last executing test programs: 7m36.833528945s ago: executing program 2 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) ppoll(&(0x7f0000000500)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x8000, 0x2, 0x2c2}) 7m32.244661609s ago: executing program 2 (id=710): r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000340)='\x00'/11, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sec/tomoyo/query\x00', 0xa00c0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000006c0)="a9be6420edee6e6b228f0751afc7b27eb73586213ba3213856a6f45b425d9a5a9c863f5e396e5ac0a321242b75a02b975929ec52989eabbaaafeeabfa127263666810e14acf4d9714218b3a06c65664e37fdcb38bd01776f9b94c794b799288ee4c49bad9722", 0x66, r1) keyctl$revoke(0x3, r7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 7m28.475192092s ago: executing program 2 (id=714): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) close(r2) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r4, 0x5) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 7m27.468346428s ago: executing program 2 (id=715): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x40) sendfile(r0, r0, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSPGRP(r4, 0x8902, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r1, 0x5) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) write$P9_RSTATu(r5, 0x0, 0x6e) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x3, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r8}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 7m26.14734831s ago: executing program 2 (id=718): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x2008c000}, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019640)=0x80000000000003) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000196c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x24000808) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={0x0}}, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) write(r0, &(0x7f0000000100)='isp1301 0x2', 0xb) 7m23.573329855s ago: executing program 2 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) ppoll(&(0x7f0000000500)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x8000, 0x2, 0x2c2}) 7m8.49322258s ago: executing program 32 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) ppoll(&(0x7f0000000500)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x8000, 0x2, 0x2c2}) 2m25.001402222s ago: executing program 4 (id=1173): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) ppoll(&(0x7f0000000500)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x8000, 0x2, 0x2c2}) 2m20.625085731s ago: executing program 4 (id=1176): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x12, 0x11, 0xa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x2000000003, 0x20000, 0x82a, 0x0, 0xc1, 0x80}) io_setup(0x2, &(0x7f0000000000)) connect(r3, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=@newchain={0x734, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xa}}, @filter_kind_options=@f_route={{0xa}, {0x6ec, 0x2, [@TCA_ROUTE4_ACT={0x424, 0x6, [@m_bpf={0xb8, 0x1a, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x9, 0x20000000, 0xf, 0x81}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x2f, 0x6, "852d406a41a6d1720513239a4693ea6a21dcd0f84fc9a1bcee6056264d2030a21ff0b0900b11283e773df3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x108, 0x0, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x3, 0x2, 0x9, 0xfff}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xfff, 0x9, 0x8, 0x3}, {0x267a, 0x80, 0x80, 0x5}, {0xd, 0x3, 0x8, 0x2}, {0x4, 0x3, 0x2, 0xffff}, {0x4, 0x1, 0x5, 0x9}, {0x3, 0x9, 0x0, 0x6d}, {0x3, 0x0, 0x1, 0x7ff}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xa2b9, 0x2, 0x1, 0x8, 0x2}}]}, {0x64, 0x6, "22ec92092fe3f33f0888d82404653561207adc426b0a946bb03ebd11f5db08f48e2d25334092f092762451af540b9271b683a48fa348241a464dc40bca469b61bc28bf2ac0e2a25e0558105a7bbf4e801bc09a89acb9f48a783e03ea122af164"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0xf4, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xcd05}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}]}, {0x8f, 0x6, "8bcad81e8acdb41b2c63d9f49ef987899f6b9e7468d2709b4d013deeae20c708a4814867dc65c75c0f1d415992e31362d738ff3140501ec436c84366ab37a867339e7788fff5fe8c8c0eb661bf7cc5e2ef844c8161c292b167d5e1ba6634d0e9f37742132ba26f394fe2b5c7359ab0778f0818fdb8a2a17183fdead12d7fa1f6d90ee892d4e321fc68f514"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x74, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x5, 0x2, 0x9f, 0x3}}]}, {0x30, 0x6, "0e91c4c9e6fa956d0b49da467332f2fe65fd7fc69559a24c334de45a69fcc449932d646a5ca52c502ee03c28"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xf8, 0x7, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x0, 0xffffffffffffffff, 0xfffffffc, 0x1000}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x8, 0x10000000, 0x0, 0x3e}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x6, 0x5, 0x3}, 0xdac}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x72c, 0x20000004, 0x4, 0xa}, 0x56}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7710, 0x10000000, 0x4, 0x401000}, 0x80}}]}, {0x3c, 0x6, "4213d28bcf26d0e5f477886607e00a21e04b4f0897b7b2c9b0b85aeafeed652f83005cfbe6bbfb7a49de886761de1cc265a64a69937c0a47"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x17c, 0x6, [@m_gact={0x78, 0x1f, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8ec, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x8001, 0x6, 0x1, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x10d3, 0x7}}]}, {0x1b, 0x6, "24d5d66420ac2c23173fc2a19f246709cc1e334885a84f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x100, 0xf, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x7fffffff, 0x8, 0x0, 0x7fff}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0xb8, 0x6, "7cc7da08ea380449d1f7ee7e68ae1df50a4316bcbdc5619a9db5f14ef1095f6a6ca54316a9348c31924903e7abecffaec2a578e5bbf49bfc68cdf77d74177307aa7877bcdf67d643ce7231b71a8cc253eb973a7d196503153dce9495b4d10dc19382ecead807e414df4f79cc90c6ea8b20ea0b6ded887f6b6071bf73909d2ba5673159cc9e89ac355a6ba80f3ab6b8a610d0b0f729816557670d72e30c82174afd1e760122c8c78ab325a62c15327b8eb2a5effb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_ACT={0x138, 0x6, [@m_xt={0x134, 0xf, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0xa3b7, 'security\x00', 0xfb, 0xdcc8}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffff893}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xc7, 0x6, "f863ab28e16cdd03a59debafaf753c148e0bd9ddaa70e9e729bc702c024c4ad44d941c7925267a70e6fe0766b7c8a81aef64606cc8f2e8e19b59acfdc4bf2754c829bc11e68ce86f5e1a886ffe7c250a69172d3f1da5a79c4518efa8e19ab3a3b8082c209714b1c63788218cdb2b404b06050944107a876823c0cec5ba2a48fb85ae5b63cd2d8b8d1876effd2520d93c8ad72b9e1116460c6b91cfca1ba570194467cdc3809b9b967a5fcc0fe4d786f57aab6d97eed229df63102217206d03d441ecf2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x81}}, @TCA_RATE={0x6, 0x5, {0xb}}]}, 0x734}}, 0x44004) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) r7 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) 2m15.638396504s ago: executing program 4 (id=1183): getpgid(0x0) r0 = io_uring_setup(0x665, &(0x7f0000000000)={0x0, 0xa34a, 0x1000, 0x3, 0x232}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, 0x0) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r6, 0x0, 0x61000006, 0x0) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) syz_open_dev$dvb_demux(0x0, 0x0, 0x414141) close_range(r0, 0xffffffffffffffff, 0x0) 2m12.871651163s ago: executing program 4 (id=1187): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x29414fdd1d35f159, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) getrusage(0x1, &(0x7f0000003ec0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000c784000008", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000b000000000000000000e3ffffffffffffff00000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) syz_open_dev$tty20(0xc, 0x4, 0x0) 2m8.220329389s ago: executing program 4 (id=1191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x3b, @multicast1, 0x4e23, 0x3, 'lblc\x00', 0x1, 0x7, 0x449}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x9, 0x3a}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r1], 0x58}, 0x1, 0x0, 0x0, 0x24008894}, 0x2000000) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000002700)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r2) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) pipe2$9p(0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000240)=ANY=[@ANYBLOB="6d61703d6f66662c636865636b3d7374726963740c579c1bf68dcb210d262ed0c13e2c63727566742c646d6f64653d3078303030303030303030303030303030342c756e68696465727365743d63703433372c6d61703d6f66662c6d6f64653d3030303030303030303030"], 0x0, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f3a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) mbind(&(0x7f0000c1b000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) bind$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2008c058) r5 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x8080) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000200)={0x0, "4c590d1de9ab1094e6fd27760d84742f"}) 2m7.702819832s ago: executing program 4 (id=1192): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) ppoll(&(0x7f0000000500)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x8000, 0x2, 0x2c2}) 1m51.967008593s ago: executing program 33 (id=1192): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) ppoll(&(0x7f0000000500)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x8000, 0x2, 0x2c2}) 22.511041528s ago: executing program 5 (id=1336): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x2, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000240)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000380)='n', 0x1) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x1000]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000000000000bc100000a6b400000fa00000000000009500000091e80723"], &(0x7f00000004c0)='GPL\x00', 0x2, 0xff06, &(0x7f0000000500)=""/195}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x6, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newsa={0x140, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0xfffffffd, 0x32}, @in=@loopback, {}, {0x0, 0x0, 0x7}, {}, 0x100, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1f4}]}, 0x140}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x8a, 0x4, 0x30, 0xd, "00080000000000000000000cadf100004000"}) r4 = syz_open_pts(r3, 0x141401) io_setup(0x1, &(0x7f0000000e00)) fcntl$setstatus(r4, 0x4, 0x2000) write(r4, &(0x7f0000000e40)="d5", 0xfffffedf) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000e80)=0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000ec0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) write(r5, &(0x7f0000001000)="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef", 0x40) timer_create(0x0, &(0x7f0000001040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001080)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000010c0)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000001100)={{0x77359400}}, 0x0) 20.140789218s ago: executing program 1 (id=1338): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121301, 0x0) 13.856450752s ago: executing program 1 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, 0x0) ppoll(&(0x7f0000000500)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x8000, 0x2, 0x2c2}) 13.801195443s ago: executing program 0 (id=1342): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019580)=0x7) io_setup(0x5, &(0x7f00000195c0)) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000019600)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000019a00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000019a80)=[{&(0x7f0000019ac0)="94", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000042000000000000000000ea0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000fffffff07b9af8ff00000000b6090000000000117baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 12.948179974s ago: executing program 5 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 12.765946488s ago: executing program 5 (id=1345): r0 = syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r9 = add_key$user(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), 0xc9, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)="20b6d8", 0x3, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000980)={r10, r9, r9}, 0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={'hmac(sha1)\x00'}}) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000600)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="48000000140081fb7059ae08060c040002ff0f039000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 12.522218284s ago: executing program 0 (id=1346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f00001a6000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c910}, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2$9p(&(0x7f0000000000), 0x800) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xf, 0x8041) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff9}]}]}, 0x58}}, 0x0) close(r5) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r9, &(0x7f0000001480)=0x2, 0x12) splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r10, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 11.768110183s ago: executing program 5 (id=1347): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x18) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f00000001c0)={0x1, 0x7fffffff, 0x0, 0x8, 0x7, 0x401, 0x3792, 0x400, 0x11b3, 0x0, 0xfff, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) fcntl$notify(r0, 0x402, 0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000140)='-$\'&*.-(^\x00', &(0x7f0000000180)) 10.430441935s ago: executing program 1 (id=1349): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c000180014553b3fffffffe0c00028008000140ac1414aa"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) capset(0x0, &(0x7f0000000280)={0x12000000, 0x4, 0x8001, 0xc0, 0x75, 0xffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) fstat(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) prctl$PR_SET_SECUREBITS(0x1c, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000002c0)={0x0, 0x0}) r4 = fsopen(&(0x7f0000000300)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) r7 = fsmount(r4, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0xd, 0xb}, {0xffff, 0xffff}, {0xfffd, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) fchdir(r7) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x1, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x209}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x8048094) capset(&(0x7f00000004c0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000500)={0x2, 0x9824, 0x4, 0x5, 0x6, 0x9}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000440)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/crypto\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x401, &(0x7f00000008c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") r11 = socket$unix(0x1, 0x1, 0x0) listen(r11, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) 9.075735858s ago: executing program 3 (id=1352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) write(r3, &(0x7f0000000300)="89", 0x3f80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, &(0x7f00000002c0)=""/10, 0x5b) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x4, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x80040, 0x0) read(r6, &(0x7f0000000240)=""/93, 0x24) 7.979980985s ago: executing program 3 (id=1353): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x23, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f0000"], 0x48}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r4) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, 0x0) r5 = socket(0x2, 0x805, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x60, 0x10, 0x401, 0x400800, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af1a524}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0xfd}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}}, 0x4040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000083487456f17e7f4d94aa0ca004e9da65d7dce08140dded1a0f7b62e2194de38122cdb611b56ce28aad0abf3d632b29e8f4642891ab1a0de1b0dea4856ff8bd8251f3744601080084379aadd98e3fe6505567f411acddc25fedc3053332e8177aa351c3a7ab4e3200798b252a09f1", @ANYRES16=r7, @ANYBLOB="08002dbd7000ffdbdf25590000000c009900ff07000003"], 0x20}, 0x1, 0x0, 0x0, 0x6086}, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0xea53, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x6, 0x7, 0x4, 0x1f4, 0x20, 0xfffffff9, 0x7}, 0x98) r8 = getpid() write$cgroup_pid(r1, &(0x7f00000000c0)=r8, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0x3) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000002980), 0x12) r10 = socket$netlink(0x10, 0x3, 0x12) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600", @ANYRES32], 0x3c}}, 0x40000) sendmsg$nl_route(r10, 0x0, 0x40000c0) sendmsg$nl_route(r11, 0x0, 0x0) 7.908266087s ago: executing program 1 (id=1354): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019580)=0x7) io_setup(0x5, &(0x7f00000195c0)) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000019600)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000019a00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000019a80)=[{&(0x7f0000019ac0)="94", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000042000000000000000000ea0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000fffffff07b9af8ff00000000b6090000000000117baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 7.826153009s ago: executing program 0 (id=1355): syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002fc0)=@newtfilter={0x8a8, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x878, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf001}}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x5, 0x2, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x400, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x3, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0xb, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x7, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x5, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x6, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0x1e4, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffffb, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x6, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfff, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x7, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x200, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x617e57a8, 0x7fffffff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0x79255d0e, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x0, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x6, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffffff7, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0xc, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x5, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0x9, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0x0, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x2]}]}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x40085) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300400000000040200030401", @ANYRES8], 0x30}, 0x40) syz_emit_ethernet(0xfed7, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000040)) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 0'], 0x2a) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000200)='m', 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000140)=0xfff) close(r3) 6.835626973s ago: executing program 5 (id=1356): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a3100000000397e3bc7e8221d48adedeadb9f0526fd1c4d21d29dd3cbcba63f31ddfee3bb351bf59446d49277ea56ea0809aea94509ad3d1455df480962e30d63f867f843580d36d75973578f0cb80ad77041f2e41202826778ce"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x8000000, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x24000004) socket$nl_route(0x10, 0x3, 0x0) 6.701989007s ago: executing program 3 (id=1357): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000240)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x141a82, 0xee) sendfile(r5, r5, 0x0, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000010801"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48040) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10162, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) 6.620143718s ago: executing program 1 (id=1358): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019580)=0x7) io_setup(0x5, &(0x7f00000195c0)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019600)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000019a00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) 5.673886982s ago: executing program 3 (id=1359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0xc15, &(0x7f0000001940)="$eJzs3V1sZOdZB/DnnWPHY6e0TtNuWmjKSEXtymWj/equq0WVt3ENlbabql5X5Koef+x2FO94ZXvppkBlQAWJm4rcIG6QRYlA6gVXhEtcGqRWCAlVvSgXSJZoo1xw4YtKCFBqdM68Y493vVk3G39s8vtFzv/MmeeM34/xmWNpX58AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI++7nLp8+ko24FAHCYrk5+6fQ5n/8A8K5yze//AAAAAAAAAAAAAABw3KUo4kSkGHplM01XjzvqV1rt23emxif2PmwwRYpaFFV9+VU/c/bc+U9duDjazTc//u324Xhu8trlxrOLN28tzS8vz881ptqt2cW5+X2/wsMef7eRagAaN1+4PXf9+nLj7DPndj19Z/i1gcdPDF+6eOrCaLd2anxiYrKnpq//LX/3e9xvhcdjUUQzUrwx/HpqRkQtHn4sHvDeOWiDVSdGqk5MjU9UHVloNdsr5ZOplqtqEY2eg8a6Y3QIc/FQxiJWy+aXDR4puzd5q7nUnFmYb3yxubTSWmkttlOt09qyP42oxWiKWIuIjYF7X64/ivhopHjp9GaaiYiiOw6frBYGP7g9tQPo4z6U7Wz0R6zVHoE5O8YGooirkeJnr56M2XLM8ld8POILZb4S8XKZn4lI5RvjfMRP93gf8WjqiyL+NVIsps00V50PuueVK19ufL59fbGntnteeeQ/Hw7TMT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25Hij57+nWpdcVTr0t93afQ9z/9m75rxpx7wOmXtMxGxWtvfmtz+vHQ41cr/DqBj7Es9ivhGXv/3B0fdGAAAAAAAAAAAAAAAAAAAgHe1Ip6PFF85dTKtRe89xVvtG41rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzjsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KhbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIZyLF+vP16vFaLeJaRPx8a2ur+vqfra2tiM1y+2EddV8BAAAAAAAAAAAAAAAAAADg2EpFfCxSPPm/m6kREXeGXxt4/MTwpYunLowWUUQqS3rrn5u8drnx7OLNW0vzy8vzc42pdmt2cW5+v9+ufqXVvn1nanziQDrzQIMH3P7B+rOLt15cat346sqezw/VL88sryw1Z/d+OgajFjHdu2ekavDU+ETV6IVWs10dmmr3aWAtYmy/nQEAAAAAAAAAAAAAAAAAAODYGEpFfC5S/OQ/zqfuuvG+zpr/X+o8KrZrX/69nb8FsHBXdvX+/YD9bKf9NnSkWnjfmBqfmJjs2d3Xf29p2aaUingqUnzipQ9V6+FTDO25Nr6se29Zd/N8rhv+lbJudVdVfWRqfKJxdbF96vLCwuJsc6U5szDfmLzVnN33Hw4AAAAAAAAAAAAAAAAAAACANzGUivhRpPivv/231L3vfF7/39d51LP+/zeqJfSVetqd26q1/e+t1vZ3tt93aXToo0/fb/9BrP8v25RSEd+MFOd+9KHqfvrd9f/Td9WWdX8SKV5/+iO5rvZYWdfsdqfzitdbC/Ony9q/jBS/+ka3NqraG7n2yZ3aM2XtYKT4883dtV/NtR/YqT1b1p6MFN/7z71rP7hTe66s/Umk+Ie/aXRrh8ra3821J3Zqn5ldXJh70LCW8/+dSPHXV38rdft83/nv+fsPq3fltnvm/M233675H+7Zt5rn9Y/z/DcfMP8XIsV36h/JdZ2xn8nPP1H9f2f+PxEp/v1fdtdez7Xv36k9s99uHbVy/r8dKb77Fz/e7nOe/zyyOzPUO/+/3Lc7t98lRzT/T/TsG87tmv0Fx+LdaPnFr7/QXFiYX7Jhw4aN7Y2jPjNxGMrP/z+NFP93okjd65j8+f+ezqOd67///sbO5/+lu3LbEX3+v79n36V81dLfF1FfuXmr/6mI+vKLXz/Vutm8MX9jvn32zOlPf/rCmdNnLvQ/1r2429na99i9E5Tz/4NI8cO/++H27zG7r//2vv4fuiu3HdH8P9nbp13XNfseinelcv7/KlI88dkfb/+++WbX/93f/09+bHdu//wd0fx/oGffcG5X6xccCwAAAAAAAAAAgEfJUCrizyLFb//hr6fuGqL9/Pu/ubty2xH9+68TPfvmDmldw74HGQDgGCmv/z4YKf5x6/vba7l3X//Fr3Vre6//7uc43P8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAedSmK+P1IMfTKZlofKB931K+02rfvTI1P7H3YYIoUtSiq+vKrfubsufOfunBxtJtXBg6zGx+O5yavXW48u3jz1tL88vL8XGOq3ZpdnJvf9ys87PF3G6kGsHHzhdtz168vN84+c27X03eGXxt4/MTwpYunLox2a6fGJyYme2r6+t/yd79Hus/+x6KI70eKN4ZfT98diKjFw4/FA947B22w6sRI1Ymp8YmqIwutZnulfDLVclUtotFz0Fh3jA5hLh7KWMRq2fyywSNl9yZvNZeaMwvzjS82l1ZaK63Fdqp1Wlv2pxG1GE0RaxGxscePZH8U8c1I8dLpzfRPAxFFdxw+eXXyS6fPPbg9tQPo4z6U7Wz0R6zVHoE5O8YGooi/jxQ/e/VkfG8goi86X/HxiC+U+UrEy2V+JiKVb4zzET891FM7B6kvijgfKRbTZnp1oDwfdM8rV77c+Hz7+mJPbfe88sh/PhymY35uqkcRP6jO+Jvpn/1cAwAAAAAAAAAAAAAAABwjRaxFiq+cOpmq9cHba4pb7RuNa82Zhc6yvu7av+6a6a2tra1G6uRYzumcqznXcq7n3MgZtXx8zrGc0zlXc67lXM+5kTOKfHzOsZzTOVdzruVcz7mRM/ry8TnHck7nXM25lnM950bOOCZr9wAAAAAAAAAAAAAAAAAAgHeWWhTVXdy/9bXNtDXQub/0dHRy3f1A3/H+PwAA//8YNXNU") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) madvise(&(0x7f00005f3000/0x1000)=nil, 0x1000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) fanotify_init(0xef0, 0x2) syz_pidfd_open(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000600)='ns/user\x00') r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x40800, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2200000, &(0x7f00000004c0)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f0000000680)="$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") r7 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x25) open(&(0x7f0000000c40)='./file1\x00', 0x4827e, 0xdc) fallocate(r7, 0x20, 0x0, 0x8000) setns(r6, 0x10000000) umount2(0x0, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 5.527312045s ago: executing program 0 (id=1360): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000030c0)={0x2, 0x0, 0x8, 0x1a, 0x1f8, &(0x7f0000002cc0)="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"}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x500, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000100)=0x4000) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) write$tun(r6, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x10dc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xa000000d}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000300)={0x10000000}) 3.68362121s ago: executing program 0 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700"}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) 2.329035183s ago: executing program 0 (id=1362): unshare(0x22020600) r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x6040180) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) syz_open_dev$vim2m(0x0, 0x8, 0x2) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r2}, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'streebog256-generic\x00'}}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040027bd7000fcdbdf255c0000000c0099000a0000000c00000008006b005a000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) gettid() sendto$inet6(r8, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x2, 0x9c, 0x0, 0x2, 0x7f, 0x9, 0x5, 0x2, 0x5, 0x5, 0x5, 0x0, 0x9, 0x8, 0xe, 0x6, 0x8, 0x7, '\x00', 0x0, 0x3f92}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]}) 1.920353784s ago: executing program 3 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x60, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54109, 0x40}, [@IFLA_IFNAME={0xfffffffffffffe2e, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'caif0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) unshare(0x22020600) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{0x2, 0x6}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x0, r6}], {0x10, 0x2}}, 0x3c, 0x1) setregid(0x0, r6) r7 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa8007000000b30800450000700000000000f48f78ac1e0001ac1414aa03009078030000004500000000000000e5294400000000000000000700000001e00000020000030000000000000000007f000001004fdd87bf3f567e29e2ed00000086210000000000120001632a3a835e9504000000000000000009"], 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000002c0)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x40, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x1403, 0x4) quotactl_fd$Q_GETNEXTQUOTA(r9, 0xffffffff80000900, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r7) 513.528427ms ago: executing program 1 (id=1364): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x58}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x14) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$igmp(0x2, 0x3, 0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1a0}}], 0x1, 0xc009cd0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x502902ab}, [@map_fd={0x18, 0x6}]}, 0x0, 0x13, 0x92, &(0x7f0000000400)=""/146, 0x41100, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x40000004}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x81ca, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000740)=[0xffffffffffffffff, r6, r6], &(0x7f0000000780)=[{0x5, 0x5, 0x9, 0x5}, {0x2, 0x5, 0xe}, {0x0, 0x1, 0x5, 0x2}, {0xfffffffd, 0x4, 0x0, 0x5}, {0x0, 0x4, 0xf, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x1, 0x10001, 0x2}, {0x2, 0x5, 0x6, 0x4}, {0x0, 0x3}], 0x10, 0xc}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e00"], 0x50}}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}}, 0x0) 313.111843ms ago: executing program 5 (id=1365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f00000001c0)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af25, &(0x7f00000003c0)={0x1}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) dup3(r6, r7, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6}, @void, @val={0xc, 0x99, {0x1, 0x200032}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 0s ago: executing program 3 (id=1366): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019580)=0x7) io_setup(0x5, &(0x7f00000195c0)) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000019600)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000019a00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000019a80)=[{&(0x7f0000019ac0)="94", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000042000000000000000000ea0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000fffffff07b9af8ff00000000b6090000000000117baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) kernel console output (not intermixed with test programs): 255 instead [ 241.327988][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 241.338404][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xed20 instead [ 241.348839][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0bea instead [ 241.359287][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 241.369689][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 241.380093][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xed20 instead [ 241.390528][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x0bea instead [ 241.401068][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 241.411478][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 241.421917][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xed20 instead [ 241.432304][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x0bea instead [ 241.442756][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 241.453178][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 241.463620][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xed20 instead [ 241.474592][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x0bea instead [ 241.486541][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 241.496958][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 241.507348][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xed20 instead [ 241.517747][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x0bea instead [ 241.528247][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 241.538634][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 241.549018][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xed20 instead [ 241.559401][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x0bea instead [ 241.569794][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 241.580171][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 241.590559][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xed20 instead [ 241.600928][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x0bea instead [ 241.611395][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 241.621764][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 241.632150][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xed20 instead [ 241.642554][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x0bea instead [ 241.652985][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 241.668107][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 241.711028][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xed20 instead [ 241.721601][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x0bea instead [ 241.732023][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 241.742472][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 241.752850][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xed20 instead [ 242.299939][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x0bea instead [ 242.310423][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 242.320807][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 242.962094][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xed20 instead [ 242.972666][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x0bea instead [ 242.983131][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 242.993527][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 243.003938][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xed20 instead [ 243.014354][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0bea instead [ 243.025943][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 243.036348][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 243.046765][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xed20 instead [ 243.106775][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0bea instead [ 243.117299][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 243.127880][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 243.138676][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xed20 instead [ 243.149155][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0bea instead [ 243.160214][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 243.170613][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 243.180987][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xed20 instead [ 243.191404][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0bea instead [ 243.301497][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 243.311666][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 243.322221][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 243.335163][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.342584][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.405898][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.413336][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.503433][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xed20 instead [ 243.514035][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0bea instead [ 243.524529][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 243.535123][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 243.545666][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xed20 instead [ 243.831858][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0bea instead [ 243.842353][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 243.852756][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 243.863127][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xed20 instead [ 243.873517][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0bea instead [ 243.883928][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 243.894319][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 243.904699][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xed20 instead [ 243.915084][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0bea instead [ 243.925546][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 243.935929][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 243.946324][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xed20 instead [ 243.956705][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0bea instead [ 243.967156][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 243.977574][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 243.987973][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xed20 instead [ 243.998371][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0bea instead [ 244.008840][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 244.019226][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 244.029631][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xed20 instead [ 244.040044][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0bea instead [ 244.050491][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 244.060873][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 244.071267][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xed20 instead [ 244.081680][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0bea instead [ 244.092131][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 244.102565][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 244.112993][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xed20 instead [ 244.123402][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0bea instead [ 244.133864][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 244.144264][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 244.154695][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xed20 instead [ 244.165154][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0bea instead [ 244.175658][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 244.186071][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 244.197311][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xed20 instead [ 244.207732][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0bea instead [ 244.218157][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 244.228566][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 244.238940][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xed20 instead [ 244.249412][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0bea instead [ 244.259843][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 244.270238][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 244.280657][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xed20 instead [ 244.291079][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0bea instead [ 244.301502][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 244.311931][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 244.322323][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xed20 instead [ 244.332981][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0bea instead [ 244.343413][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 244.353809][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 244.364199][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xed20 instead [ 244.374593][ T7155] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0bea instead [ 244.385057][ T7155] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 244.394350][ T7155] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 244.642142][ T7190] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 245.458723][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 247.526856][ T7224] netlink: 'syz.2.272': attribute type 18 has an invalid length. [ 247.534639][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 247.549066][ T7224] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.557855][ T7224] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.566619][ T7224] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.575380][ T7224] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.589562][ T7224] netlink: 'syz.2.272': attribute type 18 has an invalid length. [ 247.597401][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 249.105483][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 249.160225][ T7237] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.278'. [ 250.024719][ T7260] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 250.032233][ T7260] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 250.039836][ T7260] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 250.054074][ T7260] Error parsing options; rc = [-22] [ 253.296438][ T7281] netlink: 'syz.1.287': attribute type 18 has an invalid length. [ 253.304256][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 253.338019][ T7281] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.347087][ T7281] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.355901][ T7281] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.364606][ T7281] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.378502][ T7281] netlink: 'syz.1.287': attribute type 18 has an invalid length. [ 253.386352][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 254.831951][ T7294] sctp: [Deprecated]: syz.1.292 (pid 7294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.831951][ T7294] Use struct sctp_sack_info instead [ 254.866619][ T7294] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 255.584324][ T7302] 9pnet_fd: Insufficient options for proto=fd [ 255.807067][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.813868][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.289011][ T7304] overlayfs: missing 'lowerdir' [ 258.954210][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 258.974978][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.988896][ T7319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.002919][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.010622][ T7319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.018795][ T7319] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 259.027682][ T7319] batman_adv: batadv0: Removing interface: ip6gretap1 [ 259.069440][ T7324] fuse: Unknown parameter './bus' [ 262.829271][ T7358] sctp: [Deprecated]: syz.3.306 (pid 7358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.829271][ T7358] Use struct sctp_sack_info instead [ 265.835465][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 265.844295][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.204237][ T7370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.462128][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.496191][ T7370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.569804][ T28] audit: type=1326 audit(1792511845.744:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 268.956058][ T28] audit: type=1326 audit(1792511845.744:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 268.982620][ T28] audit: type=1326 audit(1792511845.744:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 269.127460][ T28] audit: type=1326 audit(1792511845.744:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 269.197493][ T28] audit: type=1326 audit(1792511845.754:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 269.222011][ T28] audit: type=1326 audit(1792511845.754:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 269.257039][ T28] audit: type=1326 audit(1792511845.754:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 269.282370][ T28] audit: type=1326 audit(1792511845.754:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 269.311428][ T28] audit: type=1326 audit(1792511845.764:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 269.339777][ T28] audit: type=1326 audit(1792511845.764:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9db9f559 code=0x7ffc0000 [ 271.460385][ T7411] Line length is too long: Should be less than 4094 [ 273.537782][ T7420] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.321'. [ 276.808604][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 276.818202][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.826137][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.834353][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.842723][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.137284][ T7471] Bluetooth: MGMT ver 1.22 [ 281.813541][ T7479] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.336'. [ 283.010405][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 292.591168][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 293.940951][ T7565] netlink: 'syz.2.353': attribute type 10 has an invalid length. [ 295.139712][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 295.152333][ T7565] dummy0: entered promiscuous mode [ 295.158918][ T7565] bridge0: port 3(dummy0) entered blocking state [ 295.176009][ T7565] bridge0: port 3(dummy0) entered disabled state [ 295.182534][ T7565] dummy0: entered allmulticast mode [ 295.201530][ T7571] fuse: Bad value for 'fd' [ 296.468194][ T7565] bridge0: port 3(dummy0) entered blocking state [ 296.475068][ T7565] bridge0: port 3(dummy0) entered forwarding state [ 299.744358][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 300.825310][ T5087] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 301.386926][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.367'. [ 302.361170][ T7629] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 302.381088][ T7629] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 302.393078][ T7629] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 302.406545][ T7629] Error parsing options; rc = [-22] [ 303.174904][ C0] hrtimer: interrupt took 45015 ns [ 304.336253][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 306.156634][ T7677] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 306.164104][ T7677] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 306.171746][ T7677] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 306.185083][ T7677] Error parsing options; rc = [-22] [ 308.432074][ T42] tipc: Subscription rejected, illegal request [ 309.212280][ T7703] netlink: 'syz.1.387': attribute type 10 has an invalid length. [ 309.226827][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.387'. [ 309.245564][ T7703] dummy0: entered promiscuous mode [ 309.264185][ T7703] bridge0: port 3(dummy0) entered blocking state [ 309.280003][ T7703] bridge0: port 3(dummy0) entered disabled state [ 309.287041][ T7703] dummy0: entered allmulticast mode [ 309.294375][ T7703] bridge0: port 3(dummy0) entered blocking state [ 309.300924][ T7703] bridge0: port 3(dummy0) entered forwarding state [ 309.316081][ T7707] fuse: Bad value for 'fd' [ 309.324375][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 309.595267][ T7712] binder: 7705:7712 ioctl c0306201 0 returned -14 [ 310.203924][ T7715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.388'. [ 310.307285][ T7715] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 310.733825][ T7727] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 310.733884][ T7727] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 310.733915][ T7727] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 310.734021][ T7727] Error parsing options; rc = [-22] [ 314.636888][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 315.836594][ T7765] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 315.845264][ T7765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.400'. [ 315.862381][ T7765] dummy0: entered promiscuous mode [ 315.873486][ T7765] bridge0: port 3(dummy0) entered blocking state [ 315.881932][ T7765] bridge0: port 3(dummy0) entered disabled state [ 315.891626][ T7765] dummy0: entered allmulticast mode [ 315.906910][ T7766] fuse: Bad value for 'fd' [ 315.934566][ T7765] bridge0: port 3(dummy0) entered blocking state [ 315.941067][ T7765] bridge0: port 3(dummy0) entered forwarding state [ 317.917467][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.923817][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.339170][ T7776] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 318.346713][ T7776] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 318.354223][ T7776] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 318.367531][ T7776] Error parsing options; rc = [-22] [ 322.020073][ T5087] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 324.915490][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 326.372152][ T7825] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 326.381767][ T7825] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 327.300529][ T5909] IPVS: starting estimator thread 0... [ 328.568359][ T7828] IPVS: using max 20 ests per chain, 48000 per kthread [ 334.750224][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 334.845918][ T7874] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.854697][ T7874] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.863518][ T7874] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.872387][ T7874] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.235863][ T7893] ucma_write: process 461 (syz.1.424) changed security contexts after opening file descriptor, this is not allowed. [ 343.371646][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 345.169237][ T7938] process 'syz.0.438' launched './file0' with NULL argv: empty string added [ 350.717471][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 351.288340][ T7988] CIFS mount error: No usable UNC path provided in device string! [ 351.288340][ T7988] [ 351.298773][ T7988] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 351.475355][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 351.517789][ T7989] tc_dump_action: action bad kind [ 351.696515][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 354.522621][ T5845] usb 3-1: unable to get BOS descriptor or descriptor too short [ 354.564516][ T5845] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 354.575709][ T5845] usb 3-1: can't read configurations, error -71 [ 356.345192][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 357.084303][ T8034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.225229][ T8046] Invalid ELF header magic: != ELF [ 359.992310][ T8038] tc_dump_action: action bad kind [ 362.567334][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 365.639755][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 365.913530][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 368.325365][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 371.084997][ T8130] 9pnet_fd: Insufficient options for proto=fd [ 371.893554][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 377.782082][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 377.909045][ T5087] Bluetooth: hci2: unexpected event 0x01 length: 16 > 1 [ 378.661415][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.685401][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.140989][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 385.174268][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 386.469034][ T8266] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 386.478066][ T8266] overlayfs: missing 'lowerdir' [ 388.358453][ T8280] rxe_eth0 speed is unknown, defaulting to 1000 [ 388.572716][ T8279] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 389.010349][ T8279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 389.091715][ T8279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 389.211367][ T8279] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 389.425039][ T8279] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 389.516334][ T8291] Bluetooth: ISO socket layer initialized [ 390.436752][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 390.688405][ T8297] fuse: Bad value for 'fd' [ 391.045090][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 391.135040][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 391.146982][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 391.163506][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 391.173182][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 391.183701][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 391.193083][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 391.226398][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 391.502461][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 392.200259][ T8308] syzkaller0: entered promiscuous mode [ 392.205964][ T8308] syzkaller0: entered allmulticast mode [ 393.230068][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 396.130427][ T8337] 9pnet_fd: Insufficient options for proto=fd [ 396.730320][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 396.741206][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 396.750193][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 396.759678][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 396.768583][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 403.195929][ T8394] 9pnet_fd: Insufficient options for proto=fd [ 403.595638][ T8389] netlink: 14 bytes leftover after parsing attributes in process `syz.0.546'. [ 403.615482][ T8389] bridge0: port 3(dummy0) entered disabled state [ 403.652226][ T8389] dummy0 (unregistering): left allmulticast mode [ 403.663255][ T8389] bridge0: port 3(dummy0) entered disabled state [ 408.978287][ T55] logitech-hidpp-device 0005:046D:B012.0001: item fetching failed at offset 3/4 [ 408.992091][ T55] logitech-hidpp-device 0005:046D:B012.0001: hidpp_probe:parse failed [ 409.151710][ T55] logitech-hidpp-device: probe of 0005:046D:B012.0001 failed with error -22 [ 409.630404][ T8436] overlayfs: failed to clone upperpath [ 410.976219][ T8449] 9pnet_fd: Insufficient options for proto=fd [ 413.102635][ T8461] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 413.110174][ T8461] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 413.117733][ T8461] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 413.130952][ T8461] Error parsing options; rc = [-22] [ 413.968896][ T5101] rxe_eth0 speed is unknown, defaulting to 1000 [ 415.776377][ T8480] input: syz0 as /devices/virtual/input/input5 [ 416.053606][ T5101] Process accounting resumed [ 416.181465][ T8483] tipc: Enabling of bearer rejected, failed to enable media [ 416.190524][ T51] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 419.853818][ T8511] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 419.869096][ T8511] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 419.876663][ T8511] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 419.889830][ T8511] Error parsing options; rc = [-22] [ 425.195377][ T8548] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 425.202843][ T8548] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 425.210635][ T8548] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 425.223736][ T8548] Error parsing options; rc = [-22] [ 427.218056][ T8563] netlink: 14 bytes leftover after parsing attributes in process `syz.1.584'. [ 427.250544][ T8563] bridge0: port 3(dummy0) entered disabled state [ 428.140683][ T8563] dummy0 (unregistering): left allmulticast mode [ 428.166713][ T8563] bridge0: port 3(dummy0) entered disabled state [ 430.825240][ T8590] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 433.295607][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 434.138462][ T8616] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 434.145965][ T8616] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 434.153471][ T8616] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 434.166674][ T8616] Error parsing options; rc = [-22] [ 438.601948][ T8647] TCP: TCP_TX_DELAY enabled [ 440.038944][ T8658] syz.3.603 (8658) used greatest stack depth: 16760 bytes left [ 440.155821][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.162280][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.276320][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 441.635136][ T8655] netlink: 14 bytes leftover after parsing attributes in process `syz.2.606'. [ 441.658819][ T8655] bridge0: port 3(dummy0) entered disabled state [ 441.844674][ T8655] dummy0 (unregistering): left allmulticast mode [ 441.862938][ T8655] bridge0: port 3(dummy0) entered disabled state [ 442.090170][ T8679] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 442.097982][ T8679] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.607'. [ 445.212706][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 451.799638][ T51] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 454.753964][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 454.999308][ T8789] fuse: Unknown parameter '0xffffffffffffffff' [ 458.521147][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.641'. [ 460.813685][ T8826] ceph: No mds server is up or the cluster is laggy [ 460.839329][ T27] libceph: connect (1)[c::]:6789 error -101 [ 460.889305][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 461.427663][ T23] libceph: connect (1)[c::]:6789 error -101 [ 461.435880][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 462.843082][ T8840] tipc: Started in network mode [ 462.855102][ T8840] tipc: Node identity 7f000001, cluster identity 4711 [ 462.873357][ T8840] tipc: Enabling of bearer rejected, failed to enable media [ 462.890911][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 462.935572][ T8840] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 462.957697][ T8840] tipc: Enabled bearer , priority 10 [ 465.061699][ T23] tipc: Node number set to 2130706433 [ 468.735319][ T8896] ptrace attach of ""[8900] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8896] [ 468.996475][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 473.508911][ T8934] input: syz0 as /devices/virtual/input/input6 [ 476.556348][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 476.696598][ T8960] sctp: [Deprecated]: syz.1.667 (pid 8960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.696598][ T8960] Use struct sctp_sack_info instead [ 483.534731][ T51] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 485.012282][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 486.706537][ T9021] netlink: 'syz.2.678': attribute type 4 has an invalid length. [ 486.714266][ T9021] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.678'. [ 487.068247][ T9020] 9pnet_fd: Insufficient options for proto=fd [ 487.105922][ T9017] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 487.153882][ T9020] bridge0: port 3(syz_tun) entered blocking state [ 487.161082][ T9017] File: /179/mnt/file1 PID: 9017 Comm: syz.1.688 [ 488.409149][ T9020] bridge0: port 3(syz_tun) entered disabled state [ 488.436165][ T9020] syz_tun: entered allmulticast mode [ 488.455191][ T9020] syz_tun: entered promiscuous mode [ 488.486304][ T9020] bridge0: port 3(syz_tun) entered blocking state [ 488.493231][ T9020] bridge0: port 3(syz_tun) entered forwarding state [ 488.545196][ T9028] netlink: 'syz.1.688': attribute type 9 has an invalid length. [ 490.707646][ T9049] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 490.781777][ T9050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 495.124722][ T9078] netlink: 'syz.0.698': attribute type 4 has an invalid length. [ 495.132561][ T9078] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.698'. [ 502.127446][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.133812][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.432813][ T9124] netlink: 168 bytes leftover after parsing attributes in process `syz.3.703'. [ 506.067722][ T9137] rxe_eth0 speed is unknown, defaulting to 1000 [ 506.233398][ T9135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 506.292252][ T9135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 506.352025][ T9135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 506.480716][ T9135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 508.139652][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 508.325145][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 508.405141][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 508.490226][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 509.998760][ T9169] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 510.465022][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 510.465055][ T28] audit: type=1326 audit(1792512088.788:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 510.835140][ T28] audit: type=1326 audit(1792512088.788:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 510.987115][ T28] audit: type=1326 audit(1792512088.788:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 511.058253][ T28] audit: type=1326 audit(1792512088.788:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa71795fd8e code=0x7ffc0000 [ 511.109550][ T28] audit: type=1326 audit(1792512088.788:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 511.165866][ T28] audit: type=1326 audit(1792512088.798:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 511.273313][ T28] audit: type=1326 audit(1792512088.798:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 511.345133][ T28] audit: type=1326 audit(1792512088.798:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 511.422381][ T28] audit: type=1326 audit(1792512088.798:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 511.485228][ T28] audit: type=1326 audit(1792512088.798:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7179a0dc7 code=0x7ffc0000 [ 517.497704][ T9211] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 517.505598][ T9211] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 517.513107][ T9211] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 517.526354][ T9211] Error parsing options; rc = [-22] [ 519.887190][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'. [ 527.050834][ T9257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 527.060870][ T9257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 527.067733][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.079966][ T9257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 527.098845][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.057409][ T9257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 528.069397][ T9257] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 528.078422][ T9257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 528.661401][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.672040][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.719825][ T9256] rxe_eth0 speed is unknown, defaulting to 1000 [ 528.777979][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.800304][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.064419][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.093786][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.175854][ T9256] chnl_net:caif_netlink_parms(): no params data found [ 529.364011][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.371487][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.379382][ T9256] bridge_slave_0: entered allmulticast mode [ 529.387329][ T9256] bridge_slave_0: entered promiscuous mode [ 529.397036][ T9256] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.404482][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.412031][ T9256] bridge_slave_1: entered allmulticast mode [ 529.426111][ T9256] bridge_slave_1: entered promiscuous mode [ 529.521289][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 529.542599][ T9256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.591309][ T9256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.722992][ T9256] team0: Port device team_slave_0 added [ 529.755474][ T12] tipc: Disabling bearer [ 529.776116][ T12] tipc: Left network mode [ 529.793530][ T9256] team0: Port device team_slave_1 added [ 529.838562][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.846757][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.886399][ T9256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.665025][ T51] Bluetooth: hci3: command tx timeout [ 530.979178][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.005111][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.064232][ T9256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.140335][ T9256] hsr_slave_0: entered promiscuous mode [ 531.147162][ T9256] hsr_slave_1: entered promiscuous mode [ 531.158889][ T9256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.196257][ T9256] Cannot create hsr debugfs directory [ 532.767833][ T51] Bluetooth: hci3: command tx timeout [ 533.604126][ T9322] 9pnet_virtio: no channels available for device syz [ 533.668744][ T9322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.746'. [ 533.707247][ T9321] netlink: 'syz.3.750': attribute type 3 has an invalid length. [ 533.748868][ T12] IPVS: stopping master sync thread 6481 ... [ 534.393714][ T9256] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 534.402741][ T9256] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 534.550055][ T9256] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 534.582199][ T9256] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.815126][ T51] Bluetooth: hci3: command tx timeout [ 535.129146][ T12] hsr_slave_0: left promiscuous mode [ 535.144530][ T12] hsr_slave_1: left promiscuous mode [ 535.256961][ T9338] SET target dimension over the limit! [ 535.939807][ T12] bridge_slave_1: left allmulticast mode [ 535.945746][ T12] bridge_slave_1: left promiscuous mode [ 535.953519][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.994822][ T12] bridge_slave_0: left allmulticast mode [ 536.001661][ T12] bridge_slave_0: left promiscuous mode [ 536.010182][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.218672][ T51] Bluetooth: hci3: command tx timeout [ 537.406827][ T12] veth1_macvtap: left promiscuous mode [ 537.426585][ T12] veth0_macvtap: left promiscuous mode [ 537.432251][ T12] veth1_vlan: left promiscuous mode [ 537.449157][ T12] veth0_vlan: left promiscuous mode [ 539.120566][ T12] team0 (unregistering): Port device team_slave_1 removed [ 539.387035][ T9365] block device autoloading is deprecated and will be removed. [ 539.739714][ T12] team0 (unregistering): Port device team_slave_0 removed [ 539.812036][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.874559][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.505771][ T9379] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 540.870865][ T12] bond0 (unregistering): Released all slaves [ 542.122680][ T9256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.470236][ T9256] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.522255][ T9398] bridge0: port 3(syz_tun) entered disabled state [ 543.534611][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.545213][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.629855][ T9398] macvlan2: left promiscuous mode [ 543.635030][ T9398] bond1: left promiscuous mode [ 543.717641][ T9398] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9402] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9398] [ 543.967224][ T9400] tipc: Enabled bearer , priority 0 [ 544.021263][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.028492][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.103391][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.110591][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.288743][ T12] IPVS: stop unused estimator thread 0... [ 544.595487][ T5101] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 544.814382][ T9418] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.895046][ T5101] usb 2-1: Using ep0 maxpacket: 16 [ 544.915135][ T5101] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 544.945544][ T5101] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.999746][ T9256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.104373][ T5101] usb 2-1: config 0 has no interface number 0 [ 545.461898][ T5101] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 545.486043][ T5101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.494073][ T5101] usb 2-1: Product: syz [ 545.505283][ T5101] usb 2-1: Manufacturer: syz [ 545.509920][ T5101] usb 2-1: SerialNumber: syz [ 545.519584][ T5101] usb 2-1: config 0 descriptor?? [ 545.529759][ T5101] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 545.553511][ T5101] usb 2-1: No valid video chain found. [ 546.992313][ T9256] veth0_vlan: entered promiscuous mode [ 547.008250][ T9256] veth1_vlan: entered promiscuous mode [ 547.088193][ T9256] veth0_macvtap: entered promiscuous mode [ 547.114270][ T9256] veth1_macvtap: entered promiscuous mode [ 547.175999][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.493744][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.906894][ T9256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.931085][ T9256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.942007][ T9256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.944913][ T5830] usb 2-1: USB disconnect, device number 6 [ 547.961079][ T9256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.155924][ T9356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.163779][ T9356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.223930][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.236302][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.339619][ T9461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.371216][ T9461] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 548.700528][ T9477] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 548.708110][ T9477] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 548.715952][ T9477] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 548.729339][ T9477] Error parsing options; rc = [-22] [ 550.191454][ T9478] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 550.191454][ T9478] [ 550.205481][ T9478] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 550.218531][ T9478] CIFS: Attempting to mount //127.0.0.1/share [ 550.235562][ T9478] CIFS: VFS: Error connecting to socket. Aborting operation. [ 550.243273][ T9478] CIFS: VFS: cifs_mount failed w/return code = -111 [ 550.531674][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 550.531688][ T28] audit: type=1326 audit(1792512128.908:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 551.025794][ T5101] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 551.921349][ T28] audit: type=1326 audit(1792512128.908:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 553.323406][ T28] audit: type=1326 audit(1792512128.918:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 553.357174][ T28] audit: type=1326 audit(1792512128.918:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 553.389369][ T28] audit: type=1326 audit(1792512128.918:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 553.417222][ T28] audit: type=1326 audit(1792512128.968:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 553.441626][ T28] audit: type=1326 audit(1792512128.968:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 553.595311][ T28] audit: type=1326 audit(1792512128.968:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 554.131573][ T28] audit: type=1326 audit(1792512128.968:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 554.313604][ T28] audit: type=1326 audit(1792512128.968:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 557.066343][ T9529] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 557.073806][ T9529] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 557.081370][ T9529] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 557.094558][ T9529] Error parsing options; rc = [-22] [ 561.679165][ T9579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.718686][ T9591] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 562.726210][ T9591] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 562.733716][ T9591] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 562.746978][ T9591] Error parsing options; rc = [-22] [ 562.971451][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.986865][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.783177][ T9581] bridge0: port 3(syz_tun) entered blocking state [ 563.789960][ T9581] bridge0: port 3(syz_tun) entered disabled state [ 563.867590][ T9581] syz_tun: entered allmulticast mode [ 563.884478][ T9581] syz_tun: entered promiscuous mode [ 563.896671][ T9581] bridge0: port 3(syz_tun) entered blocking state [ 563.903204][ T9581] bridge0: port 3(syz_tun) entered forwarding state [ 563.910702][ T9585] netlink: 'syz.3.792': attribute type 9 has an invalid length. [ 565.060003][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'. [ 565.070570][ T9616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.798'. [ 565.159629][ T9621] Cannot find del_set index 4 as target [ 565.249663][ T9622] overlayfs: conflicting options: nfs_export=on,index=off [ 568.063180][ T9648] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 568.070700][ T9648] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 568.078256][ T9648] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 568.094156][ T9648] Error parsing options; rc = [-22] [ 575.374115][ T9722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 576.943616][ T9735] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5769] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9735] [ 576.959318][ T9735] nft_compat: unsupported protocol 1 [ 578.477419][ T9763] overlayfs: failed to clone upperpath [ 583.358455][ T9795] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 586.851912][ T9841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.518320][ T9838] overlayfs: failed to clone upperpath [ 588.027025][ T9850] rxe_eth0 speed is unknown, defaulting to 1000 [ 588.038804][ T9846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 588.058121][ T9846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 588.084105][ T9846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 588.105154][ T9846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 588.117672][ T9846] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 588.148043][ T9846] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 589.000356][ T9866] tipc: Enabling of bearer rejected, already enabled [ 590.015811][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 590.236187][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 590.237390][ T9257] Bluetooth: hci1: command 0x0406 tx timeout [ 590.249778][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 591.106753][ T9889] ip_tables: iptables: counters copy to user failed while replacing table [ 592.765000][ T9878] Bluetooth: hci3: command 0x0c1a tx timeout [ 594.791394][ T9930] comedi comedi3: board detection failed [ 594.805005][ T9878] Bluetooth: hci3: command 0x0c1a tx timeout [ 594.941710][ T9933] bridge0: port 4(netdevsim0) entered blocking state [ 594.949066][ T9933] bridge0: port 4(netdevsim0) entered disabled state [ 595.056490][ T9933] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 595.077755][ T9933] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 595.169476][ T9933] netlink: 'syz.1.848': attribute type 10 has an invalid length. [ 596.590944][ T9933] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 596.671611][ T9931] rxe_eth0 speed is unknown, defaulting to 1000 [ 596.778691][ T9947] netlink: 25 bytes leftover after parsing attributes in process `syz.1.850'. [ 596.806759][ T9947] eql: entered promiscuous mode [ 599.789081][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 604.163538][T10050] rxe_eth0 speed is unknown, defaulting to 1000 [ 604.801298][T10046] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 604.826214][T10046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 604.840006][T10046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 604.865196][T10046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 606.387202][ T9878] Bluetooth: hci0: command 0x0406 tx timeout [ 606.496814][T10045] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.795298][ T9878] Bluetooth: hci3: command 0x0c1a tx timeout [ 607.801353][ T9878] Bluetooth: hci2: command 0x0406 tx timeout [ 607.807803][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 607.940685][T10077] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 608.787573][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.795175][T10096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.812431][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.820075][T10096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.046154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.540712][T10106] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.553335][T10106] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 618.687708][T10153] tipc: Started in network mode [ 618.692619][T10153] tipc: Node identity 1001001, cluster identity 4711 [ 618.716701][T10153] tipc: Node number set to 16781313 [ 618.746515][T10154] tipc: Enabled bearer , priority 0 [ 620.411590][T10162] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 623.655072][T10194] ubi: mtd0 is already attached to ubi0 [ 624.613750][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.629453][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.835456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 640.071018][T10303] fuse: Bad value for 'group_id' [ 650.086512][T10354] overlayfs: failed to clone upperpath [ 654.416265][ T9878] Bluetooth: hci2: command 0x0406 tx timeout [ 658.951059][T10423] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.947'. [ 660.916266][T10413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.945'. [ 664.794616][T10454] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 664.802196][T10454] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 664.809853][T10454] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 664.823098][T10454] Error parsing options; rc = [-22] [ 670.115984][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.961'. [ 670.166066][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.961'. [ 670.210906][T10479] ip6gretap0: entered promiscuous mode [ 670.237620][T10479] syz_tun: entered promiscuous mode [ 670.254496][T10479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.262247][T10479] Cannot create hsr debugfs directory [ 671.831428][T10497] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 671.838878][T10497] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 671.846351][T10497] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 671.859382][T10497] Error parsing options; rc = [-22] [ 677.198008][T10539] ipt_REJECT: TCP_RESET invalid for non-tcp [ 677.967661][T10547] tipc: Started in network mode [ 677.980796][T10547] tipc: Node identity 1001001, cluster identity 4711 [ 678.005022][T10547] tipc: Node number set to 16781313 [ 678.061269][T10547] tipc: Enabled bearer , priority 0 [ 685.850826][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.869675][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.848985][T10611] overlayfs: missing 'lowerdir' [ 691.070203][T10626] ipt_REJECT: TCP_RESET invalid for non-tcp [ 691.889010][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 694.999275][T10648] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 696.304355][T10659] tipc: Started in network mode [ 696.378555][T10659] tipc: Node identity 1001001, cluster identity 4711 [ 698.020614][ T42] rpcbind: server 127.0.0.1 not responding, timed out [ 698.041375][T10659] tipc: Node number set to 16781313 [ 698.772316][T10667] tipc: Enabled bearer , priority 0 [ 700.736215][T10685] ipt_REJECT: TCP_RESET invalid for non-tcp [ 700.874721][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 704.785406][T10721] tipc: Enabling of bearer rejected, already enabled [ 704.987717][T10726] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 705.116062][T10726] team0: Port device netdevsim0 added [ 705.399401][T10734] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 705.615989][T10734] team0: Port device netdevsim0 removed [ 706.197596][T10734] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 706.323609][T10736] bridge0: port 3(syz_tun) entered blocking state [ 706.330237][T10736] bridge0: port 3(syz_tun) entered disabled state [ 706.336776][T10736] syz_tun: entered allmulticast mode [ 706.343853][T10736] syz_tun: left allmulticast mode [ 706.349144][T10737] bridge0: port 3(ip6gretap0) entered blocking state [ 706.356006][T10737] bridge0: port 3(ip6gretap0) entered disabled state [ 706.362747][T10737] ip6gretap0: entered allmulticast mode [ 706.369239][T10737] ip6gretap0: left allmulticast mode [ 709.941144][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 715.699229][T10807] tipc: Enabling of bearer rejected, already enabled [ 716.706790][T10817] SET target dimension over the limit! [ 718.987928][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1037'. [ 719.011053][T10840] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 719.020448][T10840] IPVS: sh: FWM 3 0x00000003 - no destination available [ 719.032215][T10840] autofs4:pid:10840:autofs_fill_super: called with bogus options [ 719.074166][T10842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.163262][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.246984][T10842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.716796][T10854] ebt_among: dst integrity fail: 100 [ 720.321277][T10869] tipc: Enabling of bearer rejected, already enabled [ 722.305052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 723.235105][T10903] tipc: Enabling of bearer rejected, already enabled [ 724.354536][T10907] tipc: Enabling of bearer rejected, already enabled [ 727.074530][T10930] bridge0: port 5(ip6gretap0) entered blocking state [ 727.082967][T10930] bridge0: port 5(ip6gretap0) entered disabled state [ 727.092807][T10930] ip6gretap0: entered allmulticast mode [ 727.361268][T10930] ip6gretap0: entered promiscuous mode [ 734.830071][T10974] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 737.914690][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1070'. [ 742.076255][T11013] sctp: [Deprecated]: syz.0.1073 (pid 11013) Use of int in max_burst socket option. [ 742.076255][T11013] Use struct sctp_assoc_value instead [ 746.016892][T11040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.095667][T11045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.190502][T11040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.343434][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.384998][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.512410][T11055] bridge0: port 3(syz_tun) entered blocking state [ 748.519338][T11055] bridge0: port 3(syz_tun) entered disabled state [ 748.528015][T11055] syz_tun: entered allmulticast mode [ 748.540278][T11055] syz_tun: entered promiscuous mode [ 748.547324][T11055] bridge0: port 3(syz_tun) entered blocking state [ 748.553840][T11055] bridge0: port 3(syz_tun) entered forwarding state [ 748.569022][T11056] bridge0: port 4(ip6gretap0) entered blocking state [ 748.575857][T11056] bridge0: port 4(ip6gretap0) entered disabled state [ 748.582685][T11056] ip6gretap0: entered allmulticast mode [ 748.589524][T11056] ip6gretap0: entered promiscuous mode [ 748.595743][T11056] bridge0: port 4(ip6gretap0) entered blocking state [ 748.602511][T11056] bridge0: port 4(ip6gretap0) entered forwarding state [ 752.846890][T11078] binder: 11076:11078 ioctl c00c6211 0 returned -14 [ 757.705231][T11102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.795071][T11102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.898918][T11102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.326545][T11111] tipc: Enabling of bearer rejected, already enabled [ 758.611087][ T5830] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 759.388665][ T5830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 760.044549][ T5830] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.107976][ T5830] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.132762][ T5830] usb 2-1: string descriptor 0 read error: -22 [ 760.985168][ T5830] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 760.994301][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.497443][ T5830] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 761.522563][ T5830] usb 2-1: USB disconnect, device number 8 [ 761.995570][T11109] udevd[11109]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 765.187940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 765.395301][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 765.481510][T11152] tipc: Enabling of bearer rejected, already enabled [ 766.557344][T11169] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 773.220746][T11244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1119'. [ 773.675601][T11245] tipc: Enabling of bearer rejected, already enabled [ 773.985189][ T51] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 774.805087][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 777.305089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 778.174959][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 778.174972][ T28] audit: type=1326 audit(1792512356.544:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.263350][ T28] audit: type=1326 audit(1792512356.544:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.326115][ T28] audit: type=1326 audit(1792512356.554:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.351051][ T28] audit: type=1326 audit(1792512356.554:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.485447][T11305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.518311][ T28] audit: type=1326 audit(1792512356.554:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.555247][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 778.564155][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 778.691233][ T28] audit: type=1326 audit(1792512356.554:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.722845][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.775731][ T28] audit: type=1326 audit(1792512356.554:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.801449][ T28] audit: type=1326 audit(1792512356.554:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.829680][ T28] audit: type=1326 audit(1792512356.554:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.855270][ T28] audit: type=1326 audit(1792512356.554:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.4.1127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa23f19f559 code=0x7ffc0000 [ 778.887768][T11310] bond1: (slave bond0): making interface the new active one [ 778.898822][T11310] bond1: (slave bond0): Enslaving as an active interface with an up link [ 779.675254][T11324] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 779.852658][T11329] tipc: Enabling of bearer rejected, already enabled [ 787.166944][T11383] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 790.975518][T11394] trusted_key: encrypted_key: master key parameter 'trustt' is invalid [ 791.009991][T11396] tipc: Enabling of bearer rejected, already enabled [ 795.627370][ T23] libceph: connect (1)[c::]:6789 error -22 [ 795.633383][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 796.301969][ T23] libceph: connect (1)[c::]:6789 error -22 [ 796.326577][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 796.343397][T11419] ceph: No mds server is up or the cluster is laggy [ 796.855653][ T23] libceph: connect (1)[c::]:6789 error -22 [ 796.863937][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 800.976691][ T55] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 801.176904][ T55] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 801.185538][ T55] usb 2-1: config 0 has no interface number 0 [ 801.221003][ T55] usb 2-1: config 0 interface 41 has no altsetting 0 [ 801.262957][ T55] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 801.282388][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.319922][ T55] usb 2-1: Product: syz [ 801.425439][ T55] usb 2-1: Manufacturer: syz [ 801.430069][ T55] usb 2-1: SerialNumber: syz [ 801.476302][ T55] usb 2-1: config 0 descriptor?? [ 801.962079][ T55] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 802.007072][ T55] CoreChips: probe of 2-1:0.41 failed with error -71 [ 802.038651][T11467] PID 11467 killed due to inadequate hugepage pool [ 802.067609][ T55] usb 2-1: USB disconnect, device number 9 [ 807.865460][T11499] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 808.932444][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.965798][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.930337][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 809.930350][ T28] audit: type=1326 audit(1792512388.304:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 810.025106][ T28] audit: type=1326 audit(1792512388.304:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 810.111039][ T28] audit: type=1326 audit(1792512388.344:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 810.229465][ T28] audit: type=1326 audit(1792512388.344:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 810.255132][ T5845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 810.284602][ T28] audit: type=1326 audit(1792512388.344:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 810.375088][ T28] audit: type=1326 audit(1792512388.344:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 810.429581][ T28] audit: type=1326 audit(1792512388.344:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 810.458009][ T5845] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.468338][ T28] audit: type=1326 audit(1792512388.344:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71799f559 code=0x7ffc0000 [ 810.468771][ T5845] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 810.605511][ T28] audit: type=1326 audit(1792512388.344:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa71795fd8e code=0x7ffc0000 [ 810.628925][ T5845] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 810.638889][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.657363][ T5845] usb 2-1: Product: syz [ 810.676493][ T5845] usb 2-1: Manufacturer: syz [ 810.681108][ T5845] usb 2-1: SerialNumber: syz [ 810.726369][ T5845] sisusb 2-1:1.0: Invalid USB2VGA device [ 810.741861][ T28] audit: type=1326 audit(1792512388.344:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1174" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa71799f1eb code=0x7ffc0000 [ 810.778900][ T5845] sisusb: probe of 2-1:1.0 failed with error -22 [ 813.686383][ T27] usb 2-1: USB disconnect, device number 10 [ 816.360528][T11544] binder: 11541:11544 ioctl c0306201 0 returned -14 [ 818.682490][T11551] kernel profiling enabled (shift: 23) [ 818.843222][T11555] Illegal XDP return value 1048578 on prog (id 88) dev N/A, expect packet loss! [ 819.635486][T11554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 820.576090][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 41 (since boot) is 1044 jiffies old. [ 826.346297][T11593] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 826.375987][T11593] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1191'. [ 826.481759][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 826.481773][ T28] audit: type=1400 audit(1792512403.860:319): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=11592 comm="syz.4.1191" [ 827.050088][T11607] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 827.125538][ T5830] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 827.315496][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 827.322109][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.362171][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.416108][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 827.465496][ T5830] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 827.500517][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.539678][ T5830] usb 2-1: config 0 descriptor?? [ 828.196027][ T5830] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 828.252890][ T5830] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 828.358711][ T5830] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 828.395638][ T5830] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 828.482625][ T5830] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 828.524215][ T5830] microsoft 0003:045E:07DA.0002: no inputs found [ 828.541096][ T5830] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 830.077598][ T5830] usb 2-1: USB disconnect, device number 11 [ 831.110208][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 832.498636][T11649] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 832.498636][T11649] The task syz.3.1202 (11649) triggered the difference, watch for misbehavior. [ 833.703016][ T5830] libceph: connect (1)[c::]:6789 error -99 [ 833.734566][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 833.888278][T11654] ceph: No mds server is up or the cluster is laggy [ 836.870991][T11676] overlayfs: failed to clone upperpath [ 841.957016][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 843.243030][T11707] netlink: 'syz.0.1210': attribute type 16 has an invalid length. [ 843.251510][T11707] netlink: 'syz.0.1210': attribute type 17 has an invalid length. [ 843.854697][T11596] tipc: Resetting bearer [ 843.865824][ T9878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 843.888174][ T9878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 843.900475][ T9878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 843.909728][T11596] bridge0: port 3(syz_tun) entered disabled state [ 843.916908][ T9878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 843.925606][ T9878] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 843.936001][ T9878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 844.322419][T11596] syz_tun (unregistering): left allmulticast mode [ 844.477460][T11596] syz_tun (unregistering): left promiscuous mode [ 844.483994][T11596] bridge0: port 3(syz_tun) entered disabled state [ 844.494336][T11596] tipc: Disabling bearer [ 844.602001][T11705] rxe_eth0 speed is unknown, defaulting to 1000 [ 844.787475][ T3450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.113658][ T3450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.262181][ T3450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.478185][T11705] chnl_net:caif_netlink_parms(): no params data found [ 846.015066][ T51] Bluetooth: hci4: command tx timeout [ 846.208156][ T3450] bond0: (slave netdevsim0): Releasing backup interface [ 846.279013][ T3450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.665892][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.674640][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.682462][T11705] bridge_slave_0: entered allmulticast mode [ 847.691547][T11705] bridge_slave_0: entered promiscuous mode [ 847.707811][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.745886][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.761355][T11705] bridge_slave_1: entered allmulticast mode [ 847.783913][T11705] bridge_slave_1: entered promiscuous mode [ 847.918285][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.942628][ T3450] tipc: Left network mode [ 847.950389][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.017276][T11705] team0: Port device team_slave_0 added [ 848.030453][T11705] team0: Port device team_slave_1 added [ 848.070809][T11705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.080856][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.117011][T11705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.130686][T11705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.134322][ T51] Bluetooth: hci4: command tx timeout [ 848.167294][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.264910][T11705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.335771][ T3450] bridge0: port 4(ip6gretap0) entered disabled state [ 848.508888][ T3450] ip6gretap0 (unregistering): left allmulticast mode [ 848.535399][ T3450] ip6gretap0 (unregistering): left promiscuous mode [ 848.544393][ T3450] bridge0: port 4(ip6gretap0) entered disabled state [ 848.800332][T11767] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.627773][T11705] hsr_slave_0: entered promiscuous mode [ 849.670328][T11705] hsr_slave_1: entered promiscuous mode [ 849.716881][T11705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 849.760593][T11705] Cannot create hsr debugfs directory [ 850.165260][ T9878] Bluetooth: hci4: command tx timeout [ 852.671439][ T9878] Bluetooth: hci4: command tx timeout [ 853.787739][T11705] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 853.849603][T11705] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 854.020418][T11705] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 854.051186][T11705] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 854.437978][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.627670][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.686999][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.694138][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.733039][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.740220][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.864800][T11705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.120810][T11822] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 856.882422][ T3450] hsr_slave_0: left promiscuous mode [ 857.016629][ T3450] hsr_slave_1: left promiscuous mode [ 857.039447][ T3450] bridge_slave_1: left allmulticast mode [ 857.055454][ T3450] bridge_slave_1: left promiscuous mode [ 857.071367][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.111401][ T3450] bridge_slave_0: left allmulticast mode [ 857.120802][ T3450] bridge_slave_0: left promiscuous mode [ 857.135959][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.259993][ T3450] veth1_macvtap: left promiscuous mode [ 857.291646][ T3450] veth0_macvtap: left promiscuous mode [ 857.323318][ T3450] veth1_vlan: left promiscuous mode [ 857.349139][ T3450] veth0_vlan: left promiscuous mode [ 859.170148][ T3450] bond1 (unregistering): (slave bond0): Releasing active interface [ 859.188887][ T3450] bond1 (unregistering): Released all slaves [ 861.385782][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 861.493198][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 861.554812][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.600574][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.886462][ T3450] bond0 (unregistering): Released all slaves [ 863.242917][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.053317][T11705] veth0_vlan: entered promiscuous mode [ 864.097793][T11705] veth1_vlan: entered promiscuous mode [ 864.180113][T11705] veth0_macvtap: entered promiscuous mode [ 864.198500][T11705] veth1_macvtap: entered promiscuous mode [ 864.244197][T11705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.897261][T11894] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 865.113517][T11705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.336624][T11705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.346184][T11705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.356118][T11705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.365721][T11705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.819993][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.847061][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.917823][T11902] overlayfs: failed to clone upperpath [ 866.502126][T10113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.616774][T10113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.824956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 868.046218][T11919] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 869.578568][T11937] netlink: 'syz.5.1246': attribute type 16 has an invalid length. [ 869.586782][T11937] netlink: 'syz.5.1246': attribute type 17 has an invalid length. [ 870.295866][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.302215][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.391203][T11946] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 872.974830][T11963] comedi comedi3: board detection failed [ 873.096476][T11966] bridge0: port 3(netdevsim0) entered blocking state [ 873.104599][T11966] bridge0: port 3(netdevsim0) entered disabled state [ 873.112227][T11966] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 873.176391][T11966] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 873.185070][T11966] bridge0: port 3(netdevsim0) entered blocking state [ 873.191897][T11966] bridge0: port 3(netdevsim0) entered forwarding state [ 873.233241][T11966] netlink: 'syz.0.1244': attribute type 10 has an invalid length. [ 873.272283][T11966] bridge0: port 3(netdevsim0) entered disabled state [ 873.279212][T11966] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.288970][T11966] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.424699][T11966] bridge0: port 3(netdevsim0) entered blocking state [ 873.431556][T11966] bridge0: port 3(netdevsim0) entered forwarding state [ 873.438746][T11966] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.445966][T11966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.453436][T11966] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.460653][T11966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.341121][T11966] bridge0: port 3(netdevsim0) entered disabled state [ 874.347984][T11966] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.355232][T11966] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.686714][T11980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 875.157712][ T9878] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 876.333224][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1256'. [ 876.419981][T12002] sctp: [Deprecated]: syz.0.1257 (pid 12002) Use of int in max_burst socket option deprecated. [ 876.419981][T12002] Use struct sctp_assoc_value instead [ 877.394209][T12006] netlink: 'syz.0.1257': attribute type 8 has an invalid length. [ 879.356938][ T28] audit: type=1800 audit(1792512456.740:320): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1261" name="protocol" dev="configfs" ino=23375 res=0 errno=0 [ 879.447843][ T28] audit: type=1800 audit(1792512456.770:321): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1261" name="report_length" dev="configfs" ino=23376 res=0 errno=0 [ 885.098544][T12052] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 885.708424][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1262'. [ 885.745326][T12050] bridge_slave_1: left allmulticast mode [ 885.761853][T12050] bridge_slave_1: left promiscuous mode [ 885.804817][T12050] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.007871][T12050] bridge_slave_0: left allmulticast mode [ 886.013559][T12050] bridge_slave_0: left promiscuous mode [ 886.036289][T12050] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.160744][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1268'. [ 888.977093][T12088] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 892.223407][T12127] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 893.484191][T12138] can: request_module (can-proto-3) failed. [ 893.894377][T12152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1277'. [ 895.671354][T12173] overlayfs: missing 'workdir' [ 896.422822][ T999] Bluetooth: hci3: Frame reassembly failed (-84) [ 897.544984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 898.427560][ T9878] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 898.896932][T12201] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0002' [ 898.906419][T12201] CPU: 0 PID: 12201 Comm: syz.0.1284 Not tainted syzkaller #0 [ 898.913899][T12201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 898.923977][T12201] Call Trace: [ 898.927273][T12201] [ 898.930217][T12201] dump_stack_lvl+0x18c/0x250 [ 898.934911][T12201] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 898.940566][T12201] ? show_regs_print_info+0x20/0x20 [ 898.945782][T12201] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 898.951466][T12201] sysfs_create_dir_ns+0x26e/0x2a0 [ 898.956614][T12201] ? __lock_acquire+0x7eb0/0x7eb0 [ 898.961665][T12201] ? sysfs_warn_dup+0xa0/0xa0 [ 898.966374][T12201] ? do_raw_spin_unlock+0x121/0x230 [ 898.971610][T12201] kobject_add_internal+0x617/0xc90 [ 898.976841][T12201] kobject_add+0x164/0x240 [ 898.981290][T12201] ? kobject_init+0x1d0/0x1d0 [ 898.985993][T12201] ? class_to_subsys+0xb6/0x120 [ 898.990875][T12201] ? get_device_parent+0xbc/0x390 [ 898.995936][T12201] device_add+0x3fa/0xc40 [ 899.000291][T12201] i2c_new_client_device+0xa72/0x10a0 [ 899.005696][T12201] ? i2c_dev_irq_from_resources+0x230/0x230 [ 899.011610][T12201] ? new_device_store+0x135/0x520 [ 899.016660][T12201] new_device_store+0x24e/0x520 [ 899.021528][T12201] ? __virt_addr_valid+0x10c/0x380 [ 899.026667][T12201] ? i2c_do_add_adapter+0x9c0/0x9c0 [ 899.031900][T12201] ? sysfs_kf_write+0x187/0x2a0 [ 899.036772][T12201] ? sysfs_kf_read+0x360/0x360 [ 899.041550][T12201] kernfs_fop_write_iter+0x3a4/0x520 [ 899.046860][T12201] vfs_write+0x474/0x9a0 [ 899.051135][T12201] ? file_end_write+0x250/0x250 [ 899.056019][T12201] ? __fget_files+0x3fc/0x460 [ 899.060733][T12201] ? __fdget_pos+0x2a3/0x330 [ 899.065342][T12201] ? ksys_write+0x74/0x260 [ 899.069780][T12201] ksys_write+0x151/0x260 [ 899.074135][T12201] ? __ia32_sys_read+0x90/0x90 [ 899.078927][T12201] ? lockdep_hardirqs_on+0x98/0x150 [ 899.084150][T12201] do_syscall_64+0x55/0xb0 [ 899.088584][T12201] ? clear_bhb_loop+0x40/0x90 [ 899.093274][T12201] ? clear_bhb_loop+0x40/0x90 [ 899.097973][T12201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.103899][T12201] RIP: 0033:0x7fea3d99f559 [ 899.108342][T12201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.127967][T12201] RSP: 002b:00007fea3bbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 899.136410][T12201] RAX: ffffffffffffffda RBX: 00007fea3dc26180 RCX: 00007fea3d99f559 [ 899.144394][T12201] RDX: 0000000000000009 RSI: 0000200000000e00 RDI: 0000000000000008 [ 899.152380][T12201] RBP: 00007fea3da36b20 R08: 0000000000000000 R09: 0000000000000000 [ 899.160368][T12201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.168349][T12201] R13: 00007fea3dc26218 R14: 00007fea3dc26180 R15: 00007ffcd13049f8 [ 899.176358][T12201] [ 899.193693][T12201] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 899.208252][T12201] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-17) [ 899.269505][ T9878] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 899.957521][T12204] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 900.389685][ T9878] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 901.412075][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 901.422895][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 901.433331][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xed20 instead [ 901.444103][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x0bea instead [ 901.454995][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 901.465747][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 901.476432][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 901.487213][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 901.497921][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 901.508628][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 901.519444][T12221] jffs2: Further such events for this erase block will not be printed [ 901.530467][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 901.541364][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 901.552134][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xed20 instead [ 901.562830][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x0bea instead [ 901.573508][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 901.584156][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 901.594810][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 901.605963][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 901.616626][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 901.627812][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 901.638747][T12221] jffs2: Further such events for this erase block will not be printed [ 901.650004][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 901.661143][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 901.672102][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xed20 instead [ 901.683057][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0bea instead [ 901.694159][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 901.705154][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 901.716131][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xed20 instead [ 901.727057][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x0bea instead [ 901.737805][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 901.748734][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 901.759515][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xed20 instead [ 901.769975][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x0bea instead [ 901.780626][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 901.791269][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 901.801933][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xed20 instead [ 901.812579][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x0bea instead [ 901.823353][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 901.834036][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 901.844692][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xed20 instead [ 901.855595][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x0bea instead [ 901.866428][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 901.877122][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 901.887765][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xed20 instead [ 901.898442][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x0bea instead [ 901.909205][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 901.919864][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 901.930615][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xed20 instead [ 901.941261][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x0bea instead [ 901.952213][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 901.963089][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 901.973992][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xed20 instead [ 901.984999][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x0bea instead [ 902.002853][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 902.013589][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 902.024307][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xed20 instead [ 902.035063][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x0bea instead [ 902.045847][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 902.056769][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 902.067548][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xed20 instead [ 902.078198][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x0bea instead [ 902.089026][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 902.099698][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 902.110332][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xed20 instead [ 902.120743][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x0bea instead [ 902.131295][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 902.142245][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 902.153685][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xed20 instead [ 902.164810][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0bea instead [ 902.176523][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 902.187177][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 902.197792][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xed20 instead [ 902.208423][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0bea instead [ 902.219140][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 902.229801][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 902.240419][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xed20 instead [ 902.251079][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0bea instead [ 902.261997][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 902.272748][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 902.283376][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xed20 instead [ 902.294043][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0bea instead [ 902.304757][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 902.315408][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 902.326087][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xed20 instead [ 902.336730][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0bea instead [ 902.347483][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 902.358374][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 902.369100][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xed20 instead [ 902.379736][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0bea instead [ 902.390462][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 902.401109][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 902.411907][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xed20 instead [ 902.422574][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0bea instead [ 902.433282][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 902.443919][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 902.454305][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xed20 instead [ 902.465029][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0bea instead [ 902.481623][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 902.492280][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 902.502934][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xed20 instead [ 902.513596][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0bea instead [ 902.524312][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 902.535054][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 902.545704][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xed20 instead [ 902.556326][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0bea instead [ 902.567258][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 902.578008][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 902.588638][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xed20 instead [ 902.599262][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0bea instead [ 902.609997][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 902.620652][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 902.631299][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xed20 instead [ 902.641945][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0bea instead [ 902.652694][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 902.663363][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 902.674232][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xed20 instead [ 902.685187][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0bea instead [ 902.696002][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 902.706653][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 902.717301][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xed20 instead [ 902.727936][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0bea instead [ 902.738646][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 902.749309][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 902.759972][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xed20 instead [ 902.770874][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0bea instead [ 902.781639][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 902.792297][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 902.802684][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xed20 instead [ 902.813095][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0bea instead [ 902.823819][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 902.834478][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 902.845216][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xed20 instead [ 902.855905][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0bea instead [ 902.866630][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 902.877523][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 902.888303][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xed20 instead [ 902.898934][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0bea instead [ 902.909662][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 902.920333][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 902.941038][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xed20 instead [ 902.951972][T12221] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0bea instead [ 902.963189][T12221] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 902.973107][T12221] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 904.668703][T12225] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1288'. [ 907.054259][T12277] input: syz0 as /devices/virtual/input/input8 [ 907.085525][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 907.386477][T12277] ceph: No mds server is up or the cluster is laggy [ 907.400662][ T5101] libceph: connect (1)[c::]:6789 error -101 [ 907.459234][ T5101] libceph: mon0 (1)[c::]:6789 connect error [ 908.424429][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1298'. [ 908.434079][T12291] tipc: Enabling of bearer rejected, already enabled [ 908.477146][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 908.487958][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 908.501921][ T27] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 908.521477][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.530634][ T27] usb 2-1: Product: syz [ 908.534836][ T27] usb 2-1: Manufacturer: syz [ 908.540800][ T27] usb 2-1: SerialNumber: syz [ 908.773695][ T27] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 909.945967][T12308] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 909.985524][T12308] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 910.062265][ T5101] usb 2-1: USB disconnect, device number 12 [ 910.239063][ T5101] usblp0: removed [ 912.854849][T12332] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 912.871764][ T5909] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 913.104586][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 913.132473][ T5909] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 913.154684][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.177116][ T5909] usb 2-1: Product: syz [ 913.181366][ T5909] usb 2-1: Manufacturer: syz [ 913.196663][ T5909] usb 2-1: SerialNumber: syz [ 913.237977][ T5909] usb 2-1: config 0 descriptor?? [ 913.267426][ T5909] powermate: probe of 2-1:0.0 failed with error -22 [ 914.205849][ T27] usb 2-1: USB disconnect, device number 13 [ 915.378670][T12360] binder: 12358:12360 ioctl 80605414 200000000000 returned -22 [ 915.491164][T12366] tipc: Enabling of bearer rejected, already enabled [ 915.644790][T12359] binder: 12358:12359 ioctl c0206434 2000000002c0 returned -22 [ 915.703603][ T28] audit: type=1804 audit(1792512494.081:322): pid=12371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1313" name="bus" dev="ramfs" ino=25094 res=1 errno=0 [ 915.745611][T12359] binder: 12358:12359 ioctl 7a7 200000000040 returned -22 [ 915.798960][T12359] binder: 12358:12359 ioctl 7a0 200000000240 returned -22 [ 915.805501][ T28] audit: type=1804 audit(1792512494.121:323): pid=12371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1313" name="bus" dev="ramfs" ino=25094 res=1 errno=0 [ 916.120407][T12375] netlink: 'syz.1.1314': attribute type 3 has an invalid length. [ 916.166311][T12375] syzkaller1: entered promiscuous mode [ 916.171829][T12375] syzkaller1: entered allmulticast mode [ 916.532018][ T9878] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 918.024985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 920.926040][T12434] input: syz0 as /devices/virtual/input/input9 [ 921.110625][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 921.123118][T12434] ceph: No mds server is up or the cluster is laggy [ 921.219472][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 922.497408][T12452] tipc: Enabling of bearer rejected, already enabled [ 926.230644][T12466] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 927.185827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 927.424496][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.437620][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.470185][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.485663][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.264984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 931.673646][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.908518][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.691765][T12531] ±ÿ)”ëfl: entered promiscuous mode [ 935.716475][T12531] tunl0: entered promiscuous mode [ 935.734727][T12531] gre0: entered promiscuous mode [ 935.844675][T12531] gretap0: entered promiscuous mode [ 935.868651][T12531] erspan0: entered promiscuous mode [ 935.886617][T12531] ip_vti0: entered promiscuous mode [ 935.905545][T12531] ip6_vti0: entered promiscuous mode [ 935.933483][T12531] sit0: entered promiscuous mode [ 936.006809][T12531] ip6tnl0: entered promiscuous mode [ 937.338671][T12531] ip6gre0: entered promiscuous mode [ 937.347795][T12531] tipc: Resetting bearer [ 937.422781][T12531] bridge0: entered promiscuous mode [ 937.459926][T12531] vcan0: entered promiscuous mode [ 937.477240][T12531] bond0: entered promiscuous mode [ 937.482292][T12531] bond_slave_0: entered promiscuous mode [ 937.488238][T12531] bond_slave_1: entered promiscuous mode [ 937.515463][T12531] team0: entered promiscuous mode [ 937.520511][T12531] team_slave_0: entered promiscuous mode [ 937.526286][T12531] team_slave_1: entered promiscuous mode [ 937.531983][T12531] macvlan2: entered promiscuous mode [ 937.537287][T12531] bond1: entered promiscuous mode [ 937.574694][T12531] nlmon0: entered promiscuous mode [ 937.581463][T12531] caif0: entered promiscuous mode [ 937.597193][T12531] vxcan0: entered promiscuous mode [ 937.608569][T12531] vxcan1: entered promiscuous mode [ 937.625794][T12531] veth0: entered promiscuous mode [ 937.657768][T12531] veth1: entered promiscuous mode [ 937.717782][T12531] wg0: entered promiscuous mode [ 937.781858][T12531] wg1: entered promiscuous mode [ 937.856830][T12531] wg2: entered promiscuous mode [ 937.885929][T12531] veth0_to_bridge: entered promiscuous mode [ 937.941292][T12531] veth1_to_bridge: entered promiscuous mode [ 937.976572][T12531] veth0_to_bond: entered promiscuous mode [ 938.016517][T12531] veth1_to_bond: entered promiscuous mode [ 938.097620][T12531] veth0_to_team: entered promiscuous mode [ 938.143671][T12531] veth1_to_team: entered promiscuous mode [ 938.200890][T12531] veth0_to_batadv: entered promiscuous mode [ 938.234089][T12531] batadv_slave_0: entered promiscuous mode [ 938.276061][T12531] veth1_to_batadv: entered promiscuous mode [ 938.324083][T12531] batadv_slave_1: entered promiscuous mode [ 938.354806][T12531] xfrm0: entered promiscuous mode [ 938.385471][T12531] veth0_to_hsr: entered promiscuous mode [ 938.469153][T12531] veth1_to_hsr: entered promiscuous mode [ 938.531971][T12531] hsr0: entered promiscuous mode [ 938.556021][T12531] veth1_virt_wifi: entered promiscuous mode [ 938.591029][T12531] veth0_virt_wifi: entered promiscuous mode [ 938.599689][T12531] virt_wifi0: entered promiscuous mode [ 938.733235][T12531] vlan0: entered promiscuous mode [ 938.738738][T12531] vlan1: entered promiscuous mode [ 938.768292][T12531] macvlan0: entered promiscuous mode [ 938.791919][T12531] macvlan1: entered promiscuous mode [ 938.799563][T12531] ipvlan0: entered promiscuous mode [ 938.804907][T12531] ipvlan1: entered promiscuous mode [ 938.859152][T12531] macvtap0: entered promiscuous mode [ 940.105045][T12531] macsec0: entered promiscuous mode [ 940.124431][T12531] geneve0: entered promiscuous mode [ 940.140890][T12554] mmap: syz.0.1340 (12554): VmData 49479680 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 940.159397][T12531] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.168628][T12531] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.177535][T12531] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.186403][T12531] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.195658][T12531] geneve1: entered promiscuous mode [ 940.224543][T12531] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 940.243696][T12531] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 940.261412][T12531] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 940.270444][T12531] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 940.277549][T12531] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 940.284550][T12531] bridge1: entered promiscuous mode [ 940.299653][T12531] pimreg: entered promiscuous mode [ 940.309105][T12531] sit1: entered promiscuous mode [ 940.393690][T12531] bond1: left allmulticast mode [ 940.398684][T12531] ip6gretap1: left allmulticast mode [ 940.417327][T12531] bond2: entered promiscuous mode [ 940.427180][T12531] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.436291][T12531] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.445258][T12531] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.454352][T12531] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.468472][T12531] D: entered promiscuous mode [ 940.481885][T12531] ipip0: entered promiscuous mode [ 940.487819][T12531] veth0_vlan.4093: entered promiscuous mode [ 940.493877][T12531] vlan0004: entered promiscuous mode [ 941.526377][T12556] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 942.798845][T12569] overlayfs: failed to clone upperpath [ 942.836691][T12569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1348'. [ 944.028981][T12574] udevd[12574]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 944.079035][T12574] udevd[12574]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 944.721535][T12587] overlayfs: failed to clone upperpath [ 946.463068][T12605] lo speed is unknown, defaulting to 1000 [ 946.469878][T12605] lo speed is unknown, defaulting to 1000 [ 946.515560][T12605] lo speed is unknown, defaulting to 1000 [ 946.551119][T12605] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 946.725447][T12605] lo speed is unknown, defaulting to 1000 [ 946.753223][T12605] lo speed is unknown, defaulting to 1000 [ 947.493891][T12609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 947.557477][T12605] lo speed is unknown, defaulting to 1000 [ 947.564049][T12605] lo speed is unknown, defaulting to 1000 [ 947.635840][T12613] C: renamed from team_slave_0 (while UP) [ 947.669598][T12613] netlink: 'syz.0.1355': attribute type 2 has an invalid length. [ 947.703722][T12613] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1355'. [ 947.743419][T12613] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 948.911666][T12618] bond0: (slave bond_slave_0): Releasing backup interface [ 950.749083][T12618] bond0: (slave bond_slave_1): Releasing backup interface [ 952.172573][T12618] team0: Port device team_slave_0 removed [ 952.254006][T12618] team0: Port device team_slave_1 removed [ 952.267210][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.274628][T12618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.299900][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.315590][T12618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.792962][T12644] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1363'. [ 953.903469][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 954.628675][ T9878] [ 954.631046][ T9878] ====================================================== [ 954.638068][ T9878] WARNING: possible circular locking dependency detected [ 954.645098][ T9878] syzkaller #0 Not tainted [ 954.649517][ T9878] ------------------------------------------------------ [ 954.656533][ T9878] kworker/u5:3/9878 is trying to acquire lock: [ 954.662683][ T9878] ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 954.671939][ T9878] [ 954.671939][ T9878] but task is already holding lock: [ 954.679303][ T9878] ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 954.688640][ T9878] [ 954.688640][ T9878] which lock already depends on the new lock. [ 954.688640][ T9878] [ 954.699045][ T9878] [ 954.699045][ T9878] the existing dependency chain (in reverse order) is: [ 954.708063][ T9878] [ 954.708063][ T9878] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 954.715815][ T9878] __mutex_lock+0x135/0xc80 [ 954.720853][ T9878] hci_remote_features_evt+0x535/0x900 [ 954.726845][ T9878] hci_event_packet+0x807/0x1280 [ 954.732326][ T9878] hci_rx_work+0x43a/0xd60 [ 954.737275][ T9878] process_scheduled_works+0xa60/0x1600 [ 954.743356][ T9878] worker_thread+0xa5e/0xfe0 [ 954.748474][ T9878] kthread+0x2fa/0x390 [ 954.753072][ T9878] ret_from_fork+0x48/0x80 [ 954.758036][ T9878] ret_from_fork_asm+0x11/0x20 [ 954.763333][ T9878] [ 954.763333][ T9878] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 954.770647][ T9878] __mutex_lock+0x135/0xc80 [ 954.775688][ T9878] l2cap_chan_connect+0xfc/0xe30 [ 954.781159][ T9878] l2cap_sock_connect+0x586/0x760 [ 954.786706][ T9878] kernel_connect+0x142/0x1c0 [ 954.791907][ T9878] rfcomm_dlc_open+0xa1f/0xec0 [ 954.797186][ T9878] rfcomm_sock_connect+0x2ed/0x600 [ 954.802815][ T9878] __sys_connect+0x3da/0x470 [ 954.807920][ T9878] __x64_sys_connect+0x7a/0x90 [ 954.813200][ T9878] do_syscall_64+0x55/0xb0 [ 954.818137][ T9878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 954.824552][ T9878] [ 954.824552][ T9878] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 954.831928][ T9878] __lock_acquire+0x3a07/0x7eb0 [ 954.837297][ T9878] lock_acquire+0x19e/0x420 [ 954.842313][ T9878] __mutex_lock+0x135/0xc80 [ 954.847329][ T9878] rfcomm_security_cfm+0x41/0x550 [ 954.852872][ T9878] hci_encrypt_cfm+0x363/0x4d0 [ 954.858156][ T9878] hci_cc_read_enc_key_size+0x219/0x380 [ 954.864217][ T9878] hci_cmd_complete_evt+0x4e7/0xa40 [ 954.869927][ T9878] hci_event_packet+0x7b4/0x1280 [ 954.875379][ T9878] hci_rx_work+0x43a/0xd60 [ 954.880320][ T9878] process_scheduled_works+0xa60/0x1600 [ 954.886380][ T9878] worker_thread+0xa5e/0xfe0 [ 954.891489][ T9878] kthread+0x2fa/0x390 [ 954.896077][ T9878] ret_from_fork+0x48/0x80 [ 954.901013][ T9878] ret_from_fork_asm+0x11/0x20 [ 954.906293][ T9878] [ 954.906293][ T9878] other info that might help us debug this: [ 954.906293][ T9878] [ 954.916512][ T9878] Chain exists of: [ 954.916512][ T9878] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 954.916512][ T9878] [ 954.929022][ T9878] Possible unsafe locking scenario: [ 954.929022][ T9878] [ 954.936459][ T9878] CPU0 CPU1 [ 954.941811][ T9878] ---- ---- [ 954.947164][ T9878] lock(hci_cb_list_lock); [ 954.951660][ T9878] lock(&hdev->lock); [ 954.958241][ T9878] lock(hci_cb_list_lock); [ 954.965260][ T9878] lock(rfcomm_mutex); [ 954.969415][ T9878] [ 954.969415][ T9878] *** DEADLOCK *** [ 954.969415][ T9878] [ 954.977548][ T9878] 4 locks held by kworker/u5:3/9878: [ 954.982817][ T9878] #0: ffff88805c01bd38 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 954.993818][ T9878] #1: ffffc900038b7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 955.005825][ T9878] #2: ffff8880225000b8 (&hdev->lock){+.+.}-{3:3}, at: hci_cc_read_enc_key_size+0x9c/0x380 [ 955.015831][ T9878] #3: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 955.025579][ T9878] [ 955.025579][ T9878] stack backtrace: [ 955.031462][ T9878] CPU: 0 PID: 9878 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 955.038999][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 955.049046][ T9878] Workqueue: hci4 hci_rx_work [ 955.053722][ T9878] Call Trace: [ 955.056990][ T9878] [ 955.059913][ T9878] dump_stack_lvl+0x18c/0x250 [ 955.064581][ T9878] ? load_image+0x420/0x420 [ 955.069082][ T9878] ? show_regs_print_info+0x20/0x20 [ 955.074278][ T9878] ? print_circular_bug+0x12b/0x1a0 [ 955.079475][ T9878] check_noncircular+0x2fc/0x400 [ 955.084412][ T9878] ? print_deadlock_bug+0x5d0/0x5d0 [ 955.089606][ T9878] ? lockdep_lock+0xf5/0x230 [ 955.094193][ T9878] ? _find_first_zero_bit+0xd6/0x100 [ 955.099474][ T9878] __lock_acquire+0x3a07/0x7eb0 [ 955.104329][ T9878] ? finish_task_switch+0x262/0x8f0 [ 955.109522][ T9878] ? verify_lock_unused+0x140/0x140 [ 955.114715][ T9878] ? finish_task_switch+0x262/0x8f0 [ 955.119908][ T9878] ? __schedule+0x15b6/0x4660 [ 955.124585][ T9878] lock_acquire+0x19e/0x420 [ 955.129087][ T9878] ? rfcomm_security_cfm+0x41/0x550 [ 955.134288][ T9878] ? __might_sleep+0xe0/0xe0 [ 955.138874][ T9878] ? mark_lock+0x94/0x320 [ 955.143194][ T9878] ? read_lock_is_recursive+0x20/0x20 [ 955.148558][ T9878] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 955.154537][ T9878] __mutex_lock+0x135/0xc80 [ 955.159034][ T9878] ? rfcomm_security_cfm+0x41/0x550 [ 955.164229][ T9878] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 955.170207][ T9878] ? preempt_schedule_notrace+0x110/0x110 [ 955.175925][ T9878] ? rfcomm_security_cfm+0x41/0x550 [ 955.181120][ T9878] ? lock_chain_count+0x20/0x20 [ 955.185966][ T9878] ? mutex_lock_nested+0x20/0x20 [ 955.190898][ T9878] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 955.196528][ T9878] ? lockdep_hardirqs_on+0x98/0x150 [ 955.201724][ T9878] rfcomm_security_cfm+0x41/0x550 [ 955.206750][ T9878] ? rfcomm_send_msc+0x360/0x360 [ 955.211683][ T9878] hci_encrypt_cfm+0x363/0x4d0 [ 955.216445][ T9878] hci_cc_read_enc_key_size+0x219/0x380 [ 955.221993][ T9878] hci_cmd_complete_evt+0x4e7/0xa40 [ 955.227192][ T9878] ? hci_remote_features_evt+0x900/0x900 [ 955.232818][ T9878] hci_event_packet+0x7b4/0x1280 [ 955.237752][ T9878] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 955.243377][ T9878] ? bis_list+0x290/0x290 [ 955.247704][ T9878] ? kcov_remote_start+0x1b7/0x810 [ 955.252812][ T9878] ? hci_send_to_monitor+0xd7/0x4f0 [ 955.258005][ T9878] hci_rx_work+0x43a/0xd60 [ 955.262422][ T9878] ? process_scheduled_works+0x975/0x1600 [ 955.268140][ T9878] process_scheduled_works+0xa60/0x1600 [ 955.273692][ T9878] ? worker_attach_to_pool+0x370/0x370 [ 955.279152][ T9878] ? assign_work+0x3cc/0x5d0 [ 955.283741][ T9878] worker_thread+0xa5e/0xfe0 [ 955.288329][ T9878] ? _raw_spin_unlock+0x40/0x40 [ 955.293175][ T9878] ? __kthread_parkme+0x71/0x1c0 [ 955.298117][ T9878] kthread+0x2fa/0x390 [ 955.302188][ T9878] ? pr_cont_work+0x550/0x550 [ 955.306864][ T9878] ? kthread_blkcg+0xd0/0xd0 [ 955.311448][ T9878] ret_from_fork+0x48/0x80 [ 955.315861][ T9878] ? kthread_blkcg+0xd0/0xd0 [ 955.320444][ T9878] ret_from_fork_asm+0x11/0x20 [ 955.325218][ T9878] [ 955.520675][T12657] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 955.530675][T12657] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 955.558593][T12655] ip6_tables: ip6tables: counters copy to user failed while replacing table