1108'. [ 507.773903][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1108'. [ 507.784097][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1108'. [ 507.794213][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1108'. [ 507.803865][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1108'. [ 508.508606][ T9585] loop1: detected capacity change from 0 to 256 [ 509.473452][ T9585] exfat: Bad value for 'fmask' [ 509.732629][ T5199] net_ratelimit: 19 callbacks suppressed [ 511.693937][ T9635] loop8: detected capacity change from 0 to 2048 [ 512.640780][ T9635] FAT-fs (loop8): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 512.676964][ T9632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.692635][ T9635] FAT-fs (loop8): Filesystem has been set read-only [ 512.795980][ T9636] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 513.525845][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 513.670807][ T9646] PKCS8: Unsupported PKCS#8 version [ 513.881771][ T9632] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 514.042161][ T8831] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 514.246612][ T8831] usb 10-1: config 0 has an invalid interface number: 11 but max is 0 [ 514.256051][ T8831] usb 10-1: config 0 has no interface number 0 [ 514.292043][ T8831] usb 10-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 514.345809][ T8831] usb 10-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 514.414777][ T8831] usb 10-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 514.444584][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.454639][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.462489][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 514.472439][ T9663] device bridge_slave_0 left promiscuous mode [ 514.478828][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.508178][ T8831] usb 10-1: config 0 interface 11 has no altsetting 0 [ 514.523306][ T8831] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 514.548742][ T8831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.577197][ T8831] usb 10-1: config 0 descriptor?? [ 514.586422][ T9663] device bridge_slave_1 left promiscuous mode [ 514.592822][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.637023][ T8831] keyspan 10-1:0.11: Keyspan 2 port adapter converter detected [ 514.662224][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 81 [ 514.675822][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 82 [ 514.692935][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 1 [ 514.719560][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 2 [ 514.759010][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 85 [ 514.803971][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 5 [ 514.910802][ T8831] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 514.969320][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 83 [ 515.003236][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 84 [ 515.069556][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 3 [ 515.334307][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 4 [ 515.342604][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 86 [ 515.350884][ T8831] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 6 [ 515.855419][ C0] net_ratelimit: 20 callbacks suppressed [ 515.931213][ T9663] bond0: (slave bond_slave_0): Releasing backup interface [ 515.961104][ T8831] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 516.113804][ T8831] usb 10-1: USB disconnect, device number 5 [ 516.517336][ T8831] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 516.559081][ T9663] bond0: (slave bond_slave_1): Releasing backup interface [ 516.986890][ T8831] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 517.008998][ T8831] keyspan 10-1:0.11: device disconnected [ 517.245290][ T9663] team0: Port device team_slave_0 removed [ 517.439743][ T9663] team0: Port device team_slave_1 removed [ 517.446659][ T9663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.454196][ T9663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.613585][ T9663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.621098][ T9663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.891290][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1138'. [ 519.054948][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.116494][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.147171][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 519.198836][ T9716] device bridge_slave_0 left promiscuous mode [ 519.229123][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.279067][ T9716] device bridge_slave_1 left promiscuous mode [ 519.326826][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.392736][ T9716] device veth0_to_bond left promiscuous mode [ 519.422605][ T9716] bridge2: port 2(veth0_to_bond) entered disabled state [ 519.483156][ T9716] bond0: (slave bond_slave_0): Releasing backup interface [ 519.521554][ T9716] bond0: (slave bond_slave_1): Releasing backup interface [ 519.786610][ T9716] team0: Port device team_slave_0 removed [ 520.860747][ T9716] team0: Port device team_slave_1 removed [ 521.158816][ T9716] bond1: (slave bridge1): Releasing backup interface [ 521.252616][ T5231] net_ratelimit: 21 callbacks suppressed [ 521.993632][ T9716] device veth3 left promiscuous mode [ 521.999194][ T9716] bridge2: port 1(veth3) entered disabled state [ 522.058664][ T9716] device veth5 left promiscuous mode [ 522.076871][ T9716] bridge2: port 3(veth5) entered disabled state [ 522.146796][ T9716] bond2: (slave geneve2): Removing an active aggregator [ 522.155059][ T9716] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 522.192465][ T5194] bond2: Warning: Found an uninitialized port [ 522.264140][ T9716] bond2: (slave geneve2): Releasing backup interface [ 522.301346][ T9716] bond2: (slave geneve2): the permanent HWaddr of slave - de:57:56:3c:26:40 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 522.461800][ T9716] bond2: (slave ip6gretap1): Removing an active aggregator [ 522.484781][ T9716] bond2: (slave ip6gretap1): Releasing backup interface [ 522.545294][ T9718] team0: Mode changed to "activebackup" [ 522.634403][ T4346] bond0 speed is unknown, defaulting to 1000 [ 522.683200][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 523.221114][ T9756] device geneve2 entered promiscuous mode [ 525.408997][ T9784] loop9: detected capacity change from 0 to 2048 [ 525.532835][ T9784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.371907][ C0] net_ratelimit: 18 callbacks suppressed [ 527.180628][ T9809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1162'. [ 527.221312][ T9810] loop9: detected capacity change from 0 to 512 [ 527.248964][ T9810] EXT4-fs: Ignoring removed oldalloc option [ 527.401369][ T9812] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1162'. [ 527.966586][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1163'. [ 527.985593][ T9812] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1162'. [ 528.258466][ T9810] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 528.680469][ T26] audit: type=1800 audit(2000000341.330:592): pid=9825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1164" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 530.736348][ T7560] EXT4-fs (loop9): unmounting filesystem. [ 531.411895][ C0] net_ratelimit: 18 callbacks suppressed [ 532.425225][ T9859] futex_wake_op: syz.1.1173 tries to shift op by 144; fix this program [ 536.451960][ C1] net_ratelimit: 11 callbacks suppressed [ 541.581896][ C0] net_ratelimit: 19 callbacks suppressed [ 541.986202][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1194'. [ 542.377346][ T9936] tipc: Enabled bearer , priority 0 [ 542.412657][ T9936] device syzkaller0 entered promiscuous mode [ 542.492950][ T9936] tipc: Resetting bearer [ 542.532994][ T9935] tipc: Resetting bearer [ 542.635964][ T9935] tipc: Disabling bearer [ 542.681639][ T9937] bond0 speed is unknown, defaulting to 1000 [ 543.135991][ T9945] loop1: detected capacity change from 0 to 1024 [ 543.494893][ T9957] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 543.504178][ T9957] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 546.266829][ T9974] loop1: detected capacity change from 0 to 2048 [ 546.326751][ T9974] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 546.411253][ T9974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.852769][ T5194] net_ratelimit: 18 callbacks suppressed [ 547.137909][ T9188] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 547.363028][ T9188] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 549.591082][T10005] device syzkaller0 entered promiscuous mode [ 550.150744][ T5199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.469210][ T5199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.483021][ T5310] net_ratelimit: 12 callbacks suppressed [ 552.991308][ T5199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.287011][T10049] device syzkaller0 entered promiscuous mode [ 553.477855][ T5199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.476854][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 554.489486][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 554.498307][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 554.507631][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 554.516135][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 554.525296][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 556.612751][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 557.768882][ C1] net_ratelimit: 14 callbacks suppressed [ 558.692081][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 561.479306][T10132] loop8: detected capacity change from 0 to 256 [ 561.487130][T10132] FAT-fs (loop8): Unrecognized mount option "shortname=winmt" or missing value [ 561.557256][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 561.721366][T10133] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 561.782850][T10130] loop8: detected capacity change from 0 to 512 [ 561.837051][T10130] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.1239: inode #1: comm syz.8.1239: iget: illegal inode # [ 561.856803][T10130] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1239: error while reading EA inode 1 err=-117 [ 561.895172][T10130] EXT4-fs (loop8): 1 orphan inode deleted [ 561.901008][T10130] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 562.082753][T10139] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6568] was attempted by " [ 562.248927][ T6587] EXT4-fs (loop8): unmounting filesystem. [ 562.329778][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1242'. [ 563.045685][T10150] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6568] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10150] [ 563.061206][ C1] net_ratelimit: 12 callbacks suppressed [ 563.070392][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.081313][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.580843][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 568.152015][ T5227] net_ratelimit: 15 callbacks suppressed [ 568.807006][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.904002][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.004995][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.040009][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.055846][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 569.066739][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.171449][T10069] bond0 speed is unknown, defaulting to 1000 [ 570.384410][T10187] bond0 speed is unknown, defaulting to 1000 [ 570.726373][T10210] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 570.735575][T10210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 571.270908][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 572.898596][T10228] futex_wake_op: syz.8.1264 tries to shift op by 144; fix this program [ 572.919595][T10228] syz.8.1264 sent an empty control message without MSG_MORE. [ 573.332066][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 573.518687][T10241] MPTCP: kernel_bind error, err=-99 [ 573.630243][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1266'. [ 573.740854][ T5228] net_ratelimit: 13 callbacks suppressed [ 575.411946][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 575.790015][T10069] chnl_net:caif_netlink_parms(): no params data found [ 576.420508][T10187] chnl_net:caif_netlink_parms(): no params data found [ 576.936360][T10278] No such timeout policy "syz1" [ 577.541887][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 578.044647][T10289] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 578.053890][T10289] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 578.760944][T10069] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.790011][T10069] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.811133][T10069] device bridge_slave_0 entered promiscuous mode [ 578.956359][ T5201] net_ratelimit: 12 callbacks suppressed [ 579.773905][T10069] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.145296][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.359418][T10069] device bridge_slave_1 entered promiscuous mode [ 581.080774][ T5199] device hsr_slave_0 left promiscuous mode [ 581.169046][ T5199] device hsr_slave_1 left promiscuous mode [ 581.372596][ T5199] device veth1_macvtap left promiscuous mode [ 581.381449][ T5199] device veth0_macvtap left promiscuous mode [ 581.422777][ T5199] device veth1_vlan left promiscuous mode [ 581.471267][ T5199] device veth0_vlan left promiscuous mode [ 583.974805][ T5223] net_ratelimit: 15 callbacks suppressed [ 586.060496][T10339] loop8: detected capacity change from 0 to 512 [ 586.115721][T10339] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 586.125521][T10339] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.340208][ T6587] EXT4-fs (loop8): unmounting filesystem. [ 589.501907][ C1] net_ratelimit: 5 callbacks suppressed [ 590.532508][ T5199] bond0 (unregistering): Released all slaves [ 590.784169][T10325] tipc: Enabled bearer , priority 0 [ 590.850105][T10187] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.857518][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.867410][T10187] device bridge_slave_0 entered promiscuous mode [ 590.934029][T10187] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.952766][T10187] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.965285][T10187] device bridge_slave_1 entered promiscuous mode [ 591.088167][T10358] futex_wake_op: syz.8.1288 tries to shift op by 144; fix this program [ 591.195367][T10069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.226592][T10187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.258393][T10069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.307623][T10187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.436514][T10366] futex_wake_op: syz.7.1298 tries to shift op by 144; fix this program [ 591.691284][T10069] team0: Port device team_slave_0 added [ 591.735124][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1290'. [ 591.958711][T10187] team0: Port device team_slave_0 added [ 592.000744][T10069] team0: Port device team_slave_1 added [ 592.118936][T10187] team0: Port device team_slave_1 added [ 592.330673][T10069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.342033][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.503076][T10069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.554791][T10187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.565787][T10187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.675836][T10187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.696693][T10069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.705283][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.771796][T10069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.812745][T10187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.819761][T10187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.889416][T10388] futex_wake_op: syz.4.1293 tries to shift op by 144; fix this program [ 592.897900][T10187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.240420][T10069] device hsr_slave_0 entered promiscuous mode [ 593.290700][T10069] device hsr_slave_1 entered promiscuous mode [ 593.319027][T10069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.344649][T10069] Cannot create hsr debugfs directory [ 593.468034][T10187] device hsr_slave_0 entered promiscuous mode [ 593.647260][T10187] device hsr_slave_1 entered promiscuous mode [ 593.776953][T10187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.896164][T10187] Cannot create hsr debugfs directory [ 594.989361][T10413] net_ratelimit: 6 callbacks suppressed [ 594.989372][T10413] IPVS: dh: FWM 3 0x00000003 - no destination available [ 597.791009][T10417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.920252][T10417] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.034642][T10417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 598.145504][T10435] nftables ruleset with unbound set [ 598.827705][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 600.587355][T10458] overlayfs: failed to clone lowerpath [ 601.102062][ C1] net_ratelimit: 7 callbacks suppressed [ 602.058135][T10477] loop8: detected capacity change from 0 to 512 [ 602.068876][T10477] EXT4-fs: Ignoring removed nobh option [ 602.969306][T10477] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1312: invalid indirect mapped block 256 (level 2) [ 602.991433][T10477] EXT4-fs (loop8): 2 truncates cleaned up [ 602.997333][T10477] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 603.269324][ T6587] EXT4-fs (loop8): unmounting filesystem. [ 603.333211][T10486] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 603.803428][T10495] bond6: (slave bridge1): making interface the new active one [ 604.200234][T10495] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 607.353913][ T5194] net_ratelimit: 7 callbacks suppressed [ 608.646252][T10542] loop8: detected capacity change from 0 to 256 [ 608.676351][T10542] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 609.600791][ T5199] device hsr_slave_0 left promiscuous mode [ 609.619825][ T5199] device hsr_slave_1 left promiscuous mode [ 609.628436][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.641778][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.650895][ T5199] device bridge_slave_1 left promiscuous mode [ 609.657573][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.666733][ T5199] device bridge_slave_0 left promiscuous mode [ 609.673136][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.891282][ T5199] bond1 (unregistering): Released all slaves [ 610.830153][ T5199] team0 (unregistering): Port device team_slave_1 removed [ 610.959165][ T5199] team0 (unregistering): Port device team_slave_0 removed [ 611.020789][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.039753][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.050808][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.069793][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.079176][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 611.101175][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.113121][ T5199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.205492][ T5199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.851619][ T5199] bond0 (unregistering): Released all slaves [ 612.397399][T10544] bond0 speed is unknown, defaulting to 1000 [ 612.773340][ T4347] net_ratelimit: 3 callbacks suppressed [ 612.829348][T10187] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 612.927537][T10187] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 612.955962][T10187] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 612.974062][T10187] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 613.262254][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 613.382021][T10544] chnl_net:caif_netlink_parms(): no params data found [ 613.430760][T10187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.578754][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 613.591016][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 613.616706][T10187] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.702786][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 613.729768][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 613.765793][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.773014][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.803795][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 613.838060][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 613.851269][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.858480][ T5201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.884565][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 613.996745][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 614.008431][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 614.018090][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 614.033804][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 614.043069][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 614.052994][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 614.069345][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 614.078459][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 614.087522][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 614.124467][T10187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.152917][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.209711][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 614.234662][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 614.332178][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.339374][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.356016][T10544] device bridge_slave_0 entered promiscuous mode [ 614.379213][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.388903][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.399239][T10544] device bridge_slave_1 entered promiscuous mode [ 614.589287][T10544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.638535][T10544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.784718][T10544] team0: Port device team_slave_0 added [ 614.803225][T10544] team0: Port device team_slave_1 added [ 614.854815][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.870827][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.886119][T10187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.960197][T10544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.977021][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.003737][T10544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.046874][T10544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.054882][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.081415][T10544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.269045][T10544] device hsr_slave_0 entered promiscuous mode [ 615.297341][T10544] device hsr_slave_1 entered promiscuous mode [ 615.317364][T10544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.332315][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 615.339203][T10544] Cannot create hsr debugfs directory [ 616.156589][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.169622][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.244319][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 616.269569][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.294592][T10187] device veth0_vlan entered promiscuous mode [ 616.302817][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.311054][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.369734][ T5199] device hsr_slave_0 left promiscuous mode [ 616.381395][ T5199] device hsr_slave_1 left promiscuous mode [ 616.405732][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.424050][ T5199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.442839][ T5199] device bridge_slave_1 left promiscuous mode [ 616.449187][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.461665][ T5199] device bridge_slave_0 left promiscuous mode [ 616.468295][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.074599][ T5199] team0 (unregistering): Port device team_slave_1 removed [ 617.158488][ T5199] team0 (unregistering): Port device team_slave_0 removed [ 617.251471][ T5199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.332085][ T5199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.422164][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 617.747641][ T5199] bond0 (unregistering): Released all slaves [ 617.812863][ T5201] net_ratelimit: 1 callbacks suppressed [ 617.864914][T10187] device veth1_vlan entered promiscuous mode [ 617.980286][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 617.995482][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.023756][T10187] device veth0_macvtap entered promiscuous mode [ 618.060680][T10187] device veth1_macvtap entered promiscuous mode [ 618.134891][T10187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.173147][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 618.181516][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 618.196450][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 618.209370][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 618.234069][T10187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.250705][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 618.279371][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 618.306419][T10187] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.329163][T10187] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.339816][T10187] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.348680][T10187] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.597164][T10544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 618.652504][T10544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 618.719301][T10544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 618.761618][ T8056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.763517][T10544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 618.803032][ T8056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.842338][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 618.972834][ T5199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.980730][ T5199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.025294][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 619.198050][T10544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.503545][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 620.608148][T10544] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.672469][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 620.682720][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 620.954037][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 620.976107][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 621.071725][T10629] loop6: detected capacity change from 0 to 512 [ 621.083553][T10629] EXT4-fs: Ignoring removed nobh option [ 621.553970][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.561261][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.786287][T10629] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1326: invalid indirect mapped block 256 (level 2) [ 621.800622][T10629] EXT4-fs (loop6): 2 truncates cleaned up [ 621.806581][T10629] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 621.846865][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 621.902752][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 621.935954][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.943242][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.107387][T10187] EXT4-fs (loop6): unmounting filesystem. [ 622.124379][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.155407][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.197064][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.274080][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.323454][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.373084][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.417577][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.573198][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.657003][T10544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.699160][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.936623][ C0] net_ratelimit: 40 callbacks suppressed [ 623.095507][T10643] tipc: Enabling of bearer rejected, failed to enable media [ 623.225750][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.332337][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.341015][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.350921][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 624.294854][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.301377][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.017455][T10684] loop8: detected capacity change from 0 to 512 [ 626.092389][T10684] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.1340: missing EA_INODE flag [ 626.121300][T10684] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1340: error while reading EA inode 2 err=-117 [ 626.141348][T10684] EXT4-fs (loop8): 1 orphan inode deleted [ 626.147385][T10684] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 627.069619][ T6587] EXT4-fs (loop8): unmounting filesystem. [ 627.180445][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 627.212824][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 627.254017][T10544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.051910][ C0] net_ratelimit: 35 callbacks suppressed [ 628.352927][T10716] netlink: 'syz.4.1346': attribute type 4 has an invalid length. [ 628.687655][T10723] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1347'. [ 629.257270][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 629.275604][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.306809][T10731] device syzkaller0 entered promiscuous mode [ 629.346975][T10731] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1349'. [ 629.379121][T10544] device veth0_vlan entered promiscuous mode [ 629.397002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 629.410159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.623123][T10544] device veth1_vlan entered promiscuous mode [ 629.653364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.669354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 629.692837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 629.802097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 629.812181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 629.864759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 629.938549][T10544] device veth0_macvtap entered promiscuous mode [ 630.865098][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 631.007101][T10544] device veth1_macvtap entered promiscuous mode [ 631.085013][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.141112][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.266947][T10544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.346241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 631.404465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 631.899659][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 631.910927][ T4282] CPU: 1 PID: 4282 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 631.918552][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 631.928657][ T4282] Workqueue: hci5 hci_rx_work [ 631.933411][ T4282] Call Trace: [ 631.936734][ T4282] [ 631.939715][ T4282] dump_stack_lvl+0x188/0x24e [ 631.944467][ T4282] ? show_regs_print_info+0x12/0x12 [ 631.949812][ T4282] ? load_image+0x410/0x410 [ 631.954389][ T4282] sysfs_create_dir_ns+0x26a/0x290 [ 631.959649][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 631.964392][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 631.969765][ T4282] kobject_add_internal+0x617/0xca0 [ 631.975037][ T4282] kobject_add+0x160/0x230 [ 631.979522][ T4282] ? kobject_init+0x1c0/0x1c0 [ 631.984279][ T4282] ? __raw_spin_lock_init+0x41/0x100 [ 631.989652][ T4282] ? klist_children_get+0x50/0x50 [ 631.994810][ T4282] ? get_device_parent+0x121/0x3e0 [ 631.999997][ T4282] device_add+0x470/0x1050 [ 632.004484][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 632.009482][ T4282] le_conn_complete_evt+0xf93/0x15c0 [ 632.014844][ T4282] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 632.021159][ T4282] ? param_get_dyndbg_classes+0x160/0x160 [ 632.027066][ T4282] ? mutex_unlock+0x10/0x10 [ 632.031627][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 632.037246][ T4282] ? hci_remote_host_features_evt+0x230/0x230 [ 632.043410][ T4282] hci_event_packet+0x7b3/0x1290 [ 632.048416][ T4282] ? lock_chain_count+0x20/0x20 [ 632.053357][ T4282] ? bis_list+0x280/0x280 [ 632.057768][ T4282] ? lockdep_hardirqs_on+0x94/0x140 [ 632.063036][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 632.068303][ T4282] hci_rx_work+0x3eb/0xd40 [ 632.072793][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 632.077733][ T4282] ? process_one_work+0x7b4/0x1160 [ 632.082980][ T4282] process_one_work+0x8ab/0x1160 [ 632.087994][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 632.093689][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 632.098782][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 632.104393][ T4282] ? wq_worker_running+0x97/0x190 [ 632.109493][ T4282] worker_thread+0xaf5/0x12a0 [ 632.114254][ T4282] kthread+0x29d/0x330 [ 632.118442][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 632.123558][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 632.128195][ T4282] ret_from_fork+0x1f/0x30 [ 632.132776][ T4282] [ 632.154633][T10759] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 632.182339][ T4282] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 632.196027][ T4282] Bluetooth: hci5: failed to register connection device [ 632.292065][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.388019][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.491711][T10544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.585425][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.623593][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.849675][T10544] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.924165][T10544] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.008867][T10544] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.017770][T10544] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.064853][T10544] net_ratelimit: 15 callbacks suppressed [ 633.202252][T10779] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 633.402706][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.421187][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.225522][ T26] audit: type=1800 audit(2000000446.880:593): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1358" name="bus" dev="ramfs" ino=59292 res=0 errno=0 [ 634.525004][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 635.448091][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.468432][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.655506][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 638.386642][ C0] net_ratelimit: 43 callbacks suppressed [ 638.478826][ T26] audit: type=1326 audit(2000000451.130:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 638.518232][T10816] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 638.544529][T10818] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 638.617869][ T26] audit: type=1326 audit(2000000451.130:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 638.618198][T10822] netlink: 'syz.6.1370': attribute type 1 has an invalid length. [ 638.808923][T10822] device bridge1 entered promiscuous mode [ 638.817752][ T26] audit: type=1326 audit(2000000451.160:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 638.843423][T10827] IPVS: set_ctl: invalid protocol: 137 172.30.0.9:20001 [ 638.950670][ T26] audit: type=1326 audit(2000000451.160:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 639.162060][ T26] audit: type=1326 audit(2000000451.160:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 640.136098][ T26] audit: type=1326 audit(2000000451.160:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 640.227934][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 641.043318][ T26] audit: type=1326 audit(2000000451.190:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 641.068306][ T26] audit: type=1326 audit(2000000451.190:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 641.108520][ T26] audit: type=1326 audit(2000000451.190:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 641.140504][ T26] audit: type=1326 audit(2000000451.190:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 641.212194][ T26] audit: type=1326 audit(2000000451.190:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 641.342133][ T26] audit: type=1326 audit(2000000451.190:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 642.390649][ T26] audit: type=1326 audit(2000000451.190:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 642.528437][ T26] audit: type=1326 audit(2000000451.190:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 642.818186][T10865] loop8: detected capacity change from 0 to 128 [ 643.264156][ T26] audit: type=1326 audit(2000000451.190:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9599e159 code=0x7ffc0000 [ 643.491862][ C0] net_ratelimit: 47 callbacks suppressed [ 644.394932][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.404452][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.492221][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 645.752746][T10888] overlayfs: failed to clone upperpath [ 646.501553][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1383'. [ 646.510715][T10886] bond0: option resend_igmp: invalid value (18446744072707910257) [ 646.520869][T10886] bond0: option resend_igmp: allowed values 0 - 255 [ 646.657403][T10890] ------------[ cut here ]------------ [ 646.664116][T10890] WARNING: CPU: 0 PID: 10890 at net/mac80211/iface.c:532 ieee80211_do_stop+0x1b14/0x2020 [ 646.674084][T10890] Modules linked in: [ 646.678032][T10890] [ 646.680381][T10890] CPU: 0 PID: 10890 Comm: syz.8.1384 Not tainted syzkaller #0 [ 646.687973][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.698209][T10890] RIP: 0010:ieee80211_do_stop+0x1b14/0x2020 [ 646.704202][T10890] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 d2 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7c 3f d5 f7 <0f> 0b e9 11 e9 ff ff e8 70 3f d5 f7 48 c7 c7 00 fd a6 8b 89 de e8 [ 646.723956][T10890] RSP: 0018:ffffc90003aff660 EFLAGS: 00010287 [ 646.730072][T10890] RAX: ffffffff89acf364 RBX: 0000000000000001 RCX: 0000000000080000 [ 646.730094][T10890] RDX: ffffc9001f5f8000 RSI: 000000000001b9c8 RDI: 000000000001b9c9 [ 646.730112][T10890] RBP: ffffc90003aff848 R08: ffffc90003aff507 R09: 1ffff9200075fea0 [ 646.730128][T10890] R10: dffffc0000000000 R11: fffff5200075fea1 R12: ffffc90003aff7b0 [ 646.738578][T10890] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88807922a760 [ 646.754931][T10890] FS: 00007fc3033c66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 646.754959][T10890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.754976][T10890] CR2: 0000001b2e623ffc CR3: 00000000291a4000 CR4: 00000000003506f0 [ 646.754996][T10890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 646.765001][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fff3c00: rx timeout, send abort [ 646.771639][T10890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 646.771662][T10890] Call Trace: [ 646.771673][T10890] [ 646.771685][T10890] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 646.781058][T10890] ? rcu_is_watching+0x11/0xa0 [ 646.795941][T10890] ? __mutex_lock+0x1ab/0xae0 [ 646.795976][T10890] ? ieee80211_sdata_stop+0x80/0x80 [ 646.847601][T10890] ? mutex_lock_nested+0x10/0x10 [ 646.852650][T10890] ? __local_bh_enable_ip+0x136/0x1c0 [ 646.858095][T10890] ? dev_deactivate_many+0xb49/0xcd0 [ 646.863506][T10890] ieee80211_stop+0x41f/0x490 [ 646.868271][T10890] ? dev_deactivate_many+0x242/0xcd0 [ 646.873682][T10890] ? ieee80211_open+0x200/0x200 [ 646.878598][T10890] __dev_close_many+0x1d1/0x2b0 [ 646.883570][T10890] ? dev_close_many+0x400/0x400 [ 646.888491][T10890] __dev_change_flags+0x2c9/0x6a0 [ 646.893645][T10890] ? dev_get_flags+0x1c0/0x1c0 [ 646.898492][T10890] dev_change_flags+0x78/0x1a0 [ 646.903390][T10890] devinet_ioctl+0x84f/0x1bf0 [ 646.908152][T10890] inet_ioctl+0x2fa/0x460 [ 646.912626][T10890] ? inet_shutdown+0x370/0x370 [ 646.917460][T10890] ? slab_free_freelist_hook+0x133/0x1b0 [ 646.923330][T10890] ? tomoyo_path_number_perm+0x4fb/0x650 [ 646.929183][T10890] ? __kmem_cache_free+0xb6/0x200 [ 646.934332][T10890] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 646.940038][T10890] sock_do_ioctl+0xfb/0x320 [ 646.944696][T10890] ? sock_show_fdinfo+0xb0/0xb0 [ 646.949631][T10890] sock_ioctl+0x48a/0x700 [ 646.954261][T10890] ? sock_poll+0x420/0x420 [ 646.958747][T10890] ? bpf_lsm_file_ioctl+0x5/0x10 [ 646.963938][T10890] ? security_file_ioctl+0x7c/0xa0 [ 646.969172][T10890] ? sock_poll+0x420/0x420 [ 646.973726][T10890] __se_sys_ioctl+0xfa/0x170 [ 646.978550][T10890] do_syscall_64+0x4c/0xa0 [ 646.983070][T10890] ? clear_bhb_loop+0x60/0xb0 [ 646.987807][T10890] ? clear_bhb_loop+0x60/0xb0 [ 646.992591][T10890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.998554][T10890] RIP: 0033:0x7fc30259e159 [ 647.003076][T10890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.022790][T10890] RSP: 002b:00007fc3033c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.031394][T10890] RAX: ffffffffffffffda RBX: 00007fc302825fa0 RCX: 00007fc30259e159 [ 647.039472][T10890] RDX: 0000200000000300 RSI: 0000000000008914 RDI: 0000000000000004 [ 647.047591][T10890] RBP: 00007fc30263506b R08: 0000000000000000 R09: 0000000000000000 [ 647.055657][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.063712][T10890] R13: 00007fc302826038 R14: 00007fc302825fa0 R15: 00007fff9a513878 [ 647.071754][T10890] [ 647.074892][T10890] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 647.082206][T10890] CPU: 0 PID: 10890 Comm: syz.8.1384 Not tainted syzkaller #0 [ 647.089704][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.099835][T10890] Call Trace: [ 647.103154][T10890] [ 647.106123][T10890] dump_stack_lvl+0x188/0x24e [ 647.110850][T10890] ? memcpy+0x3c/0x60 [ 647.114879][T10890] ? show_regs_print_info+0x12/0x12 [ 647.120139][T10890] ? load_image+0x410/0x410 [ 647.124709][T10890] panic+0x2d3/0x710 [ 647.128663][T10890] ? bpf_jit_dump+0xd0/0xd0 [ 647.133233][T10890] __warn+0x2f8/0x4f0 [ 647.137265][T10890] ? ieee80211_do_stop+0x1b14/0x2020 [ 647.142604][T10890] ? ieee80211_do_stop+0x1b14/0x2020 [ 647.147945][T10890] report_bug+0x2ba/0x4f0 [ 647.152325][T10890] ? ieee80211_do_stop+0x1b14/0x2020 [ 647.157666][T10890] handle_bug+0x3a/0x70 [ 647.161874][T10890] exc_invalid_op+0x16/0x40 [ 647.166442][T10890] asm_exc_invalid_op+0x16/0x20 [ 647.171342][T10890] RIP: 0010:ieee80211_do_stop+0x1b14/0x2020 [ 647.177288][T10890] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 d2 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7c 3f d5 f7 <0f> 0b e9 11 e9 ff ff e8 70 3f d5 f7 48 c7 c7 00 fd a6 8b 89 de e8 [ 647.180926][ C1] nf_conntrack: normal packet for ffff888073a82300 [ 647.181008][ C1] tcp_conntracks: [ 647.181030][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 647.181338][ C1] No more buffers in queue [ 647.181369][ C1] eth0: xmit ffff8880785f8af0 42:01:0a:80:00:01 [ 647.181433][ C1] Added buffer head 7 to ffff888025a5bc00 [ 647.181472][ C1] virtqueue callback for ffff888025a5bc00 (ffffffff858a0ee0) [ 647.184781][ C1] Sent skb ffff8880785f8af0 [ 647.184889][ C1] No more buffers in queue [ 647.243728][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fff0c00: rx timeout, send abort [ 647.253511][T10890] RSP: 0018:ffffc90003aff660 EFLAGS: 00010287 [ 647.259639][T10890] RAX: ffffffff89acf364 RBX: 0000000000000001 RCX: 0000000000080000 [ 647.267654][T10890] RDX: ffffc9001f5f8000 RSI: 000000000001b9c8 RDI: 000000000001b9c9 [ 647.275674][T10890] RBP: ffffc90003aff848 R08: ffffc90003aff507 R09: 1ffff9200075fea0 [ 647.276404][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fff3c00: abort rx timeout. Force session deactivation [ 647.276863][ C1] vcan0: j1939_session_activate: 0xffff88802f8a8800 [ 647.283816][ C1] vcan0: j1939_session_destroy: 0xffff88802fff3c00 [ 647.306857][T10890] R10: dffffc0000000000 R11: fffff5200075fea1 R12: ffffc90003aff7b0 [ 647.314877][T10890] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88807922a760 [ 647.322901][T10890] ? ieee80211_do_stop+0x1b14/0x2020 [ 647.328246][T10890] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 647.334280][T10890] ? rcu_is_watching+0x11/0xa0 [ 647.339104][T10890] ? __mutex_lock+0x1ab/0xae0 [ 647.343827][T10890] ? ieee80211_sdata_stop+0x80/0x80 [ 647.349081][T10890] ? mutex_lock_nested+0x10/0x10 [ 647.354085][T10890] ? __local_bh_enable_ip+0x136/0x1c0 [ 647.359511][T10890] ? dev_deactivate_many+0xb49/0xcd0 [ 647.364852][T10890] ieee80211_stop+0x41f/0x490 [ 647.369578][T10890] ? dev_deactivate_many+0x242/0xcd0 [ 647.374911][T10890] ? ieee80211_open+0x200/0x200 [ 647.379828][T10890] __dev_close_many+0x1d1/0x2b0 [ 647.384729][T10890] ? dev_close_many+0x400/0x400 [ 647.389673][T10890] __dev_change_flags+0x2c9/0x6a0 [ 647.394765][T10890] ? dev_get_flags+0x1c0/0x1c0 [ 647.399594][T10890] dev_change_flags+0x78/0x1a0 [ 647.404417][T10890] devinet_ioctl+0x84f/0x1bf0 [ 647.409157][T10890] inet_ioctl+0x2fa/0x460 [ 647.413530][T10890] ? inet_shutdown+0x370/0x370 [ 647.418332][T10890] ? slab_free_freelist_hook+0x133/0x1b0 [ 647.424011][T10890] ? tomoyo_path_number_perm+0x4fb/0x650 [ 647.429718][T10890] ? __kmem_cache_free+0xb6/0x200 [ 647.434792][T10890] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 647.440307][T10890] sock_do_ioctl+0xfb/0x320 [ 647.444858][T10890] ? sock_show_fdinfo+0xb0/0xb0 [ 647.449768][T10890] sock_ioctl+0x48a/0x700 [ 647.454145][T10890] ? sock_poll+0x420/0x420 [ 647.458646][T10890] ? bpf_lsm_file_ioctl+0x5/0x10 [ 647.463635][T10890] ? security_file_ioctl+0x7c/0xa0 [ 647.468796][T10890] ? sock_poll+0x420/0x420 [ 647.473265][T10890] __se_sys_ioctl+0xfa/0x170 [ 647.477911][T10890] do_syscall_64+0x4c/0xa0 [ 647.482382][T10890] ? clear_bhb_loop+0x60/0xb0 [ 647.487108][T10890] ? clear_bhb_loop+0x60/0xb0 [ 647.491827][T10890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.497782][T10890] RIP: 0033:0x7fc30259e159 [ 647.502243][T10890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.521999][T10890] RSP: 002b:00007fc3033c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.530491][T10890] RAX: ffffffffffffffda RBX: 00007fc302825fa0 RCX: 00007fc30259e159 [ 647.538521][T10890] RDX: 0000200000000300 RSI: 0000000000008914 RDI: 0000000000000004 [ 647.546588][T10890] RBP: 00007fc30263506b R08: 0000000000000000 R09: 0000000000000000 [ 647.554639][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.562696][T10890] R13: 00007fc302826038 R14: 00007fc302825fa0 R15: 00007fff9a513878 [ 647.570745][T10890] [ 647.574422][T10890] Kernel Offset: disabled [ 647.578933][T10890] Rebooting in 86400 seconds..