last executing test programs: 22m53.314338944s ago: executing program 32 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="270302", 0x3}], 0x1}, 0x5) 22m49.479244836s ago: executing program 33 (id=122): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0xffffffffffffff76, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000, 0x270c0}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x400c0) 22m44.597664135s ago: executing program 34 (id=128): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$unix(0x1, 0x3, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r4}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x40, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 21m5.942694432s ago: executing program 35 (id=254): socket(0x23, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$fb0(0xffffffffffffff9c, 0x0, 0x482, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x2) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000400)=""/204, 0xcc}], 0x2) 20m19.935622227s ago: executing program 36 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19m51.816955021s ago: executing program 37 (id=322): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$pagemap(r0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) munlock(&(0x7f00002ca000/0x12000)=nil, 0x12000) 19m11.574711983s ago: executing program 38 (id=366): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x7000000, &(0x7f0000001580)="ce"}) 19m2.64171112s ago: executing program 39 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x40080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 16m25.765138315s ago: executing program 40 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0x8}, {0x10, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15m43.067657632s ago: executing program 41 (id=641): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x780}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0x20000}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x28dd, @loopback}, 0x1c) bind$alg(r1, 0x0, 0x0) r4 = accept$alg(r1, 0x0, 0x0) dup(r4) setsockopt(r4, 0x1, 0x7, &(0x7f0000000040)="c04b", 0x2) 15m37.294864494s ago: executing program 42 (id=651): r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)="28217e5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c", 0x60) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffd3) 14m26.181010216s ago: executing program 43 (id=737): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, 0x2a6}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x1000000, 0x10}}}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 14m23.526281343s ago: executing program 44 (id=739): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000002680)={0x20080522}, 0x0) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000240)={[{@flock_local}, {@dyn}]}) 14m8.353443539s ago: executing program 45 (id=764): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x9, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{0x0}], 0x1}, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x30303600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40283) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000140)=ANY=[]) 12m11.957973896s ago: executing program 46 (id=924): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 11m24.255210727s ago: executing program 47 (id=976): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) r3 = syz_pidfd_open(0x0, 0x0) process_madvise(r3, 0x0, 0x0, 0x13, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 10m19.569250917s ago: executing program 48 (id=1066): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000f00)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000001100)="0200"/96, 0x60) write(0xffffffffffffffff, &(0x7f0000001300)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r1, &(0x7f0000001500), 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) 10m7.649861359s ago: executing program 49 (id=1082): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) removexattr(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x100) 7m56.058380011s ago: executing program 50 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) 7m12.038343033s ago: executing program 7 (id=1407): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000280)='ufs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) poll(0x0, 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x88282, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7m9.916738239s ago: executing program 7 (id=1411): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 7m0.717471191s ago: executing program 7 (id=1425): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m57.481845512s ago: executing program 7 (id=1431): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6m56.901457207s ago: executing program 7 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') fanotify_mark(0xffffffffffffffff, 0x1, 0x8000039, r4, 0x0) io_setup(0x9, &(0x7f0000000180)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0x5eaa) syz_open_pts(r5, 0x0) 6m54.391630622s ago: executing program 7 (id=1438): r0 = socket(0x840000000002, 0x3, 0xfa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108) write(r3, &(0x7f0000000000), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_io_uring_setup(0x1098, 0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) 6m42.50534768s ago: executing program 5 (id=1457): socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x110, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockopt$inet_buf(r3, 0x0, 0x27, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) 6m39.070209225s ago: executing program 51 (id=1438): r0 = socket(0x840000000002, 0x3, 0xfa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108) write(r3, &(0x7f0000000000), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_io_uring_setup(0x1098, 0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) 6m39.043137228s ago: executing program 5 (id=1460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 6m35.348156517s ago: executing program 5 (id=1464): socket$rds(0x15, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x133863f09d132b05, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x7d7f, 0x0, 0xfffffffe, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x40, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6m28.432977204s ago: executing program 5 (id=1471): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000280)='ufs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) poll(0x0, 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x88282, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6m18.683108135s ago: executing program 5 (id=1485): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa2c01, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="03a30aa8", 0x4}], 0x1) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="f1737118458723aa6fad9674b336ce0f0e4f9a590af9cbc892ffaeebd2c1911812584b169f9691cb3843c1544afa9da08dc0efe3e6714bb529f3285f9633156f21460f0b19504f21e4202650e68b3cd97a3824ce159744f16e07623a38f6077b995bb70ca4e6ee313fbd9937f0a8cd1043a853b5ec18a6add5500124870643635a47134d5f346d2ce498528b289030d689ee4f1933955547d7a1a02c16d1323328f83c6e39efa19b3a4e8e2acb7d446ec70955b9c122a881df65114e309ed9605225a19a07f6df3a52599aa974975a7598fd5d8977a4083422a83d795e95efd11e78201892c1a667576f54faa2b090f363c5c6c58d64e62332e935aeeebdf0a580617d12f4dd957d13d21eafc3987ae43c0bdb0571c290227757115432768af7581cfa8bd90a2f0c85aa43e6e7496a6a1d16636eb153961195e194707bfcced6b31cda93d1d82824bdcba11ce636211e6a2d8fd8b49abcf68e35d4b5b2be9e08570d89896359bbe3fd3fd8df8d37d6f34009635b6f14922e0e13938f591e5dfd3ee64a13d1010109afaba564256699f40d4af9acb29f57cafe956852787e5b1dc0c6dc61314cb51346926eb41a252a2a44066fb7c38772c55f0caff0da346821b1efe13669272b084972ca5eaa678896bbbd2194429e310ce954cf3de048ecf8843b82acb61bf7d1760cda8f0f8d781f207c0b81c655b52c41e8b2070a7ef45a8e1ac0070709f837b2b78ecb7c50332f1ed5c1f9a369548629b0f10457a7ea478168fed1f0c261921e19ac478eb8e9f703fb6096925b3bfa6d3d60bf712220ea5f5a6e9c33ecf653f40849eb4610ed32c7d3ee443aaa6aed33dc590d8133e71391dc45d560d7442ba325aa88eb81cdad58f16794832f214de3ac2aaba11e4fe94b8c2002f101e0ca72cf67de89f6beeabe2eca30841cb62bfcd70b3c973bd6bb3b1d5612fd02c03bea24e54edeb558d656e494f2f9753e241ba8cca7ab22a0c386fb13139db2b8b182f9449f98a745abca05a5ce4f0fd500584a975264eecae3decf0b81c9b0cb16a53be0f7cd101e75e6d355b6410c62ce731739f06141c1a0185dea457167f1f07acf137d854eedbb63e3d4812aaf8bd89dc405be6a55b08555bf6fc8f082a3a6dfc359669bb11c8245def27675f9f7843b5b930bdc7e8a086f2313f35739c29369c1380370021583af2620fc001a0f283d2ab738a936b56d9444e5e321d0277ec0528c1ca6fc17241f6de1b797f0f9bc83b47addff767926ca527d409eb23ba7f8269212f40b886d00affad255871275ac0640e2db57cd710798c29b09ac4074f69df4f172b95941e8caf60aacb9f84f71bfd9980c7dbdb0e3e06ef74bb4593b63f38859de8215e1cdea56832830e1c6c416889dbdf5a58492151876cf501884abfdafbdb8fde2d82dd77cbd20207ac9ab0d8e5976292ede3bc3358703f720a960e1cc53158b6c05a68815aecce32d51fc2abfedb2ed709eaa45193da955b7d44b6722af26f3ec6c437653b267218f8cfbaf013aae88a9a0bec88aa9916cca6e9115eaa299549eaa847ba5d9490c65037c1cc94281645ca39d6f2d2706f952c1e0cbf53389dc66d442553e894c7656512eb157e3c39144988c1e3ed27af98318d630fc0896e96d7d212ae80f9bdaaca8e558e6033414f5e8c86e4b2ebe4cdb077ef6f286f3c98a9545f5dcfd46739a745150ab762459cceb1d2e9f56e2f1e59c741c47c519da2a15a14b75f1266d023ce78e9e29782e6b616deeec488408fa53962bf412937bdf63b25c469c92867b145cb73a46f88fb81df683e979bfe15b65ed905b6c0eceff85c3d0b52efd411b3b512d897775b64ff301ba9cb2618595af4a40c95795f8993aa34f13684d7e56101fe2b9869df1d6ca3c4ef81c62323734c8dba6cf4bccfd9074147ecbb5f43b3e85cb064ce45af5b6086fc016413afce0d38f9a4e916e1fc08772f158d791d1ef86e58a60893962bb93b21e2e0cf01c35158718f395df1489767e94b4cb717dbe73693cd98620f1dda1351e40495e6d166a1d5b56054a97a40ee86b4b48cd751831352e9bbda8361eda2bd9fecd6df15ac7dd6c51723c7eeb58ffe63746dcae6851eef9473b9200f4681f8b14a36215fb6279a19335009c6b1068c042d0977ea75ad60ed06961ede6fc74f84f49d3fb72b251a8acff52d0a1e8ec8e9632b831cd24c62867eacb7ee36532c801e3567d7f2fda8768f98b981ddd583dc4e3424c59c6d2de874d3a7c2b4fbcc6e3b96503020ecea0728480ca04a2b90b183ddcfbe34156341df97aab3953aa9b81c3d69d9b20511e1cd850609b3f1d1e8dfa6e8bf90a927d4d3b010dca06a1b09aad8f661c56a895b15375a6a532e76486509b7c17e516c2c67b3f80d3510127252096df0fd45e0cd62d24cb7658460f674dae61e932335fddba62ee35143c1071459a8f55e42768b777237d797418b5267423bf1f0c1fc130e2b7d40a0997d26030c9f485994df68f30a910221f502f26ee500bfa54487dd6a82ae964da5b967e8eab9ffc9d4d5d0199f4f633dcd9713ec2e4484cc25dc7cd06cc3eeecf874270871854a5e96c8b424214e1202edb23ef6fe692640ece04ff9665ec050bcaa0c1ccdd96e285bae472032d9e2f889559596a357a5fb9481599013d9dc0888c33cbfa9941e9739cc342ecf9ff6f0a08d898c2df11eec9a9c994d227436156dbd07f128f1ed53ad4ea1245d43cb1191a0afd18049f86ff0f2f33a22a40e3f32a04c7b888d044f38be60e9379cff5e7cfcddd195cd465dadaaaf03123dbd3e6195d50a24a8e3479cc82f14cd92375a80594e7031789153a6f88f1f1d9df102c9247c1169159d4a724125710f6404b899e4b9dd1ad8867eed6267db02186b1583d9178845c667617b09f82203fcef74d45a7de4c04c4d131cce81aaacf12d05eb6d83facb43e102a2fae3a0985b896edb6be894c3681a594e3b3c7d543094a3fbaefc75184e1f5deb061390033d0fd6dcb0c70594b85f0b9948a4ed3f1139ba381e5a22c65a72cb061f515ebd2df85ac162266832b6665af9c04ad0e6add65a1d209bcef3f5e41c95011c31f6a4421ba939fb3c15ee9e4a8195b374dc1008c6de0fec3631b06ad559f82b4b36c2fe39cff4341a3b46b119b27a9df883eb3229f835190b3b6f7f4b7f9f7824191bf1af104a658bf2d4499c7f619bdf25aa42917599f42776933dfbdcf20db67987f11f89019985d93a93eeb6aeb8e9690c9924db1c36c34b1bd5cc6fbac54a17b98def767a5de26e64698a9778d59e50e75e3345eb7ec79db59a8f99a84603d274986e913dc4d626bd44b2fec6090f1de8fc22ebf16ef5340bb1af38b72e370e565289a6ee1de185d7f353e5b860963e998aa58044a9b1bf847233e16952342ca24f07415c0a88675b26a89782efbe22ac0af0def87aa7ed8d14fd23bdf46c2f08b0c40c4c179a282a46c0fcd50a8280c7050eb5a546c9158416e9f8c8b5e64ecf18922c73968f8dd7bbff56a3983f2502cb76fd0cb3ddbe59ddfae5e6a95d887adbd2b781b136fc5a5c19e808dc9aa84f315f5c184b9e7dd037e6db1085f922f0bbd442156b84616f033efed03c206a87c733cfc57d1202dd89dcad1787e076686b1621a8fdcc80816973771ebde777c4f7ff755b84728b51bbf652c69da3308841ee8c946ba0302f09318818c763a1d38751930d5f2debc407c7041437087322a1960795de89ddba8aaf11a082305f696be662be7653a7ed397e5dddea74932e1e6f000e2969fdfc979ef263040f3559a83a64c546c5cc585dd9a38b238819ac1ae65cc78d3e0ff7e66328503b489cb3acbc6308c13fd8477831d700650dcf909de1cf8caadb71649fb022adb5e4f7887940a076966cea00a2c21ea802455d1d6d9ce91364f69414b4d7bb30c78ffb5ed4e8f35340b53ce066e11af44ad34efa6ada894754617d0c2ab97c9e9562193bb799e42e4bad44dc445d371a1b62f358b19727f3efb868c3f73c473b000bdba882634b3ab4393c0fdcd902ef42c6f369740839dad77756c4fe2b67ee95c34d7329b77880cbd2437e2ae63385df40eb92e300632c8338688fb2be65bcfd90150c577ca23e591995a386fa59e6faa9e9dd58e250c0a0d4c81177d0e7337c3b6be151644a8ec5c71f888c21373876e673ddb8397839ab7d83111b4c9fac9a416105cef6d7bbbcc149c1a72f1a568739aeff4d43aa70ea4707cbab6dfa37a693a74a462e26693e6a6fe398711984e1d287469fcaacbaff0db800b94a450e6624f1680e3c8553bb4273b901d895aface688bc12e1350aed78df83b153c61586dbaa53f9108fd00069e593f613823284d42121cde40d7aadd98500cbab00cf593075cedfae93ebd19e0246beed22f0988886a77b49e50c71b0838819b4e1ef89eb1634b8c020856955578ebbc94bfde7c8b409576bdce4153d4146bd29b66fb639c8a2c6b2d5d04e9605e25c6fc5edad73f870128915a00ae9ab0f170e0917ce627ee1ccce3de5332c368417ca9784d6acb3adcfddf8b62f05f628ca044a0e9c18ba0b2f5b46c76787418ad81f60c6a50d7402abc68cb6458a8bd460b8cfac86d6a31ad5a00210d49234313a093bd4ac39c1c5a9562c4fc33c66f7729ae41d84273c3f71049fe380cb6615ea5cc578867fc10c4e5b041291cb3a6a1c3a28c0f839aa356875ea064ab5c057c588642b23466c4835b89d3aab81de754428b138278c5caa627e5aa3e797ea27c2da530314b65dd35bb8c1f8d265a2b71e6a1dfa7093d75b907e9d35b1be90fa7934b93cc2d8e5811f421774e6e66182483867d15ff0f47b933b8a18815a099593f443d1d2a9827a49fea6b598b76a0d1ea3aac5e9791c8ad36db3d9d936e977e819fd4beeb1dbe2ea06a9156c99f124bf7fb93d48142fdd65486ec4987284210f0d9a194f87bbad0b8277da0fc016f4393ddc6e66ba19cb8f5df4e5dfeb2e12ceba9fba5670b3fbfd3670b2f59ca3ac02214cb800082b1329f3d4f216e2c4f328b9d35b0407f4e478f93e3b6103dc71527a095fc9f7858ff32616b0e3eb8cd1893690a00a9738e78902e6c44d42816bb5bfb00aceda90b2665c21dba51b6576e66dbda31abec2fc651f2959b1afa8a36217d8c928061e6c1fe11c8d3b561eb48fb419bad1094fea3cd5897abe8142425e3f4a40086d2cee919f1227eecc8a67a5ca6aeca58112c25fa0b637f2066ac53094b3ad1248686228ddda88539afe18ea4194335e601097c4c86a358a6ccf033cca09873704f694b31a8c126ac428acfdfb7d90f5fc1d8749322c73f1d9b9314ab57d4043083a825fe162c66015a273640f1b79d26f3a3c4494fdffdf7aea4510d7d25e2cd55280ca3b2bb3df2c20cb6699a61364c3b5faf122a9f4080d0b9f0772b86f73be13244fbfc095c2a29ea490b340ae6d3dfa31468fdc5c4b6fcffd9a58e32786ada21e978b23bb568173cb74f1846c4480903a0892abf5080c12e811da8b41ca46ee43f0f4f2aa1527b582f037906f48f9025cc71403be4875b03afea87501f48b3eb86016dbc4307ed907dac26a7d8674a552a73ec9cda9cd41de8057028269022b8540ba54adcfec3e3daf83a7d853602bc41aeac6bcee06421c82f83c14c725cbb10661fe1bf41b574837f5f6cc502c8605d6ca8f7308dc4660e565dccd81fa77b0c2c35aadddfb6f5d259e874ff9d5827480f6a70b7dca12c1170ec504e2fefa0d9a087ec736c8f2c26f1e23b11008b84c976350884dd050d03b2fd6ee3784a12b336fe742768c2e0a9c918c07f73f5b2eb6b789c055d9a6d7d27d11b76876f9798f4b65ac4769729eb82a0339a84aa9af45083e19580a2d85ecb1a994747fa3ca3ddd84b2d7cd0f3ba1e5258f59bf3b573d2f3063bdf1a9080d09875a56ce890572ddd4e799d54749619f587f992d72b7bb56eb2906b1ea8eb78add294817271baec90a6ed91f34283c3e0a1d313c0e90947a04164d688fa045884ccfee71cc3ba53767f2030ccad1c09cb31d1e071008869fdcacad466db57782360f398d0b17a4f8e27e3f8333ec3b4042824ea4ccc76178fb5cb438c0aff1e93ba9986237ab426b7efa966be2fd02ab3213750396cec5f44df923f5cc3f9c68955ab606ad7b572375bb4c668d4edba8c0ccea550bea5d5fd3e92c2fcd78c019e1df0021c1bb00198df9d6084d0ad6fde6f426a2b34e1e7d4b352721be93668a88300f0acb63da70bc1d3588c5942f92d50e583a6a94ece7d18cbfe35c06ae6a54a94d6cd37b16fdc4f3065c9639cb5db7f498510fcf855f3a104769c2d19244b6ef2d4b3c0a42ef0241aa8a8d6f804bf711a9d8512fae4abe127aec074602b78fc4642f7fff959714293df2fb8fd7e5e785c8f0de835fa8e5a067b347c98a359ea7985cbf802f62540d2b764e3877e1ffcc73dedfa2567eb68c3b8151b4434dd2bb947a2a0d71c626cb38e266702399c19f09b426528609186d00e87865f53ebff94930c49d20c41032148b3df4259324f5773c1c8435e6968e9792d762a4a87642c75215cebdb80da1d48b8cf3075769dbb482a642b1a714fbc3e8c96419abf2d9e310a04d468d4471fe19f41da18a3b9838c74762d72af909fd965900b3f6811c830955ae04d42a4808edfdf8983a624be8988b8a32a0ce2adcbd2478a6ed05207b91da8f1afb0b7189c9f87b0ba58e5f29d6ea811280f86a4bc8106a2129d07b915da29f0d230d95df7a27a93b2836d973af86bd2ec5fad21ad70af8896f404e5441f6416124908f85befca958e2b537d50b047ad70a8b5acf160505c3450b37e3aafa8e6b50dd8fab7fb98df24d6b13e7930abe7785dc6433c882bbf87069a000d5ffcb99ee0b1b79cbba4902b85bde0069394b2cfd70bd887230b5866ba25e728253b17d2854d601cb7f12b2f72ac4f784298747b904b1eaa52b7edc42f0f23dec2de8ae3091bb57b6e5dc1f4bbf67ed79ef764184867877ca49907646e4f1aee642ae865ce645707ae524b974c36b719ef3b30dd8bd4677d656be027a09727daa538ba3b0aa942329b80b769de13bc32edff90c562022a3385d5ef583d59d59f53ac4f1deae3de3016c300cf62838a60bf29f76debfcd893b80c6138fd17436471a9dbae3b8f12ea110d6464153d89f54117ba0ab44d7f948909efe0fc1e28301155759e94c35e54c758551ca66b51044ca98d92963586ba2c5bc358201cf33578290459baf1a672f486aa1eff62290df694f747f9e72ceb185448ea16fe43acfe958bd810a9c33d6baa8977628163d5224aa2023b49057638fc25095a2cf3f1191ab5d6e744da451255f08add20aa6544eb3f1b69d92a3d02ceb1adf4508a8a217004a51c69af3b5ce7f33ab3c6c2dbb6a78952cdb8dd857dd99dd2fc78acd876da17b1b8a91d1f4c96e156c55bdf513ed0522c8bc7e8cfc8dd1a76977c45c636c168650d82e3ca7560ee9312c1e54a15811fffad89bc44c0210368e12bb320ba9f763a116c8ab7724190075cbba1cc1d15d4e790e95be4329c7c35b61cf6a69e32c66ac2cdea1e1c39c347c5efbb96d9237d85243880df5b696bf2235f802c2d3d7cbd6cf42d2834bf0d47c5b856eca14a166306db9e17217d1c9e22e5a748720da74050f1421cb6ade2733d934ff3f4ac06348ebd9b248dc8dfda2be1bb137d09ffb0da3500000e1820fcba98a5249c0192129d2a806371d2dcf624dd2e0962fd8920cd2176e5e292fa366ad5571d1fd440dbb0f4f1d246b44dad609aeee816cd7a0e9f2dd49476a908107f4bf1ee71ea55a8fcd75470d63a5a1066e83aa230c9b35c484142572c89d2d66d1554e3be9adab0cc94ff88637dc45de22caf4974fee6ee6305906a970bb94f9f9845a25ceb7c020e78e9f0235369309e84954604d751de90d31bf764e9065a48724ee3a62ef8296ced0170f40c9201a09b8e0f4329416868036996a35b39ce75aebf3f5525aa68b94487e53596f70b5e091dc8957cf952f319c6b02485e132dbacdae8602c185c8ecf86cc26a58dde9265c46149694a9bf7ec12627ce2e485457de508bc0b9b96e560ef2d5cd2704118aece1e4ea15b4c04449c75e91bf0dc594eeb249e5a458307fa0d8e3a2a7c1035ad8155b3aaac508574325d7dd02bb02ec4701132b8cfb558a5a30c919cb2633c733c0b0826c13cecd71c66c6c7c43831104e7f8e70e51d36727e4426dd36c726f7a07653c240f71a7bcf5b6f56b77824a50765f1fd50b3a6408a0e4334deb5c84b71bb7c739c35ac2c98358604aa2f8c7ed6d4165704dca679a2e3d47f609dd78d3885a50e9305ac50b776d0e29fa4c286e6a4906328eef1244729b8a6c41afa29ce7adecc5fbcd443fcfa27c59d54c6ffd53ade6a63893b4efdf94ca0bb974ed253781b2697da2979eea306e9ed53ce4efc9d85c7ee6ed378cc6ecce8d508e5c6a9134539c8088a138924ec6a1935f96f9a6f6864056128a35bbef306b913c100965e32459b96754a16c33c1c9eb9a385a17601badf3a0e2098bf255cab5791ead7ee1a3268aaeb59a6b225b1986dfbe297d90d9b395f676d3a8e38a2bde9165f1ab17c1890b23eac5760d62014a19c7e15bf4b939ef1ec0b4e160fbc031813138d1d336c0cefe17bd501b84b455d01ba3ae2a6d21b990c009c6e6fe1151017c721079dcab44c1de8d0cf6ca655cdb32c70f72080be5f99abd81af3954082d072d05aa277528cf4828ede3572f663b23fcc2a655bce6e35bd341f4d91f63cd95c46da122f49f45c564562e252fb03099db6f9a7134f03c82ae9e2af98ea8def5d5d40c7c62f56723d0f6fca05b64bb6a406fe38f0a1824c12f8bebae475773f163830eb61b6f97bee538044d53895bf9ce8f68b4aa12a66fb163d68cafa301f67e6ebdf4c55d627208315a20ae2f0d477f394f9b6c94e0adb86028595f3b11cca00e57b68e73da304e324a9297f17370184b80bc29b98ac4b3b918b5330494e1ed3c96af7e423651e69cce63b6c32dd8324c0d6022165958588669d6aae81d03ec64308680e087029676235341947216646af7783e7eabe9c2df6ada36d7cc453a2c3b96078d9db69064771ab0d6428d8d8c258f32bf9cc7e90d1131328bfae23fa499d02907b9acdf2bb24f8c083baaf305c31160cef6eff3a1ae243f0d29142235b073a19fc547fa0bac54f3dad14d501eea3f0b5207bb966c7168e1fb175841fe4ca98ad75c6480d208458383b771450179a4febf14779e7a021ff6d87681215041d2225caa3549f1c26551ec97e1b056bb2cebb294ff48f4ffd7812c7b77d8a38cec1be54629400736c9ecbec21b639694980ca10e1ffc2d72b633c4117ce5fb7fea75810e2c30f78ae290cd4cef094d5834932f244fdde8e299192fe1db4713ff23ead0cbe3b38ad1836d8aa646818d3de42c77676abb79f05f31d2fa63c17c3c70835269716fd0417c1440afada13ed57575165e42a7f160475c32177b6f50b2e65e20c74a27f481d5871297ae805a11bb99b9c7b373c629c3a08d84adbb6ce26e66329d83ecfa6c03710a3ff013a43dcc69ab3a72c99944f05d20e20e530a465f57ca9a309989c3a0df1d1f041af84409906e333fa685ab17b941297bdef6346e34448478ddbcaf31c0376251e0cbd186d26edf58c364eb511e30d26dc5ccd32e1252d665e645954b4c3c96cbd7cc3296f440b665a53bb57e1160a025ae725ca007945fe347f06ac64f9fcdd00c5eb01a0d1bf0cf9007742a9592c3cb5db7421d9205a13c71281990b82667510496af5bc8db8e7453ebd430be8f474644e943cc6806b7a59d060c8840a54312bf5238562a1e272d3a88857480a9328cea37de53b7bb7844ef6655171a8a1a49c76cb0e50cb7892fc081db3cbda4268402b0e092ac10cc5e39a7297b6812a3e918a2e510ed021c605357c4a2eb3d5f7a1c5f3a4559f761cae740b3f5d6afae6f9a7899791ef492733dbabaf62cca0f4eb8b4d87d015a1b126b58d5371fe4fc1c81a217a53d3b24881a7bd0de3ef94b9487a14f831697a6c9547fc9df2bff8e228caffbde702a0e7cd267be77365394e8ba2475bd6e50a54737bd713901d8d1f53718275b6f1c1bee6d5a00519ec610ff305e20d276b7413ab1527cd6072d84842218d43dd026f4ea31610faacd33ae4ff49172cb410ef4ce8b8ab5b0ef70aabaecd981506d6616b3c30fcc405c5222291e2f3cbde7383a6814b56b1641cd983bda427c6182ebfb462dd20f7e46fc55516db690abc5c8ab4caaa21548c763eaa80140a51d1a037b87c829f65b4e628665655513787346837c3094d3d8e38aeaf0a8f1d4bf6ba84a09bc47980037ee2b0dc05d6ef7a9d63eba77cf803218b4689fa8ca706236d91d8ed8852c75c4a492a77964107dd7cabf1172868f51e87ee96f38c56da92e511a7062997026f01e0dd13cc30f53a90a5aa7f696088d945557afd10e3e062ba1804bcce2c52a8a2b54b0eb7b865b9fe394f9ab0c8bd0890117f1bb01d4f331560014afaca39b16d98b4a40f536f690a69ceb2fc6bc4bd7540f760c3738770c0764a9fa3108c7119fa6492d498988e4bd496eb42dd60bd01a323e77ce4949c9d7f7da7f98dff0b90598e5e32c600e7724287c6e4762b7a4be4d69f80d125987444cff287ed2c3c80eba2f91450d0d13d1b9189dd4b24700917545c7adbb4d86aa63be04c61954821617c53877458c7ad3ed2970116ea28a4237e27a81426baf32f60f4c430c4dd63f387b50996d1c7303374725f2008498688dbb5a6e84fd8fe42b027937296a9f37e8f5be730ac7a0902bf1b1169f56c6ae7d9849c64c1e483b7d9852a19c255793a41064a97b4f5036b3eba49219e51f7647d652f310b386c47bbf758beacac9d4a5afa2fa84fb9ae82f6484698bdf8a950c07fa4cd3a720af136f52de4df29f7c3cb9aa71f4a6c7b14eac577b6a0aaff394ed5144a4f89500abb6b8b48f64c1f119628ca8a0cff11b12b92cec6ed71e3d99bafec75a30357c1e59ed6de22ffb42fe420b6ad863587c02d889de3fc24462c9a70912956a633a857c185a151e9922ca9365045ba275c10278736fdc5b221a41f207a4e8c878761a1afb7f9fa59eefa395a91b2d08344a7fa0a1518bc3a1b0d749bbf5a6772ffe8b0f612c5d4ee72eddf3007dd6f83403606ba74d101cf57a3881f78332666fea99e8394926c734f1bc3de5a8bdf5f486e5e557d2e3a4e9c0334cdad51ba2186dc58c70c117ee99a22dc14a7370e88e45d5ee35f4ddc349b333de6510a3b34ca558920e04808bed886638db09a07ca17b4709f56b6bd247f71c1dc7d888104857fd1b9f2c95f43604b48058e7a044dc3a0a46c344951865e9f2c47451abe215f12fb255d08775b0a977dab035cdfad6c2574e10a9b9c983fac90a7933d1e46acd260d0982a54151faabe6e0829b8a27bc9939a9fe65f538db514261be4e257a7d9b820143608560bb00351e67b35ffc90f288526e373453ec499ba2cb64b44c8149a81f742553d25be0689eb8f2ca48d90728e423636de06c64a5a0bbbb5da2a7c17521c09192230d3f61093d1fbd3a4d1", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0xfffffffffffffffd, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsmount(0xffffffffffffffff, 0x1, 0x82) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write(r0, 0x0, 0x0) stat(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1100}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x6}}], [{@subj_user={'subj_user', 0x3d, '/dev/fuse\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@subj_user={'subj_user', 0x3d, '/dev/fuse\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '@!\\'}}]}}) 6m14.198645693s ago: executing program 5 (id=1478): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 5m58.749728299s ago: executing program 52 (id=1478): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 5m19.0603048s ago: executing program 8 (id=1559): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, 0x0, r1, &(0x7f0000000200)='.\x02\x00', 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4024015}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x2048851}, 0x4800) 5m13.216052244s ago: executing program 8 (id=1569): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xffffffffffffff4f) openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x8100, 0x102, 0x4}, 0x18) setresuid(r3, 0x0, 0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000ffffffff8500000028000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ff80ffb702000008000000b703000002000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x3}, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffe}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb010018000000000000000c4000000c000000020000000700000000000009000000000000"], &(0x7f0000000440)=""/4096, 0x26, 0x1000, 0x0, 0x71f9, 0x10000}, 0x28) 5m11.325603511s ago: executing program 8 (id=1575): socket$nl_xfrm(0x10, 0x3, 0x6) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x585000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x3c7f) pread64(r2, &(0x7f0000000340)=""/216, 0xd8, 0x6) socket$nl_route(0x10, 0x3, 0x0) 5m0.955723977s ago: executing program 8 (id=1587): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) listen(0xffffffffffffffff, 0x5) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) close(0xffffffffffffffff) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) 4m59.946082905s ago: executing program 8 (id=1588): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) capget(&(0x7f0000002680)={0x20080522}, &(0x7f00000026c0)={0x3ff, 0x0, 0x4, 0x100, 0x5, 0x2}) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000240)={[{@flock_local}, {@dyn}]}) 4m58.1103985s ago: executing program 8 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c844}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x1, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000840)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setns(r6, 0x66020000) 4m42.218574279s ago: executing program 53 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c844}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x1, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000840)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setns(r6, 0x66020000) 3m34.155149022s ago: executing program 9 (id=1713): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) fsopen(&(0x7f0000000280)='ufs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) poll(0x0, 0x0, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x25ca03) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x88282, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c84967bb143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4008010) 3m31.922830409s ago: executing program 9 (id=1717): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, 0x0, r1, &(0x7f0000000200)='.\x02\x00', 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4024015}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x2048851}, 0x4800) 3m16.673517636s ago: executing program 9 (id=1738): creat(&(0x7f0000000100)='./file0\x00', 0x7a) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000007007aa0c33a0000100100001fa0000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) fcntl$notify(r1, 0x402, 0x1a) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x1015, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1007, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xff3, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) readv(r2, &(0x7f0000000080)=[{0x0}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0xd54e8019022b9d68, 0x8, 0x0, 0x0, 0x0, 0x5}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0) 3m12.830415813s ago: executing program 9 (id=1729): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000004000000040000000900000000", @ANYRES32], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m10.513307198s ago: executing program 9 (id=1733): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000002680)={0x20080522}, 0x0) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, 0x0) 3m7.281163851s ago: executing program 9 (id=1736): mkdirat(0xffffffffffffff9c, 0x0, 0x19f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e03000000000000040000000c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa6df, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x200, @local, 0x44}}, 0x81, 0x1}, &(0x7f0000000500)=0x90) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() acct(&(0x7f0000000000)='./bus\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000170900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000007071901021f3a9980f94536ce1de48d4c88519d875729d4022aea4e2e297ad9432e4113094f21267b72cf66428778a74ba9a0e53ab533c5c6d811c6dba57740f289a9140f662162f91c07f41c5a8c86d7a1533"], 0x70}}, 0x0) 2m51.959608524s ago: executing program 54 (id=1736): mkdirat(0xffffffffffffff9c, 0x0, 0x19f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e03000000000000040000000c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa6df, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x200, @local, 0x44}}, 0x81, 0x1}, &(0x7f0000000500)=0x90) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() acct(&(0x7f0000000000)='./bus\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000170900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000007071901021f3a9980f94536ce1de48d4c88519d875729d4022aea4e2e297ad9432e4113094f21267b72cf66428778a74ba9a0e53ab533c5c6d811c6dba57740f289a9140f662162f91c07f41c5a8c86d7a1533"], 0x70}}, 0x0) 25.622553033s ago: executing program 3 (id=1993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001800010300000000000000000a800000ff0300060200000014000200fc0000000000000100000000000000011400050000000000000000000000ffffffffffff080001"], 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$XFS_IOC_SCRUB_METADATA(r6, 0xc040583c, &(0x7f0000000040)={0x15, 0x1a0, 0x7, 0x1ff, 0x3}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r8 = gettid() socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) setpriority(0x2, r8, 0x83) 22.878571252s ago: executing program 0 (id=2005): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_pts(0xffffffffffffffff, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x404c001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) r3 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000240)=0x4) listns(&(0x7f0000000500)={0x20, 0x0, 0x9, 0x8000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) syz_emit_ethernet(0x395, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) ioperm(0x3, 0x1, 0xfffffffffffffe01) 21.646461742s ago: executing program 1 (id=2007): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r2, 0x0, 0x0) 20.461794034s ago: executing program 0 (id=2009): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x671}, 0x3, [0x2955, 0x2, 0x1000, 0x80000001, 0x5, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x2, 0x1, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x3, 0x1, 0x40000, 0xff, 0x2, 0x5, 0x2, 0xfffffffb, 0x0, 0x10, 0x140, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x6, 0x3, 0x2a12, 0x2, 0x8, 0x4, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0x7], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x9, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x14f8, 0x9, 0x9, 0x3, 0x35, 0x8001, 0x9, 0x4, 0x0, 0x0, 0x101, 0x1, 0x3, 0x412, 0x1, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x3, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x7, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x3, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0xd, 0xa0c2, 0xfff, 0x8, 0x1, 0x8, 0x7fff, 0x4, 0x8, 0x3, 0x7f, 0x1, 0xd, 0x7, 0x8001, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0x2, 0xe7a5, 0x7, 0x7, 0x694e1c40, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x3, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x7, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0x0, 0x401, 0x3, 0xb, 0x4, 0x8, 0xf, 0x1, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x8, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040061}, 0x10) openat$ptp0(0xffffff9c, 0x0, 0x2000, 0x0) 20.32176284s ago: executing program 3 (id=2010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x3, 0x20, 0x6, 0x8000}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r2, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x84) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={r2, 0x1ff, 0x0, 0x5, 0x2, 0x7fff}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 19.548436231s ago: executing program 3 (id=2013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) close_range(r2, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x1e, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) 19.39410613s ago: executing program 0 (id=2014): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, 0x0, 0x0) 16.889614053s ago: executing program 3 (id=2015): syz_open_dev$usbfs(0x0, 0x77, 0x101301) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x1c) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003380)={0x2020}, 0x2020) close(0x3) openat$nvram(0xffffff9c, &(0x7f0000000100), 0x40, 0x0) 15.67794298s ago: executing program 0 (id=2017): socket(0x10, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x47, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) socket(0x10, 0x3, 0x0) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 15.427411766s ago: executing program 6 (id=2018): bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x48, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x51, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x102) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0xa4, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x10000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x1000) syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) 15.423279594s ago: executing program 2 (id=2019): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r4 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000040)={0x0, r4}) syz_ublk_setup_io_uring(0x1556, &(0x7f0000000440)={0x0, 0x4ee24, 0x2000, 0x1, 0x15a}, 0x0, 0x0, 0x0) 13.449209095s ago: executing program 6 (id=2020): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 12.618721881s ago: executing program 0 (id=2022): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r2, 0x0, 0x0) 12.549257887s ago: executing program 2 (id=2023): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x2080) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x2000, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6177, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 11.287034118s ago: executing program 4 (id=2024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 11.244271136s ago: executing program 2 (id=2025): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x3, 0x20, 0x6, 0x8000}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r2, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x84) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={r2, 0x1ff, 0x0, 0x5, 0x2, 0x7fff}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 10.822932396s ago: executing program 4 (id=2026): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)=';', 0x1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r6, 0x0, 0x1004000, 0x0, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000240)={0x20, r6, &(0x7f00000001c0)=[{0x0, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x3}, {0x1, 0x2}], 0xdeadbeef, 0x8, 0x9}) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x1, 0x7, 0x28, @remote, @local, 0x8, 0xc75fe3ae5d4689fa, 0x8001, 0x8001}}) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d06, &(0x7f00000000c0)=0x39) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000600)="b26c199dabf24d2f20b81934b2b658fab977c8a2506a1b019d5e", 0x1a, 0x4003b00, 0x0, 0x0) 10.820518592s ago: executing program 6 (id=2038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x3, 0x20, 0x6, 0x8000}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r2, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x84) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={r2, 0x1ff, 0x0, 0x5, 0x2, 0x7fff}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 10.819614291s ago: executing program 2 (id=2027): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) capset(&(0x7f0000000080)={0x20071026, r1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)=[{&(0x7f0000005380)=""/219, 0xdb}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006580)=""/134, 0x86}, {&(0x7f0000006640)=""/126, 0x7e}], 0x6}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) 9.569800781s ago: executing program 6 (id=2028): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) sendfile(r1, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xdc) 9.511928987s ago: executing program 4 (id=2029): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, 0x0, 0x0) 9.041881824s ago: executing program 1 (id=2030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, 0x0, 0x0, '\x00', 0x1ffffffffffffd64, 0x3f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f00000000c0)='./file0\x00', 0x210102, 0x88) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0x35, 0x10000004, 0xa}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800800040000000020060002003000000008001f0005000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) 9.041589053s ago: executing program 2 (id=2031): socket$nl_route(0x10, 0x3, 0x0) munlock(&(0x7f0000111000/0x6000)=nil, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5503, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = memfd_secret(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4000004) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x0, 0x40010, r2, 0x8000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x2ce0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) 8.433759792s ago: executing program 4 (id=2032): socket$inet6(0xa, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/215, 0x11c}], 0x1, 0x94, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x14) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f0000000540)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a0cbc000c00f0ff7f0000b402000033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435eeab29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca0", 0x8d) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xff, 0x7ff, 0xfc00, 0x10, 0x10}}) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) 7.404927128s ago: executing program 1 (id=2033): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = fsopen(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000640), 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.218831419s ago: executing program 4 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f0000000100), 0x1, 0x548, &(0x7f00000008c0)="$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") 5.218536677s ago: executing program 2 (id=2035): socket(0x10, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x47, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) socket(0x10, 0x3, 0x0) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 4.6813989s ago: executing program 6 (id=2036): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x7000000, &(0x7f0000001580)="ce"}) 2.480000503s ago: executing program 4 (id=2037): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x5, 0x1, 0x103, 0x0, 0x200}, 0x20) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x210000, 0x0, 0x334e8b, 0x200000a00000}) 2.369527446s ago: executing program 3 (id=2039): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 2.067417857s ago: executing program 1 (id=2040): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x2080) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x2000, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6177, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 1.825778439s ago: executing program 3 (id=2041): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf4e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) recvmsg(r2, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x40) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000080)={0x7, 'macvlan0\x00', {0x8001}, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000180)={0xc, 0x4c}, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./sys/devices/platform/vhci_hcd.0/attach\x00', r1, 0x4000, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './mnt\x00'}) 814.87361ms ago: executing program 1 (id=2042): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x3, 0x20, 0x6, 0x8000}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r2, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x84) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={r2, 0x1ff, 0x0, 0x5, 0x2, 0x7fff}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 641.986922ms ago: executing program 6 (id=2043): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r2, 0x0, 0x0) 584.61732ms ago: executing program 0 (id=2044): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)=';', 0x1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r6, 0x0, 0x1004000, 0x0, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000240)={0x20, r6, &(0x7f00000001c0)=[{0x0, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x3}, {0x1, 0x2}], 0xdeadbeef, 0x8, 0x9}) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x1, 0x7, 0x28, @remote, @local, 0x8, 0xc75fe3ae5d4689fa, 0x8001, 0x8001}}) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d06, &(0x7f00000000c0)=0x39) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000600)="b26c199dabf24d2f20b81934b2b658fab977c8a2506a1b019d5e", 0x1a, 0x4003b00, 0x0, 0x0) 0s ago: executing program 1 (id=2045): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): E or NLM_F_REPLACE [ 1037.621065][T13207] IPv6: NLM_F_CREATE should be set when creating new route [ 1037.711371][ T8691] bridge_slave_1: left allmulticast mode [ 1037.969208][ T8691] bridge_slave_1: left promiscuous mode [ 1037.989517][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.825750][ T8691] bridge_slave_0: left allmulticast mode [ 1038.849348][ T8691] bridge_slave_0: left promiscuous mode [ 1038.874106][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.984361][ T8691] bridge_slave_1: left allmulticast mode [ 1039.056615][ T8691] bridge_slave_1: left promiscuous mode [ 1039.148223][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.790330][ T8691] bridge_slave_0: left allmulticast mode [ 1039.805812][ T8691] bridge_slave_0: left promiscuous mode [ 1039.826031][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.792149][ T8691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.815405][ T8691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.848642][ T8691] bond0 (unregistering): Released all slaves [ 1042.031955][T13248] binder: 13247:13248 ioctl 4018620d 0 returned -22 [ 1042.130438][ T8691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.146865][ T8691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.158328][ T8691] bond0 (unregistering): Released all slaves [ 1042.367190][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1042.674927][T12886] team0: Port device team_slave_0 added [ 1042.719230][T12886] team0: Port device team_slave_1 added [ 1043.792042][T12886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.824512][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.928717][T12886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.291448][ T8691] hsr_slave_0: left promiscuous mode [ 1046.387009][ T8691] hsr_slave_1: left promiscuous mode [ 1046.399991][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.411647][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.472740][ T8691] hsr_slave_0: left promiscuous mode [ 1046.519193][ T8691] hsr_slave_1: left promiscuous mode [ 1046.534107][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.569911][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.088887][ T8691] team0 (unregistering): Port device team_slave_1 removed [ 1047.165836][ T8691] team0 (unregistering): Port device team_slave_0 removed [ 1047.614811][ T8691] team0 (unregistering): Port device team_slave_1 removed [ 1047.640955][ T8691] team0 (unregistering): Port device team_slave_0 removed [ 1047.829080][T12886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.836395][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.862417][T12886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.968013][T12886] hsr_slave_0: entered promiscuous mode [ 1047.995360][T12886] hsr_slave_1: entered promiscuous mode [ 1048.230281][T13045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.237723][T13045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.245262][T13045] bridge_slave_0: entered allmulticast mode [ 1048.254046][T13045] bridge_slave_0: entered promiscuous mode [ 1048.276477][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.285683][T13045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.293134][T13045] bridge_slave_1: entered allmulticast mode [ 1048.300918][T13045] bridge_slave_1: entered promiscuous mode [ 1048.330522][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1048.376502][T13045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.399072][T13045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.476882][T13045] team0: Port device team_slave_0 added [ 1048.530423][T13045] team0: Port device team_slave_1 added [ 1048.566617][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1048.602930][T13045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.613234][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.639777][T13045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.653242][T13045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.660212][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.687356][T13045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.779524][T13045] hsr_slave_0: entered promiscuous mode [ 1048.786463][T13045] hsr_slave_1: entered promiscuous mode [ 1048.795017][T13045] debugfs: 'hsr0' already exists in 'hsr' [ 1048.800814][T13045] Cannot create hsr debugfs directory [ 1048.826175][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1048.934762][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1048.995827][T12886] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1049.009107][T12886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.017925][T12886] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1049.027932][T12886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.056007][T12886] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1049.069860][T12886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.078332][T12886] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1049.088701][T12886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1049.362622][T13045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1049.373980][T13045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.389066][T13045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1049.416780][T13045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.435450][T13045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1049.450091][T13045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.466440][T12886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.475829][T13045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1049.496076][T13045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1049.538736][T12886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.557515][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.565080][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.592081][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.599323][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.799350][T13045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.846383][T13045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.867768][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.874991][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.917873][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.925118][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.769880][T12886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.075508][T13045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.202515][T13045] veth0_vlan: entered promiscuous mode [ 1051.236919][T13045] veth1_vlan: entered promiscuous mode [ 1051.348271][T13045] veth0_macvtap: entered promiscuous mode [ 1051.374987][T13045] veth1_macvtap: entered promiscuous mode [ 1051.424011][T12886] veth0_vlan: entered promiscuous mode [ 1051.448445][T13045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.468046][T12886] veth1_vlan: entered promiscuous mode [ 1051.492299][T13045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.563967][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.623097][ T8693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.695925][T12886] veth0_macvtap: entered promiscuous mode [ 1051.792434][T12886] veth1_macvtap: entered promiscuous mode [ 1051.837603][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.848838][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.905808][T12886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.929708][ T8688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.938194][ T6039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.958906][ T8688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.977026][T12886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.035346][ T5811] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.088861][ T8688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.106781][ T8688] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.231391][ T6039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.780149][ T8688] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.440609][T13392] block nbd6: shutting down sockets [ 1054.663360][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.869751][T13404] ceph: No mds server is up or the cluster is laggy [ 1056.878034][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1056.909893][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1056.933691][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.950906][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.199643][ T8692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.242011][ T187] libceph: connect (1)[c::]:6789 error -101 [ 1057.248438][ T8692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.270343][ T187] libceph: mon0 (1)[c::]:6789 connect error [ 1058.281719][T12083] libceph: connect (1)[c::]:6789 error -101 [ 1058.406663][T12083] libceph: mon0 (1)[c::]:6789 connect error [ 1060.411428][T13436] binder: BINDER_SET_CONTEXT_MGR already set [ 1060.730580][T13436] binder: 13432:13436 ioctl 4018620d 200000004a80 returned -16 [ 1064.098189][T13461] LUN: removable file: (no medium) [ 1066.522188][T13476] o2cb: Local heartbeat has not been started. [ 1066.528915][T13476] o2cb: Cluster check failed. Fix errors before retrying. [ 1066.536633][T13476] (syz.7.1281,13476,1):user_dlm_register:674 ERROR: status = -22 [ 1066.546667][T13476] (syz.7.1281,13476,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 1067.496459][T13479] process 'syz.8.1282' launched './file1' with NULL argv: empty string added [ 1073.349983][T13503] syz.3.1291 (13503) used greatest stack depth: 18720 bytes left [ 1073.521507][T13514] ceph: No mds server is up or the cluster is laggy [ 1073.530384][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1073.576544][T13518] binder: BINDER_SET_CONTEXT_MGR already set [ 1073.591300][T13518] binder: 13517:13518 ioctl 4018620d 200000004a80 returned -16 [ 1073.595861][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1073.824492][T13523] syzkaller0: entered promiscuous mode [ 1073.855833][T13523] syzkaller0: entered allmulticast mode [ 1082.551873][T13585] loop7: detected capacity change from 0 to 256 [ 1082.847170][T13585] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1088.950850][T13647] loop3: detected capacity change from 0 to 1024 [ 1089.072338][T13647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.183513][T13651] lo speed is unknown, defaulting to 1000 [ 1089.189713][T13651] lo speed is unknown, defaulting to 1000 [ 1089.199046][T13651] lo speed is unknown, defaulting to 1000 [ 1089.206854][T13651] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1089.221731][T13651] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1089.238752][T13651] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1089.257651][T13651] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1089.276056][T13651] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1089.336014][T10328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1089.358607][T10328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1089.378743][T13651] lo speed is unknown, defaulting to 1000 [ 1089.387979][T13651] lo speed is unknown, defaulting to 1000 [ 1089.396173][T13651] lo speed is unknown, defaulting to 1000 [ 1089.404216][T13651] lo speed is unknown, defaulting to 1000 [ 1089.411785][T13651] lo speed is unknown, defaulting to 1000 [ 1089.419105][T13651] lo speed is unknown, defaulting to 1000 [ 1089.426500][T13651] lo speed is unknown, defaulting to 1000 [ 1089.433874][T13651] lo speed is unknown, defaulting to 1000 [ 1089.501142][T10328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1089.564468][T10328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1089.572875][T10328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1089.675594][ T30] audit: type=1804 audit(1785784284.908:27): pid=13647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1321" name="/newroot/85/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 1089.814785][T13664] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1323'. [ 1090.929167][T13674] EXT4-fs (loop3): shut down requested (2) [ 1091.164191][T13665] EXT4-fs (loop3): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 1091.642769][T10393] Bluetooth: hci2: command tx timeout [ 1092.802219][T10989] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.721069][T10393] Bluetooth: hci2: command tx timeout [ 1095.817311][T10393] Bluetooth: hci2: command tx timeout [ 1096.463144][T13731] block nbd7: shutting down sockets [ 1096.622548][ T8693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.869870][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1097.387561][T13728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1338'. [ 1097.881135][T10393] Bluetooth: hci2: command tx timeout [ 1097.939420][ T8693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.277908][T13659] lo speed is unknown, defaulting to 1000 [ 1099.634599][ T8693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.449372][T13799] loop6: detected capacity change from 0 to 1024 [ 1103.057662][ T8693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.143849][T13810] block nbd5: shutting down sockets [ 1103.312200][T13798] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1103.321680][T13798] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1103.331372][T13798] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1103.669086][T13823] loop5: detected capacity change from 0 to 256 [ 1103.732946][T13823] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1104.778037][T13829] loop3: detected capacity change from 0 to 2048 [ 1105.598003][T13829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.725054][T13849] loop7: detected capacity change from 0 to 16384 [ 1107.022256][T13847] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1107.041972][T13847] EXT4-fs error (device loop3) in ext4_setattr:6172: error 28 [ 1107.413905][ T8693] bridge_slave_1: left allmulticast mode [ 1107.493927][ T8693] bridge_slave_1: left promiscuous mode [ 1107.508104][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.409897][T10989] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.420441][ T8693] bridge_slave_0: left allmulticast mode [ 1108.448907][ T8693] bridge_slave_0: left promiscuous mode [ 1108.478640][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.258149][ T8693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.293470][ T8693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.323523][ T8693] bond0 (unregistering): Released all slaves [ 1113.403308][T13892] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1113.415434][T13892] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1113.425203][T13892] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1115.931556][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.928976][T13659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.649831][T13659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.696904][T13659] bridge_slave_0: entered allmulticast mode [ 1119.731264][T13659] bridge_slave_0: entered promiscuous mode [ 1121.108289][T13659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.150187][T13659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.200171][T13659] bridge_slave_1: entered allmulticast mode [ 1121.229098][T13659] bridge_slave_1: entered promiscuous mode [ 1124.076567][T13994] loop7: detected capacity change from 0 to 1024 [ 1124.153064][ T8693] hsr_slave_0: left promiscuous mode [ 1124.179231][ T8693] hsr_slave_1: left promiscuous mode [ 1124.218214][T13994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.241920][ T8693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.312724][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.362387][ T30] audit: type=1804 audit(1785784319.588:28): pid=13994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1396" name="/newroot/89/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 1124.392182][ T8693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.643560][T14014] EXT4-fs (loop7): shut down requested (2) [ 1124.665717][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.709497][ T8693] veth1_macvtap: left promiscuous mode [ 1124.722631][ T8693] veth0_macvtap: left promiscuous mode [ 1124.739859][ T8693] veth1_vlan: left promiscuous mode [ 1124.824208][ T8693] veth0_vlan: left promiscuous mode [ 1125.628375][T11514] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.766401][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1401'. [ 1128.080536][T10393] Bluetooth: hci1: command 0x0406 tx timeout [ 1128.989947][ T8693] team0 (unregistering): Port device team_slave_1 removed [ 1129.039325][ T8693] team0 (unregistering): Port device team_slave_0 removed [ 1132.174608][T14057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1132.181880][T14057] IPv6: NLM_F_CREATE should be set when creating new route [ 1132.518839][T14062] futex_wake_op: syz.3.1410 tries to shift op by 144; fix this program [ 1133.395757][T13659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.561440][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1134.609326][T13659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.777322][T13659] team0: Port device team_slave_0 added [ 1136.827876][T14076] netlink: 'syz.8.1415': attribute type 2 has an invalid length. [ 1137.407917][T13659] team0: Port device team_slave_1 added [ 1137.900517][T13659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.930830][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.231251][T13659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.246006][T13659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.273579][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.504400][T13659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.729351][T13659] hsr_slave_0: entered promiscuous mode [ 1139.754932][T13659] hsr_slave_1: entered promiscuous mode [ 1139.773577][T13659] debugfs: 'hsr0' already exists in 'hsr' [ 1139.786262][T13659] Cannot create hsr debugfs directory [ 1139.813071][T14100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1140.163137][T14104] loop7: detected capacity change from 0 to 16384 [ 1144.601735][T14137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.609009][T14137] IPv6: NLM_F_CREATE should be set when creating new route [ 1149.048787][T14175] overlayfs: failed to clone upperpath [ 1150.444465][T14180] veth0_macvtap: entered allmulticast mode [ 1150.450602][T14180] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1150.691577][T14186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1151.636754][T14187] syzkaller0: entered promiscuous mode [ 1151.680013][T14187] syzkaller0: entered allmulticast mode [ 1151.880477][T10393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1151.913394][T10393] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1151.933326][T10393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1151.944160][T10393] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1151.953569][T10393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1152.205605][T14207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1152.212965][T14207] IPv6: NLM_F_CREATE should be set when creating new route [ 1154.024253][T14221] syz.5.1448 (14221): drop_caches: 2 [ 1154.361136][T10393] Bluetooth: hci0: command tx timeout [ 1154.518927][T14225] loop6: detected capacity change from 0 to 64 [ 1155.732691][T14235] syz.6.1449: attempt to access beyond end of device [ 1155.732691][T14235] loop6: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1155.748651][T14235] buffer_io_error: 138 callbacks suppressed [ 1155.748671][T14235] Buffer I/O error on dev loop6, logical block 512, async page read [ 1155.762854][T14235] syz.6.1449: attempt to access beyond end of device [ 1155.762854][T14235] loop6: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 1155.776744][T14235] Buffer I/O error on dev loop6, logical block 56576, async page read [ 1155.937093][ T30] audit: type=1800 audit(1785784351.048:29): pid=14237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1449" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 1156.448343][T10393] Bluetooth: hci0: command tx timeout [ 1158.531844][T10393] Bluetooth: hci0: command tx timeout [ 1160.721294][T10393] Bluetooth: hci0: command tx timeout [ 1161.738143][T14278] futex_wake_op: syz.7.1438 tries to shift op by 144; fix this program [ 1166.816157][T14197] lo speed is unknown, defaulting to 1000 [ 1167.239413][T10328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1167.258439][T10328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1167.274588][T10328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1167.292817][T10328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1167.307226][T10328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1169.462151][T10393] Bluetooth: hci2: command tx timeout [ 1171.026069][ T8308] bridge_slave_1: left allmulticast mode [ 1171.035234][ T8308] bridge_slave_1: left promiscuous mode [ 1171.051320][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.081874][ T8308] bridge_slave_0: left allmulticast mode [ 1171.093736][ T8308] bridge_slave_0: left promiscuous mode [ 1171.111028][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.491403][T10393] Bluetooth: hci2: command tx timeout [ 1172.475699][ T8308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.509315][ T8308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.788884][ T8308] bond0 (unregistering): Released all slaves [ 1172.811272][T14197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.818533][T14197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.825929][T14197] bridge_slave_0: entered allmulticast mode [ 1172.837898][T14197] bridge_slave_0: entered promiscuous mode [ 1173.141476][T14197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.296481][T14197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.604924][T10393] Bluetooth: hci2: command tx timeout [ 1173.612934][T14197] bridge_slave_1: entered allmulticast mode [ 1173.651684][T14197] bridge_slave_1: entered promiscuous mode [ 1175.310082][ T8308] hsr_slave_0: left promiscuous mode [ 1175.345362][ T8308] hsr_slave_1: left promiscuous mode [ 1175.352760][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.384797][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.641279][T10393] Bluetooth: hci2: command tx timeout [ 1175.693216][ T8308] team0 (unregistering): Port device team_slave_1 removed [ 1175.714127][ T8308] team0 (unregistering): Port device team_slave_0 removed [ 1175.871721][T14197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.889270][T14197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.969062][T14297] lo speed is unknown, defaulting to 1000 [ 1176.038761][T14197] team0: Port device team_slave_0 added [ 1176.056461][T14197] team0: Port device team_slave_1 added [ 1176.175985][T14197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.186948][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.215744][T14197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.240161][T14197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.247901][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.274917][T14197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.466517][T14197] hsr_slave_0: entered promiscuous mode [ 1176.473696][T14197] hsr_slave_1: entered promiscuous mode [ 1176.480411][T14197] debugfs: 'hsr0' already exists in 'hsr' [ 1176.489745][T14197] Cannot create hsr debugfs directory [ 1176.606237][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.807026][ T8308] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.018043][ T8308] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.134850][ T8308] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.289865][ T8308] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.381947][T14297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.389496][T14297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.398611][T14297] bridge_slave_0: entered allmulticast mode [ 1177.417153][T14297] bridge_slave_0: entered promiscuous mode [ 1177.447751][T14297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.468838][T14297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.479745][T14297] bridge_slave_1: entered allmulticast mode [ 1177.490884][T14297] bridge_slave_1: entered promiscuous mode [ 1177.625318][T14297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.685672][T14297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.750483][T14297] team0: Port device team_slave_0 added [ 1177.823100][T14297] team0: Port device team_slave_1 added [ 1177.906694][T14297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.915010][T14297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.949360][T14297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.988124][T14297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.001836][T14297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.038660][T14297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.167992][ T8308] bridge_slave_1: left allmulticast mode [ 1178.173895][ T8308] bridge_slave_1: left promiscuous mode [ 1178.179794][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.190661][ T8308] bridge_slave_0: left allmulticast mode [ 1178.196990][ T8308] bridge_slave_0: left promiscuous mode [ 1178.203843][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.434283][ T8308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.446509][ T8308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.457517][ T8308] bond0 (unregistering): Released all slaves [ 1178.529934][ T5281] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1178.556771][T14297] hsr_slave_0: entered promiscuous mode [ 1178.564460][T14297] hsr_slave_1: entered promiscuous mode [ 1178.571269][T14297] debugfs: 'hsr0' already exists in 'hsr' [ 1178.577041][T14297] Cannot create hsr debugfs directory [ 1178.697539][T14197] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1178.708345][T14197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1178.754176][T14197] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1178.765167][T14197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1178.807014][T14197] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1178.824073][T14197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1178.833123][T14197] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1178.850445][T14197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1178.915506][ T8308] hsr_slave_0: left promiscuous mode [ 1178.924580][ T8308] hsr_slave_1: left promiscuous mode [ 1178.930918][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.938868][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.949241][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.957095][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.973032][ T8308] veth1_macvtap: left promiscuous mode [ 1178.978637][ T8308] veth0_macvtap: left promiscuous mode [ 1178.985770][ T8308] veth1_vlan: left promiscuous mode [ 1178.991179][ T8308] veth0_vlan: left promiscuous mode [ 1179.397207][ T8308] team0 (unregistering): Port device team_slave_1 removed [ 1179.426395][ T8308] team0 (unregistering): Port device team_slave_0 removed [ 1179.679988][ T5281] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1180.144065][T14197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.225623][T14197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.335036][ T8308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.342278][ T8308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.368898][ T8694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.376158][ T8694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.775519][ T5281] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1181.015937][T14297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1181.029969][T14297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1181.038791][T14297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1181.049851][T14297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.059326][T14297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1181.078339][T14297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1181.090461][T14297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1181.108782][T14297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1181.364399][T14297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.416104][T14297] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.432548][ T8694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.439765][ T8694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.459929][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.467198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.837333][T14197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.359379][T14297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.519121][T14297] veth0_vlan: entered promiscuous mode [ 1182.531868][T14197] veth0_vlan: entered promiscuous mode [ 1182.562937][T14297] veth1_vlan: entered promiscuous mode [ 1182.573645][T14197] veth1_vlan: entered promiscuous mode [ 1182.646269][T14297] veth0_macvtap: entered promiscuous mode [ 1182.672917][T14297] veth1_macvtap: entered promiscuous mode [ 1182.700234][T14197] veth0_macvtap: entered promiscuous mode [ 1182.725030][T14197] veth1_macvtap: entered promiscuous mode [ 1182.750803][T14297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.783748][T14297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.820636][T14197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.843619][ T8308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.864456][T14197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.953954][ T8692] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.071549][ T7654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.080515][ T8700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.098081][ T8700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.133052][ T8700] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.290743][ T8694] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.303977][ T8694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.318702][ T8694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.326912][ T8308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.366554][ T8692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.376194][ T8694] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.387738][ T8692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.395376][ T8694] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.553090][ T8308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.588702][ T8308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.335593][T14523] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1484'. [ 1185.344949][T14523] openvswitch: netlink: Flow actions attr not present in new flow. [ 1186.024032][T14524] fuseblk: Bad value for 'fd' [ 1188.553397][T14556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1191.555246][T14575] overlayfs: failed to clone upperpath [ 1192.352336][T14577] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1487'. [ 1192.362480][T14577] openvswitch: netlink: Flow key attr not present in new flow. [ 1196.710231][T14606] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1493'. [ 1196.720064][T14606] openvswitch: netlink: Flow actions attr not present in new flow. [ 1200.724940][T14626] overlayfs: failed to clone upperpath [ 1203.602226][T14650] veth0_macvtap: entered allmulticast mode [ 1203.679632][T14650] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1204.543667][T14667] overlayfs: failed to clone upperpath [ 1205.188956][T10328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1205.227399][T10328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1205.237022][T10328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1205.252602][T10328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1205.263579][T10328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1207.360494][T10328] Bluetooth: hci3: command tx timeout [ 1209.401763][T10393] Bluetooth: hci3: command tx timeout [ 1209.652545][T14695] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1510'. [ 1209.661912][T14695] openvswitch: netlink: Flow actions attr not present in new flow. [ 1210.953708][ T8700] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.481138][T10393] Bluetooth: hci3: command tx timeout [ 1211.552886][T14728] overlayfs: failed to clone upperpath [ 1212.341870][ T8700] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.441386][T14669] lo speed is unknown, defaulting to 1000 [ 1213.621165][T10393] Bluetooth: hci3: command tx timeout [ 1214.238429][ T8700] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.801971][T14745] syzkaller0: entered promiscuous mode [ 1215.849675][T14745] syzkaller0: entered allmulticast mode [ 1216.049330][ T8700] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.752668][ T30] audit: type=1800 audit(1785784411.978:30): pid=14778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1522" name="nullb0" dev="tmpfs" ino=1115 res=0 errno=0 [ 1216.858673][T14781] o2cb: Local heartbeat has not been started. [ 1216.865014][T14781] o2cb: Cluster check failed. Fix errors before retrying. [ 1216.872499][T14781] (syz.6.1533,14781,0):user_dlm_register:674 ERROR: status = -22 [ 1216.880365][T14781] (syz.6.1533,14781,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 1217.630786][T14783] loop9: detected capacity change from 0 to 64 [ 1219.052027][T14790] syz.9.1521: attempt to access beyond end of device [ 1219.052027][T14790] loop9: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1219.065775][T14790] Buffer I/O error on dev loop9, logical block 512, async page read [ 1219.073904][T14790] syz.9.1521: attempt to access beyond end of device [ 1219.073904][T14790] loop9: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 1219.090076][T14790] Buffer I/O error on dev loop9, logical block 56576, async page read [ 1219.158195][T14795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1219.702963][ T30] audit: type=1800 audit(1785784414.758:31): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1521" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 1224.097553][ T8700] bridge_slave_1: left allmulticast mode [ 1224.109215][ T8700] bridge_slave_1: left promiscuous mode [ 1224.115825][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.193823][ T8700] bridge_slave_0: left allmulticast mode [ 1224.208611][ T8700] bridge_slave_0: left promiscuous mode [ 1224.220291][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.305371][ T8700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.377216][ T8700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.484997][ T8700] bond0 (unregistering): Released all slaves [ 1229.606476][T14853] syzkaller0: entered promiscuous mode [ 1231.446169][T14853] syzkaller0: entered allmulticast mode [ 1233.496999][T14904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1233.909678][T14669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.949397][T14669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.997890][T14669] bridge_slave_0: entered allmulticast mode [ 1234.063361][T14669] bridge_slave_0: entered promiscuous mode [ 1234.975319][T14669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.995005][T14669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.013741][T14669] bridge_slave_1: entered allmulticast mode [ 1235.023348][T14669] bridge_slave_1: entered promiscuous mode [ 1235.226014][T14669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.585777][T14669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.878818][ T8700] hsr_slave_0: left promiscuous mode [ 1236.176559][ T8700] hsr_slave_1: left promiscuous mode [ 1236.261690][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.502367][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.878760][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1237.187945][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.768501][ T8700] veth1_macvtap: left promiscuous mode [ 1237.797748][ T8700] veth0_macvtap: left promiscuous mode [ 1237.824116][ T8700] veth1_vlan: left promiscuous mode [ 1237.841188][ T8700] veth0_vlan: left promiscuous mode [ 1238.044938][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.350627][T14932] o2cb: Local heartbeat has not been started. [ 1238.425040][T14932] o2cb: Cluster check failed. Fix errors before retrying. [ 1238.478825][T14932] (syz.2.1550,14932,0):user_dlm_register:674 ERROR: status = -22 [ 1238.580300][T14932] (syz.2.1550,14932,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 1238.795407][T14963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1238.802711][T14963] IPv6: NLM_F_CREATE should be set when creating new route [ 1239.410415][T14971] loop2: detected capacity change from 0 to 64 [ 1243.145424][ T8700] team0 (unregistering): Port device team_slave_1 removed [ 1243.222317][ T8700] team0 (unregistering): Port device team_slave_0 removed [ 1243.811466][T14669] team0: Port device team_slave_0 added [ 1243.897232][T14669] team0: Port device team_slave_1 added [ 1244.112553][T14669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.137761][T14669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.227000][T14669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.277383][T14669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.324259][T14669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.432681][T14669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.474158][T14994] syzkaller0: entered promiscuous mode [ 1244.499280][T14994] syzkaller0: entered allmulticast mode [ 1245.626454][T15007] syz.2.1562 (15007): drop_caches: 2 [ 1247.249861][T14669] hsr_slave_0: entered promiscuous mode [ 1247.358568][T14669] hsr_slave_1: entered promiscuous mode [ 1247.546552][T15015] veth0_macvtap: entered allmulticast mode [ 1247.605839][T15015] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1248.729628][T15027] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1249.166076][T15037] loop2: detected capacity change from 0 to 1024 [ 1249.290190][T15037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.365330][ T30] audit: type=1804 audit(1785784444.588:32): pid=15037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1570" name="/newroot/21/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 1250.629945][T15046] EXT4-fs (loop2): shut down requested (2) [ 1250.670550][T15047] loop3: detected capacity change from 0 to 131072 [ 1250.684636][T15047] F2FS-fs (loop3): invalid crc value [ 1250.804570][T15047] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1250.830610][T15047] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1252.091152][T14297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.283596][T15069] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 1252.311095][T15069] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 1253.115235][T15078] syzkaller0: entered promiscuous mode [ 1253.151120][T15078] syzkaller0: entered allmulticast mode [ 1254.427487][T15094] tipc: Started in network mode [ 1254.542062][T15100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1254.549541][T15100] IPv6: NLM_F_CREATE should be set when creating new route [ 1254.554916][T15094] tipc: Node identity 66cd3cf64892, cluster identity 4711 [ 1254.640669][T15094] tipc: Enabled bearer , priority 0 [ 1255.153241][T15077] tipc: Resetting bearer [ 1255.258222][T15077] tipc: Disabling bearer [ 1262.412061][T14669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1264.000049][T14669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.238723][T15147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1266.084191][T10328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1266.113368][T10328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1266.130671][T10328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1266.154442][T10328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1266.164871][T10328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1266.222974][T15154] syzkaller0: entered promiscuous mode [ 1266.246347][T15154] syzkaller0: entered allmulticast mode [ 1267.280346][T15180] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1597'. [ 1268.246097][T10328] Bluetooth: hci1: command tx timeout [ 1270.281338][T10328] Bluetooth: hci1: command tx timeout [ 1271.670653][T15191] loop9: detected capacity change from 0 to 512 [ 1271.723892][T15191] ext4: Unknown parameter 'appraise_type' [ 1272.362673][T10328] Bluetooth: hci1: command tx timeout [ 1274.948656][T10393] Bluetooth: hci1: command tx timeout [ 1275.667276][T15214] binder: 15213:15214 ioctl c0306201 0 returned -14 [ 1276.219388][T15155] lo speed is unknown, defaulting to 1000 [ 1277.033226][T15218] Bluetooth: hci0: command 0x0406 tx timeout [ 1280.246275][T15255] binder: 15253:15255 ioctl c0306201 0 returned -14 [ 1280.299401][T15258] loop2: detected capacity change from 0 to 512 [ 1280.324698][T15261] binder: 15253:15261 ioctl c0306201 200000002580 returned -14 [ 1280.387573][T15258] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1621: iget: bad i_size value: 38620345925642 [ 1280.409161][T15258] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1280.410576][T15258] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1621: couldn't read orphan inode 15 (err -117) [ 1280.419946][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1280.420030][ C1] EXT4-fs (loop2): initial error at time 1785784475: ext4_orphan_get:1399: inode 15 [ 1280.420088][ C1] EXT4-fs (loop2): last error at time 1785784475: ext4_orphan_get:1399: inode 15 [ 1280.460563][T15258] loop2: lost filesystem error report for type 5 error -117 [ 1280.482849][T15258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.527718][T15248] syzkaller0: entered promiscuous mode [ 1280.539957][T15248] syzkaller0: entered allmulticast mode [ 1280.848228][T15218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1280.870207][T15218] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1281.027190][T15218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1281.118198][T15218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1281.129553][T15218] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1281.344463][ T5910] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 1281.804625][ T5910] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 124 with error 28 [ 1281.949052][ T5910] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1281.949052][ T5910] [ 1282.100767][ T5910] EXT4-fs (loop2): Total free blocks count 0 [ 1282.250013][ T5910] EXT4-fs (loop2): Free/Dirty block details [ 1282.383136][ T5910] EXT4-fs (loop2): free_blocks=0 [ 1282.417598][ T5910] EXT4-fs (loop2): dirty_blocks=128 [ 1282.452576][ T5910] EXT4-fs (loop2): Block reservation details [ 1282.490399][ T5910] EXT4-fs (loop2): i_reserved_data_blocks=128 [ 1282.631088][T14297] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1282.653196][T14297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.391531][T15218] Bluetooth: hci3: command tx timeout [ 1283.878104][T15296] binder: BINDER_SET_CONTEXT_MGR already set [ 1283.907692][T15296] binder: 15294:15296 ioctl 4018620d 200000004a80 returned -16 [ 1283.927021][T15301] binder: 15294:15301 ioctl c0306201 0 returned -14 [ 1285.481067][T15218] Bluetooth: hci3: command tx timeout [ 1285.905827][ T8696] bridge_slave_1: left allmulticast mode [ 1285.927421][ T8696] bridge_slave_1: left promiscuous mode [ 1286.015152][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.050089][T15322] binder_alloc: 15321: binder_alloc_buf, no vma [ 1286.077578][T15325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1286.102450][ T8696] bridge_slave_0: left allmulticast mode [ 1286.108152][ T8696] bridge_slave_0: left promiscuous mode [ 1286.115062][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.126246][T15322] binder: 15321:15322 ioctl c0306201 200000002580 returned -14 [ 1286.308043][T15330] binder: 15328:15330 ioctl c0306201 0 returned -14 [ 1288.072501][T15218] Bluetooth: hci3: command tx timeout [ 1289.960149][ T8696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.011487][ T8696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.062884][ T8696] bond0 (unregistering): Released all slaves [ 1290.170871][T10328] Bluetooth: hci3: command tx timeout [ 1291.098297][T15155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.115299][T15155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.131236][T15155] bridge_slave_0: entered allmulticast mode [ 1291.164389][T15366] binder: 15363:15366 ioctl c0306201 0 returned -14 [ 1291.164945][T15155] bridge_slave_0: entered promiscuous mode [ 1291.205504][T15364] loop3: detected capacity change from 0 to 128 [ 1291.346859][T15265] lo speed is unknown, defaulting to 1000 [ 1291.350139][T15155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.389631][T15155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.403686][T15364] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1291.421008][T15364] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1291.448526][T15155] bridge_slave_1: entered allmulticast mode [ 1291.474428][T15155] bridge_slave_1: entered promiscuous mode [ 1291.801254][T15218] Bluetooth: hci2: command 0x0406 tx timeout [ 1292.974097][T10989] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1293.070981][ T8696] hsr_slave_0: left promiscuous mode [ 1293.127367][ T8696] hsr_slave_1: left promiscuous mode [ 1293.159592][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1293.368955][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1293.548561][T15385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1298.621855][ T8696] team0 (unregistering): Port device team_slave_1 removed [ 1298.658899][ T8696] team0 (unregistering): Port device team_slave_0 removed [ 1299.486471][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.690979][T15155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.328314][T15416] syzkaller0: entered promiscuous mode [ 1303.343977][T15416] syzkaller0: entered allmulticast mode [ 1303.424795][T15155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.637628][T15446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1304.810033][T15155] team0: Port device team_slave_0 added [ 1304.843978][T15155] team0: Port device team_slave_1 added [ 1305.573849][T15459] loop9: detected capacity change from 0 to 4096 [ 1305.740071][T15155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.886365][T15155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.344352][T15155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.698590][T15155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.821316][T15155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.349670][T15155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.864998][T15459] ntfs3(loop9): mft corrupted [ 1312.223465][T15492] binder: BINDER_SET_CONTEXT_MGR already set [ 1312.240880][T15492] binder: 15491:15492 ioctl 4018620d 200000004a80 returned -16 [ 1312.264464][T15492] binder: 15491:15492 ioctl c0306201 200000002580 returned -14 [ 1312.332260][T15155] hsr_slave_0: entered promiscuous mode [ 1312.397498][T15155] hsr_slave_1: entered promiscuous mode [ 1312.550111][T15496] loop9: detected capacity change from 0 to 256 [ 1312.599348][T15496] exFAT-fs (loop9): bogus data start sector [ 1312.621696][T15496] exFAT-fs (loop9): failed to read boot sector [ 1312.655161][T15496] exFAT-fs (loop9): failed to recognize exfat type [ 1313.646265][T15496] loop9: detected capacity change from 0 to 131072 [ 1313.666765][ T8696] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.674716][T15496] F2FS-fs (loop9): invalid crc value [ 1313.801204][T15496] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1313.821103][T15496] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 1314.037989][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1314.183448][T15515] F2FS-fs (loop9): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 1314.411977][T15496] F2FS-fs (loop9): Stopped filesystem due to reason: 0 [ 1314.483846][ T5004] loop9: lost filesystem error report for type 5 error -108 [ 1314.709231][ T8696] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.710411][T15524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1314.735334][T15524] IPv6: NLM_F_CREATE should be set when creating new route [ 1317.494852][ T8696] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.144494][ T8696] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.977725][T15265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.007847][T15265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.034100][T15265] bridge_slave_0: entered allmulticast mode [ 1323.049961][T15265] bridge_slave_0: entered promiscuous mode [ 1323.071988][T15265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.080492][T15265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.089793][T15265] bridge_slave_1: entered allmulticast mode [ 1323.103145][T15265] bridge_slave_1: entered promiscuous mode [ 1323.637660][T15265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.692163][T15265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.991481][T15596] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1325.089906][T15602] loop9: detected capacity change from 0 to 2048 [ 1326.007003][T15602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1326.084565][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1326.200680][T15265] team0: Port device team_slave_0 added [ 1326.251164][T15265] team0: Port device team_slave_1 added [ 1326.288780][T14197] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.387402][T15609] binder: 15607:15609 ioctl c0306201 0 returned -14 [ 1329.089329][T10328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1329.107505][T10328] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1329.120148][T10328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1329.128413][T10328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1329.136480][T10328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1329.421871][T15265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.436759][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.505326][T15265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.717798][T15265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.744054][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.827729][T15265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.178801][T10328] Bluetooth: hci6: command tx timeout [ 1332.253801][T15643] loop2: detected capacity change from 0 to 40427 [ 1332.283475][T15643] F2FS-fs (loop2): invalid crc value [ 1332.432529][T15643] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1332.451567][T15643] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 1332.459345][T15643] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1332.470344][T15643] F2FS-fs (loop2): Start checkpoint disabled! [ 1332.497896][T15643] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 1332.590841][T15643] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1332.718453][T15651] overlayfs: missing 'lowerdir' [ 1333.894745][T10328] Bluetooth: hci6: command tx timeout [ 1334.201544][ T8308] kworker/u8:21: attempt to access beyond end of device [ 1334.201544][ T8308] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1334.287905][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 1334.287957][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1334.287984][ T8308] Workqueue: writeback wb_workfn (flush-7:2) [ 1334.288047][ T8308] Call Trace: [ 1334.288059][ T8308] [ 1334.288073][ T8308] dump_stack_lvl+0x100/0x190 [ 1334.288118][ T8308] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1334.288182][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.288229][ T8308] ? errseq_set+0xe3/0x150 [ 1334.288287][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.288340][ T8308] f2fs_write_end_bio+0xf53/0x1340 [ 1334.288385][ T8308] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1334.288422][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.288471][ T8308] ? rcu_preempt_deferred_qs_irqrestore+0x8b9/0xb90 [ 1334.288516][ T8308] ? f2fs_write_end_bio+0x1331/0x1340 [ 1334.288563][ T8308] ? rcu_is_watching+0x12/0xc0 [ 1334.288611][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.288648][ T8308] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1334.288678][ T8308] bio_endio+0x778/0x8e0 [ 1334.288727][ T8308] submit_bio_noacct+0x64c/0x1ff0 [ 1334.288787][ T8308] f2fs_submit_write_bio+0x133/0x330 [ 1334.288841][ T8308] __submit_merged_bio+0x330/0x7b0 [ 1334.288870][ T8308] ? rcu_is_watching+0x12/0xc0 [ 1334.288916][ T8308] __submit_merged_write_cond+0x3fe/0x510 [ 1334.288955][ T8308] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1334.288994][ T8308] ? __pfx___might_resched+0x10/0x10 [ 1334.289025][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.289059][ T8308] ? folio_clear_dirty_for_io+0x178/0x960 [ 1334.289111][ T8308] f2fs_write_cache_pages+0x20e9/0x2630 [ 1334.289166][ T8308] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1334.289210][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.289245][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.289279][ T8308] ? find_held_lock+0x2b/0x80 [ 1334.289322][ T8308] ? nr_blockdev_pages+0xde/0x120 [ 1334.289365][ T8308] ? nr_blockdev_pages+0xde/0x120 [ 1334.289406][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.289455][ T8308] ? si_meminfo+0x118/0x230 [ 1334.289487][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.289522][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.289602][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.289636][ T8308] ? __lock_acquire+0x49f/0x1a40 [ 1334.289669][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.289702][ T8308] ? rcu_is_watching+0x12/0xc0 [ 1334.289748][ T8308] f2fs_write_data_pages+0x799/0x16d0 [ 1334.289785][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.289832][ T8308] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1334.289882][ T8308] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1334.289922][ T8308] do_writepages+0x278/0x600 [ 1334.289971][ T8308] ? __pfx_do_writepages+0x10/0x10 [ 1334.290018][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.290058][ T8308] __writeback_single_inode+0x164/0x1300 [ 1334.290096][ T8308] ? find_held_lock+0x2b/0x80 [ 1334.290139][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.290176][ T8308] ? __pfx___writeback_single_inode+0x10/0x10 [ 1334.290214][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.290248][ T8308] ? do_raw_spin_unlock+0x145/0x1e0 [ 1334.290287][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.290328][ T8308] writeback_sb_inodes+0x766/0x1c50 [ 1334.290383][ T8308] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1334.290420][ T8308] ? do_raw_spin_lock+0x128/0x260 [ 1334.290459][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.290537][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.290571][ T8308] ? rcu_is_watching+0x12/0xc0 [ 1334.290610][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.290644][ T8308] ? queue_io+0x287/0x530 [ 1334.290678][ T8308] wb_writeback+0x1c0/0xb50 [ 1334.290725][ T8308] ? __pfx_wb_writeback+0x10/0x10 [ 1334.290772][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.290809][ T8308] ? mark_held_locks+0x40/0x70 [ 1334.290841][ T8308] ? _raw_spin_unlock_irq+0x23/0x50 [ 1334.290879][ T8308] wb_workfn+0x143/0xc80 [ 1334.290920][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.290955][ T8308] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1334.290992][ T8308] ? __pfx_wb_workfn+0x10/0x10 [ 1334.291032][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.291070][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.291107][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.291141][ T8308] ? rcu_is_watching+0x12/0xc0 [ 1334.291188][ T8308] process_one_work+0xa23/0x1940 [ 1334.291232][ T8308] ? __pfx_process_one_work+0x10/0x10 [ 1334.291258][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.291305][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.291346][ T8308] worker_thread+0x5ef/0xe50 [ 1334.291384][ T8308] ? __pfx_worker_thread+0x10/0x10 [ 1334.291413][ T8308] ? kthread+0x13a/0x450 [ 1334.291455][ T8308] ? __pfx_worker_thread+0x10/0x10 [ 1334.291482][ T8308] kthread+0x370/0x450 [ 1334.291525][ T8308] ? __pfx_kthread+0x10/0x10 [ 1334.291571][ T8308] ret_from_fork+0x72b/0xd50 [ 1334.291611][ T8308] ? __pfx_ret_from_fork+0x10/0x10 [ 1334.291650][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1334.291684][ T8308] ? __switch_to+0x800/0x10f0 [ 1334.291729][ T8308] ? __switch_to_asm+0x39/0x70 [ 1334.291768][ T8308] ? __pfx_kthread+0x10/0x10 [ 1334.291819][ T8308] ret_from_fork_asm+0x1a/0x30 [ 1334.291877][ T8308] [ 1334.813952][T15661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1334.834182][ T8308] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1334.838089][ T8696] bond0 (unregistering): Released all slaves [ 1335.182858][T15619] lo speed is unknown, defaulting to 1000 [ 1335.376584][T15265] hsr_slave_0: entered promiscuous mode [ 1335.400091][T15265] hsr_slave_1: entered promiscuous mode [ 1335.490323][T15265] debugfs: 'hsr0' already exists in 'hsr' [ 1335.520459][T15265] Cannot create hsr debugfs directory [ 1335.575501][ T8696] tipc: Disabling bearer [ 1335.618326][ T8696] tipc: Left network mode [ 1336.058565][T10328] Bluetooth: hci6: command tx timeout [ 1339.113481][T10328] Bluetooth: hci6: command tx timeout [ 1339.266322][T15679] loop3: detected capacity change from 0 to 256 [ 1339.300994][T15679] exFAT-fs (loop3): bogus data start sector [ 1339.317171][T15679] exFAT-fs (loop3): failed to read boot sector [ 1339.328408][T15679] exFAT-fs (loop3): failed to recognize exfat type [ 1340.226654][T15679] loop3: detected capacity change from 0 to 131072 [ 1340.262048][T15679] F2FS-fs (loop3): invalid crc value [ 1340.341251][T15679] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1340.363577][T15679] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1340.766455][T15689] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 1341.757118][T15679] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 1342.455754][T15218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1342.469401][T15218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1342.479661][T15218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1342.501593][T15218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1342.510231][T15218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1342.763096][ T8696] hsr_slave_0: left promiscuous mode [ 1342.813582][ T8696] hsr_slave_1: left promiscuous mode [ 1342.903607][ T8696] veth1_macvtap: left promiscuous mode [ 1342.932484][ T8696] veth0_macvtap: left promiscuous mode [ 1342.978288][ T8696] veth1_vlan: left promiscuous mode [ 1343.895603][ T8696] veth0_vlan: left promiscuous mode [ 1344.630942][T15218] Bluetooth: hci1: command tx timeout [ 1345.654829][T15716] overlayfs: failed to resolve './file1': -2 [ 1346.678977][T15218] Bluetooth: hci1: command tx timeout [ 1348.859240][T15218] Bluetooth: hci1: command tx timeout [ 1350.529624][T15750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1350.918622][T15218] Bluetooth: hci1: command tx timeout [ 1352.139604][T15619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.147010][T15619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.157339][T15619] bridge_slave_0: entered allmulticast mode [ 1352.196111][T15619] bridge_slave_0: entered promiscuous mode [ 1352.326716][T15619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.377782][T15619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.430833][T15619] bridge_slave_1: entered allmulticast mode [ 1352.460723][T15619] bridge_slave_1: entered promiscuous mode [ 1352.611393][T15619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.658207][T15619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.854238][T15619] team0: Port device team_slave_0 added [ 1352.963960][T15619] team0: Port device team_slave_1 added [ 1354.058704][T15619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.065752][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.203017][T15619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.324277][T15619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.351378][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.433207][T15619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.512115][ T8696] bridge_slave_1: left allmulticast mode [ 1354.534697][ T8696] bridge_slave_1: left promiscuous mode [ 1354.554831][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.603084][ T8696] bridge_slave_0: left allmulticast mode [ 1354.613580][ T8696] bridge_slave_0: left promiscuous mode [ 1354.641313][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.722839][ T8696] bridge_slave_1: left allmulticast mode [ 1354.741295][ T8696] bridge_slave_1: left promiscuous mode [ 1354.780826][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.851548][ T8696] bridge_slave_0: left allmulticast mode [ 1354.864411][ T8696] bridge_slave_0: left promiscuous mode [ 1354.882444][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.318483][ T8696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.363604][ T8696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.421269][ T8696] bond0 (unregistering): Released all slaves [ 1357.756919][ T8696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.798839][ T8696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.817926][ T8696] bond0 (unregistering): Released all slaves [ 1358.070777][T15619] hsr_slave_0: entered promiscuous mode [ 1358.077869][T15619] hsr_slave_1: entered promiscuous mode [ 1358.099706][T15619] debugfs: 'hsr0' already exists in 'hsr' [ 1358.107360][T15619] Cannot create hsr debugfs directory [ 1358.199275][T15696] lo speed is unknown, defaulting to 1000 [ 1358.249054][ T8696] hsr_slave_0: left promiscuous mode [ 1358.273518][ T8696] hsr_slave_1: left promiscuous mode [ 1358.288711][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.307519][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.336566][ T8696] hsr_slave_0: left promiscuous mode [ 1358.348049][ T8696] hsr_slave_1: left promiscuous mode [ 1358.365761][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.375376][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.613412][ T8696] team0 (unregistering): Port device team_slave_1 removed [ 1358.663849][ T8696] team0 (unregistering): Port device team_slave_0 removed [ 1359.266814][ T8696] team0 (unregistering): Port device team_slave_1 removed [ 1359.302125][ T8696] team0 (unregistering): Port device team_slave_0 removed [ 1360.860800][T15619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1360.891231][T15619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1360.920177][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.970822][T15619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1361.031491][T15619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1361.068667][T15619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1361.099842][T15619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1361.204377][T15619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1361.256546][T15619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1361.434578][T15696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.459473][T15696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.484044][T15696] bridge_slave_0: entered allmulticast mode [ 1361.504839][T15696] bridge_slave_0: entered promiscuous mode [ 1361.529114][T15696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.547266][T15696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.569765][T15696] bridge_slave_1: entered allmulticast mode [ 1361.589575][T15696] bridge_slave_1: entered promiscuous mode [ 1361.683692][T15696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.744247][T15696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.883908][T15696] team0: Port device team_slave_0 added [ 1361.916759][T15696] team0: Port device team_slave_1 added [ 1362.051071][T15696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.072524][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.127580][T15696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.159720][T15696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.197855][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.264362][T15696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.364748][T15696] hsr_slave_0: entered promiscuous mode [ 1362.382006][T15696] hsr_slave_1: entered promiscuous mode [ 1362.528930][T15619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.642480][T15619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.683520][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.690816][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.798892][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.806012][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.120292][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1363.621440][T15696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1363.649249][T15696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1363.678159][T15696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1363.693858][T15696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1363.711263][T15696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1363.725730][T15696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1363.743753][T15696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1363.763027][T15696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1363.902943][T15696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.932264][T15696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.947931][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.955090][ T8696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.008997][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.016224][ T5811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.059854][T15619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.646729][T15619] veth0_vlan: entered promiscuous mode [ 1364.669702][T15619] veth1_vlan: entered promiscuous mode [ 1364.737816][T15619] veth0_macvtap: entered promiscuous mode [ 1364.771271][T15619] veth1_macvtap: entered promiscuous mode [ 1364.835495][T15619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.876425][T15619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.928426][ T8689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.962748][ T8689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.011605][ T8696] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.034112][ T8696] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.225658][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1365.261175][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.291108][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.365923][ T8689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.375929][T15696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.383768][ T8689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.568959][T15696] veth0_vlan: entered promiscuous mode [ 1365.693307][T15696] veth1_vlan: entered promiscuous mode [ 1367.065042][T15905] loop2: detected capacity change from 0 to 512 [ 1368.122655][T15905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.142176][T15905] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.483049][T15696] veth0_macvtap: entered promiscuous mode [ 1368.515504][T14297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.535831][T15696] veth1_macvtap: entered promiscuous mode [ 1368.553813][T15901] futex_wake_op: syz.4.1505 tries to shift op by 144; fix this program [ 1368.798141][T15696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.850314][T15696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.962224][ T8696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.011909][ T8696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.116787][ T75] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.186348][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.589852][ T8238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.692320][ T8238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.719854][T15942] loop6: detected capacity change from 0 to 16 [ 1372.710545][ T8700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.860782][ T8700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.548971][T15947] kAFS: No cell specified [ 1375.018182][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1375.608689][T15960] overlayfs: failed to resolve './file0': -2 [ 1378.550575][T15980] Bluetooth: MGMT ver 1.23 [ 1378.949700][T15986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1731'. [ 1378.958892][T15986] openvswitch: netlink: Flow key attr not present in new flow. [ 1380.579264][T15997] loop3: detected capacity change from 0 to 1024 [ 1381.149843][T16006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1381.335046][T16004] binder: 16003:16004 ioctl c0306201 0 returned -14 [ 1382.379039][T16013] kAFS: No cell specified [ 1385.132485][T16024] Trying to write to read-only block-device nullb0 [ 1385.576148][T16027] overlayfs: failed to resolve './file0': -2 [ 1389.345127][T16037] netlink: 'syz.9.1736': attribute type 2 has an invalid length. [ 1389.353511][T16037] netlink: 'syz.9.1736': attribute type 1 has an invalid length. [ 1389.618104][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1390.434699][T16036] Process accounting resumed [ 1390.901575][T10328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1390.928600][T10328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1390.942471][T10328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1390.955628][T10328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1390.966426][T10328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1393.063942][T10328] Bluetooth: hci3: command tx timeout [ 1395.360930][T10328] Bluetooth: hci3: command tx timeout [ 1396.374868][ T5281] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1396.663972][T16055] lo speed is unknown, defaulting to 1000 [ 1397.495284][T10328] Bluetooth: hci3: command tx timeout [ 1399.587041][T10328] Bluetooth: hci3: command tx timeout [ 1399.800066][ T8689] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.062686][T16112] futex_wake_op: syz.2.1787 tries to shift op by 144; fix this program [ 1404.137916][T16135] kAFS: No cell specified [ 1405.958640][T16147] loop0: detected capacity change from 0 to 16 [ 1406.583294][ T8689] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.040148][T16155] netlink: 'syz.4.1785': attribute type 11 has an invalid length. [ 1409.211002][ T8689] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.404708][T16170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1409.412252][T16170] IPv6: NLM_F_CREATE should be set when creating new route [ 1410.607952][ T8689] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.229875][T16190] loop0: detected capacity change from 0 to 512 [ 1413.339107][T16190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1413.352197][T16190] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1413.565510][T15696] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.197277][T16198] kAFS: No cell specified [ 1416.026900][T16055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.057947][T16055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.084429][T16055] bridge_slave_0: entered allmulticast mode [ 1416.107986][T16055] bridge_slave_0: entered promiscuous mode [ 1416.264239][T16209] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1417.798172][T16055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.808417][T16055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.771167][T16055] bridge_slave_1: entered allmulticast mode [ 1419.841918][T16055] bridge_slave_1: entered promiscuous mode [ 1420.256176][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1420.327204][T16055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.365232][T16055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.434544][ T8689] bridge_slave_1: left allmulticast mode [ 1420.448404][ T8689] bridge_slave_1: left promiscuous mode [ 1420.465776][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.525096][ T8689] bridge_slave_0: left allmulticast mode [ 1420.543809][ T8689] bridge_slave_0: left promiscuous mode [ 1420.553433][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.562931][T16238] loop2: detected capacity change from 0 to 16 [ 1422.361249][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.587275][ T8689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1423.172958][ T8689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1423.480078][ T8689] bond0 (unregistering): Released all slaves [ 1423.965523][T16055] team0: Port device team_slave_0 added [ 1424.035909][T16055] team0: Port device team_slave_1 added [ 1424.335854][T16254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1424.343185][T16254] IPv6: NLM_F_CREATE should be set when creating new route [ 1424.344899][T16250] veth0_macvtap: entered allmulticast mode [ 1424.521479][T16250] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1425.241570][T16055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.313739][T16055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.409195][T16055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.465913][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1425.483117][T16055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.535248][T16055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.604523][T16055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.882939][T16267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1425.890433][T16267] IPv6: NLM_F_CREATE should be set when creating new route [ 1429.169354][T16055] hsr_slave_0: entered promiscuous mode [ 1429.207225][T16055] hsr_slave_1: entered promiscuous mode [ 1429.239760][T16055] debugfs: 'hsr0' already exists in 'hsr' [ 1429.269099][T16055] Cannot create hsr debugfs directory [ 1430.092375][T16311] No source specified [ 1431.297587][T16330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1431.305039][T16330] IPv6: NLM_F_CREATE should be set when creating new route [ 1431.397616][ T8689] hsr_slave_0: left promiscuous mode [ 1432.000207][ T8689] hsr_slave_1: left promiscuous mode [ 1432.042532][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.264897][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.605695][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1432.613249][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.694194][T16332] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd3": -EINTR [ 1432.829652][ T8689] veth1_macvtap: left promiscuous mode [ 1433.146416][ T8689] veth0_macvtap: left promiscuous mode [ 1433.219820][ T8689] veth1_vlan: left promiscuous mode [ 1434.085601][ T8689] veth0_vlan: left promiscuous mode [ 1434.863038][T16355] 9pnet_fd: Insufficient options for proto=fd [ 1435.601026][T11428] IPVS: starting estimator thread 0... [ 1435.834449][T16356] IPVS: using max 23 ests per chain, 55200 per kthread [ 1436.161332][T16359] Device name cannot be null; rc = [-22] [ 1437.762225][ T8689] team0 (unregistering): Port device team_slave_1 removed [ 1438.691546][T16381] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1439.123988][ T8689] team0 (unregistering): Port device team_slave_0 removed [ 1439.147924][T16392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1439.946445][T16398] loop3: detected capacity change from 0 to 16 [ 1441.565837][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1441.887036][T16404] loop3: detected capacity change from 0 to 32768 [ 1441.977146][T16404] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1442.685526][ T30] audit: type=1800 audit(2000000151.128:33): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1835" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 1444.585151][T16419] loop6: detected capacity change from 0 to 512 [ 1445.964958][T16419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1445.978420][T16419] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1447.560460][T11882] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.374065][T10989] ocfs2: Unmounting device (7,3) on (node local) [ 1451.639995][T16459] loop0: detected capacity change from 0 to 32768 [ 1451.732888][T16459] (syz.0.1848,16459,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1451.747101][T16459] (syz.0.1848,16459,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1451.789420][T16459] JBD2: Ignoring recovery information on journal [ 1451.890600][T16459] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1453.420402][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1453.433511][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1453.447136][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1453.476333][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1453.488382][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1454.406064][T16482] loop4: detected capacity change from 0 to 40427 [ 1454.474575][T16482] F2FS-fs (loop4): invalid crc value [ 1454.580846][T16482] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1454.596219][T16482] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 1454.603903][T16482] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1454.614776][T16482] F2FS-fs (loop4): Start checkpoint disabled! [ 1454.644761][T16482] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 1454.652668][T16482] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1455.193902][ T5634] Bluetooth: hci6: command 0x0406 tx timeout [ 1455.565040][ T8308] kworker/u8:21: attempt to access beyond end of device [ 1455.565040][ T8308] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1455.639634][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1455.646433][T10328] Bluetooth: hci0: command tx timeout [ 1455.670573][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 1455.670611][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1455.670630][ T8308] Workqueue: writeback wb_workfn (flush-7:4) [ 1455.670679][ T8308] Call Trace: [ 1455.670688][ T8308] [ 1455.670699][ T8308] dump_stack_lvl+0x100/0x190 [ 1455.670733][ T8308] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1455.670781][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.670815][ T8308] ? errseq_set+0xe3/0x150 [ 1455.670867][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.670906][ T8308] f2fs_write_end_bio+0xf53/0x1340 [ 1455.670940][ T8308] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1455.670976][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.671017][ T8308] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1455.671047][ T8308] bio_endio+0x778/0x8e0 [ 1455.671084][ T8308] submit_bio_noacct+0x64c/0x1ff0 [ 1455.671137][ T8308] f2fs_submit_write_bio+0x133/0x330 [ 1455.671185][ T8308] __submit_merged_bio+0x330/0x7b0 [ 1455.671214][ T8308] ? rcu_is_watching+0x12/0xc0 [ 1455.671259][ T8308] __submit_merged_write_cond+0x3fe/0x510 [ 1455.671298][ T8308] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1455.671338][ T8308] ? __pfx___might_resched+0x10/0x10 [ 1455.671368][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.671402][ T8308] ? folio_clear_dirty_for_io+0x178/0x960 [ 1455.671453][ T8308] f2fs_write_cache_pages+0x20e9/0x2630 [ 1455.671508][ T8308] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1455.671553][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.671587][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.671625][ T8308] ? find_held_lock+0x2b/0x80 [ 1455.671666][ T8308] ? nr_blockdev_pages+0xde/0x120 [ 1455.671709][ T8308] ? nr_blockdev_pages+0xde/0x120 [ 1455.671751][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.671800][ T8308] ? si_meminfo+0x118/0x230 [ 1455.671832][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.671870][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.671951][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.671985][ T8308] ? __lock_acquire+0x49f/0x1a40 [ 1455.672018][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.672051][ T8308] ? rcu_is_watching+0x12/0xc0 [ 1455.672096][ T8308] f2fs_write_data_pages+0x799/0x16d0 [ 1455.672133][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.672176][ T8308] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1455.672227][ T8308] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1455.672267][ T8308] do_writepages+0x278/0x600 [ 1455.672317][ T8308] ? __pfx_do_writepages+0x10/0x10 [ 1455.672364][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.672403][ T8308] __writeback_single_inode+0x164/0x1300 [ 1455.672441][ T8308] ? find_held_lock+0x2b/0x80 [ 1455.672485][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.672522][ T8308] ? __pfx___writeback_single_inode+0x10/0x10 [ 1455.672560][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.672593][ T8308] ? do_raw_spin_unlock+0x145/0x1e0 [ 1455.672638][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.672676][ T8308] writeback_sb_inodes+0x766/0x1c50 [ 1455.672731][ T8308] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1455.672769][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.672855][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.672888][ T8308] ? rcu_is_watching+0x12/0xc0 [ 1455.672928][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.672962][ T8308] ? queue_io+0x287/0x530 [ 1455.672996][ T8308] wb_writeback+0x1c0/0xb50 [ 1455.673043][ T8308] ? __pfx_wb_writeback+0x10/0x10 [ 1455.673090][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.673124][ T8308] ? mark_held_locks+0x40/0x70 [ 1455.673155][ T8308] ? _raw_spin_unlock_irq+0x23/0x50 [ 1455.673192][ T8308] wb_workfn+0x143/0xc80 [ 1455.673233][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.673267][ T8308] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1455.673304][ T8308] ? __pfx_wb_workfn+0x10/0x10 [ 1455.673344][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.673381][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.673419][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.673453][ T8308] ? rcu_is_watching+0x12/0xc0 [ 1455.673499][ T8308] process_one_work+0xa23/0x1940 [ 1455.673543][ T8308] ? __pfx_process_one_work+0x10/0x10 [ 1455.673570][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.673616][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.673655][ T8308] worker_thread+0x5ef/0xe50 [ 1455.673693][ T8308] ? __pfx_worker_thread+0x10/0x10 [ 1455.673723][ T8308] ? kthread+0x13a/0x450 [ 1455.673766][ T8308] ? __pfx_worker_thread+0x10/0x10 [ 1455.673792][ T8308] kthread+0x370/0x450 [ 1455.673840][ T8308] ? __pfx_kthread+0x10/0x10 [ 1455.673886][ T8308] ret_from_fork+0x72b/0xd50 [ 1455.673926][ T8308] ? __pfx_ret_from_fork+0x10/0x10 [ 1455.673966][ T8308] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1455.673999][ T8308] ? __switch_to+0x800/0x10f0 [ 1455.674044][ T8308] ? __switch_to_asm+0x39/0x70 [ 1455.674082][ T8308] ? __pfx_kthread+0x10/0x10 [ 1455.674129][ T8308] ret_from_fork_asm+0x1a/0x30 [ 1455.674187][ T8308] [ 1456.385160][ T8308] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1456.414479][T15696] ocfs2: Unmounting device (7,0) on (node local) [ 1457.724550][T10328] Bluetooth: hci0: command tx timeout [ 1458.524903][T16532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1458.651905][T16519] binder: 16518:16519 ioctl c0306201 200000002580 returned -14 [ 1459.275775][T16477] lo speed is unknown, defaulting to 1000 [ 1461.328777][T10328] Bluetooth: hci0: command tx timeout [ 1462.139133][T16541] loop4: detected capacity change from 0 to 1024 [ 1465.051560][T10328] Bluetooth: hci0: command tx timeout [ 1465.773272][T16565] syzkaller0: entered promiscuous mode [ 1465.808054][T16565] syzkaller0: entered allmulticast mode [ 1467.476366][ T8693] bridge_slave_1: left allmulticast mode [ 1467.515131][ T8693] bridge_slave_1: left promiscuous mode [ 1467.544602][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.603153][ T8693] bridge_slave_0: left allmulticast mode [ 1467.645193][ T8693] bridge_slave_0: left promiscuous mode [ 1467.675950][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.853340][T16596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1469.804292][T16609] loop4: detected capacity change from 0 to 16 [ 1470.212531][ T8693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.328265][ T8693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.394775][ T8693] bond0 (unregistering): Released all slaves [ 1470.646060][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1471.758965][ T8693] hsr_slave_0: left promiscuous mode [ 1471.991672][ T8693] hsr_slave_1: left promiscuous mode [ 1472.032922][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.666805][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.543830][ T8693] team0 (unregistering): Port device team_slave_1 removed [ 1475.569278][T16674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1476.655424][ T8693] team0 (unregistering): Port device team_slave_0 removed [ 1477.439974][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.462968][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.488609][T16477] bridge_slave_0: entered allmulticast mode [ 1477.519641][T16477] bridge_slave_0: entered promiscuous mode [ 1477.574177][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.611428][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.676804][T16477] bridge_slave_1: entered allmulticast mode [ 1477.706415][T16477] bridge_slave_1: entered promiscuous mode [ 1478.088851][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.141739][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.205158][T16477] team0: Port device team_slave_0 added [ 1479.288091][T16477] team0: Port device team_slave_1 added [ 1479.841561][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.328500][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.606746][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.621999][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.629205][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.662898][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.919251][T16477] hsr_slave_0: entered promiscuous mode [ 1480.939814][T16477] hsr_slave_1: entered promiscuous mode [ 1480.948163][T16477] debugfs: 'hsr0' already exists in 'hsr' [ 1480.954429][T16477] Cannot create hsr debugfs directory [ 1481.131607][T16754] overlay: Unknown parameter '/' [ 1481.188905][T16754] overlayfs: overlapping lowerdir path [ 1483.103420][T16770] veth0_macvtap: entered allmulticast mode [ 1483.135068][T16770] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1483.795674][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.078245][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1923'. [ 1485.288671][T16815] netlink: 'syz.6.1923': attribute type 10 has an invalid length. [ 1487.047816][T16821] usb251xb serial8250: supply vdd not found, using dummy regulator [ 1487.074510][T16814] tipc: Started in network mode [ 1487.090025][T16814] tipc: Node identity 1000001, cluster identity 4369 [ 1487.105224][T16814] tipc: Node number set to 16777217 [ 1487.232069][T16821] usb251xb serial8250: hub is put in default configuration. [ 1487.277940][T16821] usb251xb serial8250: Hub probed successfully [ 1488.615051][T16815] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1490.076508][T16477] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1491.871285][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1492.132427][T16477] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1492.211520][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1492.279327][T16477] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1492.324999][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1492.419231][T16477] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1493.714289][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1495.590872][T16894] loop0: detected capacity change from 0 to 512 [ 1495.598420][T16894] EXT4-fs: inline encryption not supported [ 1495.810361][T16894] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1495.824453][T16894] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.1941: invalid indirect mapped block 2683928664 (level 1) [ 1495.839436][T16894] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1495.849417][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1495.867980][ C1] EXT4-fs (loop0): initial error at time 2000000204: ext4_free_branches:1020: inode 13 [ 1495.877735][ C1] EXT4-fs (loop0): last error at time 2000000204: ext4_free_branches:1020: inode 13 [ 1495.896649][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.908596][T16894] EXT4-fs (loop0): 1 truncate cleaned up [ 1495.942242][T16894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1495.957643][T16477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.994205][T16900] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1496.000717][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.008432][ T8688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.239418][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.246625][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.271592][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 1496.327940][T15696] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.659099][ T8110] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 1503.854875][ T8110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.081629][ T8110] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1504.091535][ T8110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.235228][ T8110] usb 1-1: config 0 descriptor?? [ 1504.608620][T16966] block device autoloading is deprecated and will be removed. [ 1505.142716][ T8110] usb 1-1: can't set config #0, error -71 [ 1505.207785][ T8110] usb 1-1: USB disconnect, device number 3 [ 1505.348226][T16976] Device name cannot be null; rc = [-22] [ 1505.613667][T16981] futex_wake_op: syz.0.1961 tries to shift op by 144; fix this program [ 1509.037096][T16994] binder: 16990:16994 ioctl c0306201 200000002580 returned -14 [ 1512.301107][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.529609][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1514.411452][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1514.429164][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1514.446336][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1514.477989][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1514.559202][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1514.918505][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'. [ 1515.080749][T17028] netlink: 'syz.4.1971': attribute type 10 has an invalid length. [ 1515.187968][T17028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.195717][T17028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.672355][T10328] Bluetooth: hci3: command tx timeout [ 1516.979778][T17028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.987066][T17028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.999188][T17028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.006432][T17028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.305272][T17050] futex_wake_op: syz.6.1977 tries to shift op by 144; fix this program [ 1518.789015][T10328] Bluetooth: hci3: command tx timeout [ 1518.955700][T17028] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1519.606625][T17064] binder: 17063:17064 ioctl c0306201 0 returned -14 [ 1520.839030][T10328] Bluetooth: hci3: command tx timeout [ 1521.730929][T17019] lo speed is unknown, defaulting to 1000 [ 1522.129797][ T8149] bridge_slave_1: left allmulticast mode [ 1522.135572][ T8149] bridge_slave_1: left promiscuous mode [ 1522.141836][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.151758][ T8149] bridge_slave_0: left allmulticast mode [ 1522.157417][ T8149] bridge_slave_0: left promiscuous mode [ 1522.164859][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.354577][ T8149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1522.374472][ T8149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.388887][ T8149] bond0 (unregistering): Released all slaves [ 1522.556418][ T8149] hsr_slave_0: left promiscuous mode [ 1522.594441][ T8149] hsr_slave_1: left promiscuous mode [ 1522.602549][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.611840][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.908395][T10328] Bluetooth: hci3: command tx timeout [ 1522.922592][ T8149] team0 (unregistering): Port device team_slave_1 removed [ 1522.951399][ T8149] team0 (unregistering): Port device team_slave_0 removed [ 1523.324781][T17019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.333417][T17019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.342182][T17019] bridge_slave_0: entered allmulticast mode [ 1523.350607][T17019] bridge_slave_0: entered promiscuous mode [ 1523.360766][T17019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.368233][T17019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.375590][T17019] bridge_slave_1: entered allmulticast mode [ 1523.390023][T17019] bridge_slave_1: entered promiscuous mode [ 1523.518985][T17019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.553753][T17019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.649144][T17019] team0: Port device team_slave_0 added [ 1523.659348][T17019] team0: Port device team_slave_1 added [ 1523.752760][T17019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.760024][T17019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.800316][T17019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.820983][T17019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.831642][T17019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.860025][T17019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.951724][T17019] hsr_slave_0: entered promiscuous mode [ 1523.959429][T17019] hsr_slave_1: entered promiscuous mode [ 1523.966321][T17019] debugfs: 'hsr0' already exists in 'hsr' [ 1523.976072][T17019] Cannot create hsr debugfs directory [ 1524.771649][T17019] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1524.786284][T17019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1524.797328][T17019] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1524.808793][T17019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1524.817552][T17019] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1524.846882][T17019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1524.863069][T17019] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1524.875211][T17019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1525.027126][T17019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.065401][T17019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.086524][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.093794][ T8688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.115307][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.122549][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.609616][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1525.820254][T17019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1525.912080][T17019] veth0_vlan: entered promiscuous mode [ 1525.933456][T17019] veth1_vlan: entered promiscuous mode [ 1525.985841][T17019] veth0_macvtap: entered promiscuous mode [ 1526.000218][T17019] veth1_macvtap: entered promiscuous mode [ 1526.027389][T17019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.047269][T17019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.077944][ T8686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.086744][ T8686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.108257][ T8700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.299999][ T8696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.330413][ T8700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.347996][ T8700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.404635][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.414751][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.105657][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1529.261761][T17208] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1529.392514][T17209] loop4: detected capacity change from 0 to 256 [ 1530.667244][T17208] ±ÿ: renamed from team_slave_1 (while UP) [ 1530.738326][T17209] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 1530.777992][T17196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1531.428880][ T5772] IPVS: starting estimator thread 0... [ 1531.623360][T17217] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1531.633832][T17220] IPVS: using max 21 ests per chain, 50400 per kthread [ 1536.606728][T17257] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1538.112648][T17265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 1538.114155][T17260] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 1538.142997][T17264] loop2: detected capacity change from 0 to 128 [ 1538.169905][T17264] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1538.211380][T17260] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode [ 1538.221694][T17264] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1539.221178][T17264] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1539.260267][T17265] netlink: 'syz.3.1993': attribute type 10 has an invalid length. [ 1539.922667][T17286] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1540.570772][T14297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1540.644521][T17265] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1541.748014][T17300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1542.333162][ T187] libceph: connect (1)[c::]:6789 error -101 [ 1542.380593][ T187] libceph: mon0 (1)[c::]:6789 connect error [ 1542.389954][T17307] ceph: No mds server is up or the cluster is laggy [ 1545.249201][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.947600][T17326] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd2": -EINTR [ 1549.554052][T17358] syzkaller0: entered promiscuous mode [ 1549.637611][T17358] syzkaller0: entered allmulticast mode [ 1551.558311][T17387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1552.848748][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1553.791560][T17402] loop2: detected capacity change from 0 to 40427 [ 1553.877231][T17402] F2FS-fs (loop2): invalid crc value [ 1553.976567][T17402] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1554.000434][T17402] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 1554.008188][T17402] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1554.021549][T17402] F2FS-fs (loop2): Start checkpoint disabled! [ 1554.098533][T17410] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1554.133549][T15919] IPVS: starting estimator thread 0... [ 1554.297115][T17402] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 1554.310914][T17402] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1554.569202][T17411] IPVS: using max 21 ests per chain, 50400 per kthread [ 1555.938859][ T8238] kworker/u8:20: attempt to access beyond end of device [ 1555.938859][ T8238] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1556.031152][ T8238] CPU: 1 UID: 0 PID: 8238 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 1556.031204][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1556.031230][ T8238] Workqueue: writeback wb_workfn (flush-7:2) [ 1556.031294][ T8238] Call Trace: [ 1556.031307][ T8238] [ 1556.031321][ T8238] dump_stack_lvl+0x100/0x190 [ 1556.031368][ T8238] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1556.031436][ T8238] ? f2fs_write_end_bio+0xf32/0x1340 [ 1556.031484][ T8238] f2fs_write_end_bio+0xf53/0x1340 [ 1556.031537][ T8238] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1556.031591][ T8238] ? bio_endio+0x76f/0x8e0 [ 1556.031638][ T8238] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1556.031681][ T8238] bio_endio+0x778/0x8e0 [ 1556.031729][ T8238] submit_bio_noacct+0x64c/0x1ff0 [ 1556.031804][ T8238] f2fs_submit_write_bio+0x133/0x330 [ 1556.031870][ T8238] __submit_merged_bio+0x330/0x7b0 [ 1556.031914][ T8238] ? rcu_is_watching+0x12/0xc0 [ 1556.031977][ T8238] __submit_merged_write_cond+0x3fe/0x510 [ 1556.032030][ T8238] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1556.032086][ T8238] ? __pfx___might_resched+0x10/0x10 [ 1556.032128][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.032175][ T8238] ? folio_clear_dirty_for_io+0x178/0x960 [ 1556.032246][ T8238] f2fs_write_cache_pages+0x20e9/0x2630 [ 1556.032318][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.032366][ T8238] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1556.032418][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.032474][ T8238] ? unwind_next_frame+0x3c8/0x2090 [ 1556.032542][ T8238] ? ret_from_fork_asm+0x1a/0x30 [ 1556.032604][ T8238] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1556.032749][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.032797][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.032842][ T8238] ? clockevents_program_event+0x1ef/0x820 [ 1556.032905][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.032952][ T8238] ? rcu_is_watching+0x12/0xc0 [ 1556.033012][ T8238] f2fs_write_data_pages+0x799/0x16d0 [ 1556.033060][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.033107][ T8238] ? find_held_lock+0x2b/0x80 [ 1556.033178][ T8238] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1556.033246][ T8238] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1556.033301][ T8238] do_writepages+0x278/0x600 [ 1556.033370][ T8238] ? __pfx_do_writepages+0x10/0x10 [ 1556.033435][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.033488][ T8238] __writeback_single_inode+0x164/0x1300 [ 1556.033546][ T8238] ? find_held_lock+0x2b/0x80 [ 1556.033607][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.033656][ T8238] ? __pfx___writeback_single_inode+0x10/0x10 [ 1556.033709][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.033755][ T8238] ? do_raw_spin_unlock+0x145/0x1e0 [ 1556.033809][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.033862][ T8238] writeback_sb_inodes+0x766/0x1c50 [ 1556.033937][ T8238] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1556.033989][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.034098][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.034145][ T8238] ? rcu_is_watching+0x12/0xc0 [ 1556.034200][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.034246][ T8238] ? queue_io+0x287/0x530 [ 1556.034293][ T8238] wb_writeback+0x1c0/0xb50 [ 1556.034357][ T8238] ? __pfx_wb_writeback+0x10/0x10 [ 1556.034420][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.034466][ T8238] ? mark_held_locks+0x40/0x70 [ 1556.034509][ T8238] ? _raw_spin_unlock_irq+0x23/0x50 [ 1556.034568][ T8238] wb_workfn+0x143/0xc80 [ 1556.034624][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.034670][ T8238] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1556.034720][ T8238] ? __pfx_wb_workfn+0x10/0x10 [ 1556.034775][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.034827][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.034877][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.034924][ T8238] ? rcu_is_watching+0x12/0xc0 [ 1556.034988][ T8238] process_one_work+0xa23/0x1940 [ 1556.035048][ T8238] ? __pfx_process_one_work+0x10/0x10 [ 1556.035084][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.035146][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.035201][ T8238] worker_thread+0x5ef/0xe50 [ 1556.035252][ T8238] ? __pfx_worker_thread+0x10/0x10 [ 1556.035293][ T8238] ? kthread+0x13a/0x450 [ 1556.035351][ T8238] ? __pfx_worker_thread+0x10/0x10 [ 1556.035388][ T8238] kthread+0x370/0x450 [ 1556.035447][ T8238] ? __pfx_kthread+0x10/0x10 [ 1556.035511][ T8238] ret_from_fork+0x72b/0xd50 [ 1556.035571][ T8238] ? __pfx_ret_from_fork+0x10/0x10 [ 1556.035624][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.035670][ T8238] ? __switch_to+0x800/0x10f0 [ 1556.035731][ T8238] ? __switch_to_asm+0x39/0x70 [ 1556.035784][ T8238] ? __pfx_kthread+0x10/0x10 [ 1556.035849][ T8238] ret_from_fork_asm+0x1a/0x30 [ 1556.035928][ T8238] [ 1556.861766][ T8238] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1556.868914][ T8238] CPU: 1 UID: 0 PID: 8238 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 1556.868964][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1556.868991][ T8238] Workqueue: writeback wb_workfn (flush-7:2) [ 1556.869056][ T8238] Call Trace: [ 1556.869068][ T8238] [ 1556.869083][ T8238] dump_stack_lvl+0x100/0x190 [ 1556.869131][ T8238] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1556.869196][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.869244][ T8238] ? errseq_set+0xe3/0x150 [ 1556.869304][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.869360][ T8238] f2fs_write_end_bio+0xf53/0x1340 [ 1556.869408][ T8238] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1556.869465][ T8238] ? bio_endio+0x76f/0x8e0 [ 1556.869511][ T8238] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1556.869553][ T8238] bio_endio+0x778/0x8e0 [ 1556.869604][ T8238] submit_bio_noacct+0x64c/0x1ff0 [ 1556.869680][ T8238] f2fs_submit_write_bio+0x133/0x330 [ 1556.869746][ T8238] __submit_merged_bio+0x330/0x7b0 [ 1556.869787][ T8238] ? rcu_is_watching+0x12/0xc0 [ 1556.869851][ T8238] __submit_merged_write_cond+0x3fe/0x510 [ 1556.869911][ T8238] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1556.869967][ T8238] ? __pfx___might_resched+0x10/0x10 [ 1556.870009][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.870056][ T8238] ? folio_clear_dirty_for_io+0x178/0x960 [ 1556.870128][ T8238] f2fs_write_cache_pages+0x20e9/0x2630 [ 1556.870205][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.870254][ T8238] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1556.870305][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.870364][ T8238] ? unwind_next_frame+0x3c8/0x2090 [ 1556.870425][ T8238] ? ret_from_fork_asm+0x1a/0x30 [ 1556.870488][ T8238] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1556.870648][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.870695][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.870741][ T8238] ? clockevents_program_event+0x1ef/0x820 [ 1556.870804][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.870850][ T8238] ? rcu_is_watching+0x12/0xc0 [ 1556.870919][ T8238] f2fs_write_data_pages+0x799/0x16d0 [ 1556.870968][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.871015][ T8238] ? find_held_lock+0x2b/0x80 [ 1556.871087][ T8238] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1556.871159][ T8238] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1556.871215][ T8238] do_writepages+0x278/0x600 [ 1556.871285][ T8238] ? __pfx_do_writepages+0x10/0x10 [ 1556.871351][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.871404][ T8238] __writeback_single_inode+0x164/0x1300 [ 1556.871457][ T8238] ? find_held_lock+0x2b/0x80 [ 1556.871518][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.871568][ T8238] ? __pfx___writeback_single_inode+0x10/0x10 [ 1556.871620][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.871666][ T8238] ? do_raw_spin_unlock+0x145/0x1e0 [ 1556.871719][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.871774][ T8238] writeback_sb_inodes+0x766/0x1c50 [ 1556.871854][ T8238] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1556.871912][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.872033][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.872078][ T8238] ? rcu_is_watching+0x12/0xc0 [ 1556.872132][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.872179][ T8238] ? queue_io+0x287/0x530 [ 1556.872226][ T8238] wb_writeback+0x1c0/0xb50 [ 1556.872294][ T8238] ? __pfx_wb_writeback+0x10/0x10 [ 1556.872360][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.872406][ T8238] ? mark_held_locks+0x40/0x70 [ 1556.872449][ T8238] ? _raw_spin_unlock_irq+0x23/0x50 [ 1556.872503][ T8238] wb_workfn+0x143/0xc80 [ 1556.872561][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.872606][ T8238] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1556.872657][ T8238] ? __pfx_wb_workfn+0x10/0x10 [ 1556.872714][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.872766][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.872817][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.872863][ T8238] ? rcu_is_watching+0x12/0xc0 [ 1556.872933][ T8238] process_one_work+0xa23/0x1940 [ 1556.872997][ T8238] ? __pfx_process_one_work+0x10/0x10 [ 1556.873033][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.873099][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.873154][ T8238] worker_thread+0x5ef/0xe50 [ 1556.873208][ T8238] ? __pfx_worker_thread+0x10/0x10 [ 1556.873250][ T8238] ? kthread+0x13a/0x450 [ 1556.873308][ T8238] ? __pfx_worker_thread+0x10/0x10 [ 1556.873345][ T8238] kthread+0x370/0x450 [ 1556.873403][ T8238] ? __pfx_kthread+0x10/0x10 [ 1556.873467][ T8238] ret_from_fork+0x72b/0xd50 [ 1556.873522][ T8238] ? __pfx_ret_from_fork+0x10/0x10 [ 1556.873576][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1556.873623][ T8238] ? __switch_to+0x800/0x10f0 [ 1556.873684][ T8238] ? __switch_to_asm+0x39/0x70 [ 1556.873737][ T8238] ? __pfx_kthread+0x10/0x10 [ 1556.873802][ T8238] ret_from_fork_asm+0x1a/0x30 [ 1556.873890][ T8238] [ 1556.873905][ T8238] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1558.262618][T17429] loop4: detected capacity change from 0 to 512 [ 1559.514107][T17429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1559.528538][T17429] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1559.803362][T15619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.481943][T17450] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1561.549020][T17450] CIFS: Attempting to mount //127.0.0.1/share [ 1561.688475][T17453] veth0_macvtap: entered allmulticast mode [ 1561.735314][T17453] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1561.977944][T17461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1562.070742][T17450] CIFS: VFS: \\127.0.0.1 Error -32 sending data on socket to server [ 1562.288810][T17450] ------------[ cut here ]------------ [ 1562.297325][T17450] server->in_flight == 0 [ 1562.297349][T17450] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790, CPU#1: syz.3.2041/17450 [ 1562.312519][T17450] Modules linked in: [ 1562.318724][T17450] CPU: 1 UID: 0 PID: 17450 Comm: syz.3.2041 Not tainted syzkaller #0 PREEMPT(full) [ 1562.329330][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1562.339515][T17450] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 1562.351602][T17450] Code: c6 e8 71 e2 b6 fe 84 db 0f 85 0a fb ff ff e8 54 e8 b6 fe 48 8d 3d ad e4 d6 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 3e e8 b6 fe 90 <0f> 0b 90 0f b6 05 0b 1c b7 0d 31 ff 89 c6 88 44 24 28 e8 36 e2 b6 [ 1562.371494][T17450] RSP: 0018:ffffc90003457208 EFLAGS: 00010283 [ 1562.377671][T17450] RAX: 000000000001b658 RBX: ffff88805d076300 RCX: ffffc90008125000 [ 1562.385776][T17450] RDX: 0000000000080000 RSI: ffffffff835368c2 RDI: ffff888021323e00 [ 1562.393786][T17450] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1562.402584][T17450] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003457448 [ 1562.411285][T17450] R13: 0000000000000200 R14: 0000000000000001 R15: ffff88805d076000 [ 1562.421460][T17450] FS: 00007f851f7c66c0(0000) GS:ffff888123ed9000(0000) knlGS:0000000000000000 [ 1562.432814][T17450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1562.439531][T17450] CR2: 0000200000004000 CR3: 0000000043250000 CR4: 0000000000350ef0 [ 1562.449063][T17450] Call Trace: [ 1562.452373][T17450] [ 1562.455330][T17450] ? compound_send_recv+0xe60/0x2a10 [ 1562.460801][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.466579][T17450] compound_send_recv+0x1030/0x2a10 [ 1562.471862][T17450] ? __pfx_stack_trace_save+0x10/0x10 [ 1562.477403][T17450] ? __pfx_compound_send_recv+0x10/0x10 [ 1562.483019][T17450] ? check_noncircular+0x97/0x160 [ 1562.488173][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.493861][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.499566][T17450] ? rcu_is_watching+0x12/0xc0 [ 1562.504730][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.510676][T17450] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1562.516678][T17450] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1562.523559][T17450] ? cifs_strtoUTF16+0x283/0x3e0 [ 1562.529385][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.535045][T17450] ? find_held_lock+0x2b/0x80 [ 1562.539809][T17450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1562.545862][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.551524][T17450] cifs_send_recv+0x43/0x60 [ 1562.556095][T17450] SMB2_negotiate+0x15c4/0x5380 [ 1562.561005][T17450] ? __pfx_SMB2_negotiate+0x10/0x10 [ 1562.566283][T17450] ? smb2_negotiate+0x57/0x80 [ 1562.570980][T17450] ? smb2_negotiate+0x57/0x80 [ 1562.575844][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.581591][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.587450][T17450] ? do_raw_spin_unlock+0x145/0x1e0 [ 1562.592747][T17450] ? cifs_negotiate_protocol+0x268/0x4c0 [ 1562.598510][T17450] cifs_negotiate_protocol+0x268/0x4c0 [ 1562.604044][T17450] cifs_get_smb_ses+0xfc9/0x2170 [ 1562.609145][T17450] cifs_mount_get_session+0xf8/0x460 [ 1562.614497][T17450] dfs_mount_share+0x200/0x1e20 [ 1562.619485][T17450] ? add_lock_to_list+0x99/0x110 [ 1562.626145][T17450] ? __pfx_dfs_mount_share+0x10/0x10 [ 1562.631546][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.638562][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.644281][T17450] ? __lock_acquire+0xd5b/0x1a40 [ 1562.649324][T17450] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1562.655226][T17450] cifs_mount+0xc4/0xdb0 [ 1562.659623][T17450] ? find_held_lock+0x2b/0x80 [ 1562.664376][T17450] ? find_nls+0x125/0x170 [ 1562.669217][T17450] ? find_nls+0x125/0x170 [ 1562.673572][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.679660][T17450] ? __pfx_cifs_mount+0x10/0x10 [ 1562.684564][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.690347][T17450] ? do_raw_spin_unlock+0x145/0x1e0 [ 1562.695690][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.701370][T17450] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 1562.706720][T17450] cifs_smb3_do_mount+0x2c0/0x1b20 [ 1562.711909][T17450] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 1562.717571][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.724825][T17450] smb3_get_tree+0x1fd/0x440 [ 1562.730721][T17450] vfs_get_tree+0x92/0x320 [ 1562.735221][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.740975][T17450] path_mount+0x7d0/0x23d0 [ 1562.745447][T17450] ? __pfx_path_mount+0x10/0x10 [ 1562.750412][T17450] ? lockdep_hardirqs_on+0x78/0x100 [ 1562.755813][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.761485][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.767183][T17450] ? kmem_cache_free+0x127/0x6b0 [ 1562.772165][T17450] ? __x64_sys_mount+0x293/0x310 [ 1562.777155][T17450] __x64_sys_mount+0x293/0x310 [ 1562.781954][T17450] ? __pfx___x64_sys_mount+0x10/0x10 [ 1562.787325][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1562.793001][T17450] do_syscall_64+0x115/0x870 [ 1562.797680][T17450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.803599][T17450] RIP: 0033:0x7f851e99e019 [ 1562.808081][T17450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.829099][T17450] RSP: 002b:00007f851f7c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1562.838435][T17450] RAX: ffffffffffffffda RBX: 00007f851ec26090 RCX: 00007f851e99e019 [ 1562.846484][T17450] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 1562.854469][T17450] RBP: 00007f851ea3500c R08: 0000000000000000 R09: 0000000000000000 [ 1562.862490][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.870539][T17450] R13: 00007f851ec26128 R14: 00007f851ec26090 R15: 00007ffc9de20418 [ 1562.878638][T17450] [ 1562.881675][T17450] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1562.888959][T17450] CPU: 1 UID: 0 PID: 17450 Comm: syz.3.2041 Not tainted syzkaller #0 PREEMPT(full) [ 1562.898348][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1562.908419][T17450] Call Trace: [ 1562.911701][T17450] [ 1562.914636][T17450] dump_stack_lvl+0x100/0x190 [ 1562.919339][T17450] vpanic+0x552/0x970 [ 1562.923345][T17450] ? __pfx_vpanic+0x10/0x10 [ 1562.927924][T17450] panic+0xd1/0xe0 [ 1562.931704][T17450] ? __pfx_panic+0x10/0x10 [ 1562.936180][T17450] check_panic_on_warn.cold+0x19/0x34 [ 1562.941570][T17450] ? smb2_add_credits+0x1213/0x1790 [ 1562.946801][T17450] __warn.cold+0x191/0x318 [ 1562.951261][T17450] __report_bug+0x30f/0x440 [ 1562.955787][T17450] ? smb2_add_credits+0x1213/0x1790 [ 1562.961037][T17450] ? __pfx___report_bug+0x10/0x10 [ 1562.966105][T17450] ? smb2_add_credits+0x1213/0x1790 [ 1562.971327][T17450] report_bug+0xb2/0x220 [ 1562.975627][T17450] ? smb2_add_credits+0x1213/0x1790 [ 1562.980881][T17450] handle_bug+0x16a/0x2a0 [ 1562.985242][T17450] exc_invalid_op+0x17/0x50 [ 1562.989788][T17450] asm_exc_invalid_op+0x1a/0x20 [ 1562.994651][T17450] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 1563.000476][T17450] Code: c6 e8 71 e2 b6 fe 84 db 0f 85 0a fb ff ff e8 54 e8 b6 fe 48 8d 3d ad e4 d6 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 3e e8 b6 fe 90 <0f> 0b 90 0f b6 05 0b 1c b7 0d 31 ff 89 c6 88 44 24 28 e8 36 e2 b6 [ 1563.020098][T17450] RSP: 0018:ffffc90003457208 EFLAGS: 00010283 [ 1563.026172][T17450] RAX: 000000000001b658 RBX: ffff88805d076300 RCX: ffffc90008125000 [ 1563.034148][T17450] RDX: 0000000000080000 RSI: ffffffff835368c2 RDI: ffff888021323e00 [ 1563.042150][T17450] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1563.050144][T17450] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003457448 [ 1563.058118][T17450] R13: 0000000000000200 R14: 0000000000000001 R15: ffff88805d076000 [ 1563.066111][T17450] ? smb2_add_credits+0x1212/0x1790 [ 1563.071374][T17450] ? smb2_add_credits+0x1212/0x1790 [ 1563.076599][T17450] ? compound_send_recv+0xe60/0x2a10 [ 1563.081902][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.087560][T17450] compound_send_recv+0x1030/0x2a10 [ 1563.092794][T17450] ? __pfx_stack_trace_save+0x10/0x10 [ 1563.098201][T17450] ? __pfx_compound_send_recv+0x10/0x10 [ 1563.103775][T17450] ? check_noncircular+0x97/0x160 [ 1563.108812][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.114463][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.120137][T17450] ? rcu_is_watching+0x12/0xc0 [ 1563.124940][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.130618][T17450] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1563.136555][T17450] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1563.142219][T17450] ? cifs_strtoUTF16+0x283/0x3e0 [ 1563.147187][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.152863][T17450] ? find_held_lock+0x2b/0x80 [ 1563.157573][T17450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1563.163594][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.169252][T17450] cifs_send_recv+0x43/0x60 [ 1563.173778][T17450] SMB2_negotiate+0x15c4/0x5380 [ 1563.178676][T17450] ? __pfx_SMB2_negotiate+0x10/0x10 [ 1563.183916][T17450] ? smb2_negotiate+0x57/0x80 [ 1563.188604][T17450] ? smb2_negotiate+0x57/0x80 [ 1563.193289][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.198964][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.204613][T17450] ? do_raw_spin_unlock+0x145/0x1e0 [ 1563.209847][T17450] ? cifs_negotiate_protocol+0x268/0x4c0 [ 1563.215516][T17450] cifs_negotiate_protocol+0x268/0x4c0 [ 1563.221048][T17450] cifs_get_smb_ses+0xfc9/0x2170 [ 1563.226031][T17450] cifs_mount_get_session+0xf8/0x460 [ 1563.231432][T17450] dfs_mount_share+0x200/0x1e20 [ 1563.236327][T17450] ? add_lock_to_list+0x99/0x110 [ 1563.241360][T17450] ? __pfx_dfs_mount_share+0x10/0x10 [ 1563.246686][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.252361][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.258020][T17450] ? __lock_acquire+0xd5b/0x1a40 [ 1563.262985][T17450] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1563.268830][T17450] cifs_mount+0xc4/0xdb0 [ 1563.273126][T17450] ? find_held_lock+0x2b/0x80 [ 1563.277832][T17450] ? find_nls+0x125/0x170 [ 1563.282202][T17450] ? find_nls+0x125/0x170 [ 1563.286563][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.292224][T17450] ? __pfx_cifs_mount+0x10/0x10 [ 1563.297099][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.302756][T17450] ? do_raw_spin_unlock+0x145/0x1e0 [ 1563.308011][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.313653][T17450] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 1563.318877][T17450] cifs_smb3_do_mount+0x2c0/0x1b20 [ 1563.324029][T17450] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 1563.329602][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.335261][T17450] smb3_get_tree+0x1fd/0x440 [ 1563.339875][T17450] vfs_get_tree+0x92/0x320 [ 1563.344304][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.349958][T17450] path_mount+0x7d0/0x23d0 [ 1563.354398][T17450] ? __pfx_path_mount+0x10/0x10 [ 1563.359259][T17450] ? lockdep_hardirqs_on+0x78/0x100 [ 1563.364479][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.370166][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.375823][T17450] ? kmem_cache_free+0x127/0x6b0 [ 1563.380795][T17450] ? __x64_sys_mount+0x293/0x310 [ 1563.385746][T17450] __x64_sys_mount+0x293/0x310 [ 1563.390549][T17450] ? __pfx___x64_sys_mount+0x10/0x10 [ 1563.395868][T17450] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1563.401527][T17450] do_syscall_64+0x115/0x870 [ 1563.406145][T17450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.412047][T17450] RIP: 0033:0x7f851e99e019 [ 1563.416469][T17450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.436092][T17450] RSP: 002b:00007f851f7c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1563.444519][T17450] RAX: ffffffffffffffda RBX: 00007f851ec26090 RCX: 00007f851e99e019 [ 1563.452499][T17450] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 1563.460478][T17450] RBP: 00007f851ea3500c R08: 0000000000000000 R09: 0000000000000000 [ 1563.468456][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1563.476431][T17450] R13: 00007f851ec26128 R14: 00007f851ec26090 R15: 00007ffc9de20418 [ 1563.484449][T17450] [ 1563.487721][T17450] Kernel Offset: disabled [ 1563.492044][T17450] Rebooting in 86400 seconds..