last executing test programs: 18m36.12798287s ago: executing program 2 (id=240): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) sendmmsg(r0, 0x0, 0x0, 0x40840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 18m35.101886352s ago: executing program 2 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) creat(0x0, 0x350) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r4, &(0x7f0000000100), 0xfef0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x34, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r6, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 18m32.426748817s ago: executing program 2 (id=248): syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) getresuid(&(0x7f0000000200), &(0x7f0000000280)=0x0, &(0x7f0000000300)) r2 = geteuid() setresuid(r0, r1, r2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 18m24.843008029s ago: executing program 2 (id=261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = dup(r0) setregid(0xee00, 0xee00) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000080)) 18m23.808669251s ago: executing program 2 (id=264): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) clock_gettime(0x4, &(0x7f0000000340)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(r4, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18m22.032020171s ago: executing program 2 (id=268): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 18m6.490986134s ago: executing program 32 (id=268): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 9m54.667108093s ago: executing program 5 (id=1185): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd72, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x80000) readv(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) recvmsg$unix(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0xa, 0x29, 0x0, 0x19, 0x4, 0xc0, 0x2, 0x14c, 0x1}) 9m50.16691396s ago: executing program 5 (id=1192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) ioprio_set$pid(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) eventfd2(0x0, 0x0) io_submit(r3, 0x0, &(0x7f00000006c0)) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) clock_gettime(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 9m47.054797457s ago: executing program 5 (id=1196): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) finit_module(r1, 0x0, 0x1) r2 = socket(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f0000000180)}, 0x20) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) getpid() r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9m41.887288177s ago: executing program 5 (id=1204): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x28102) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xbfff, 0x4}, 0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) 9m40.44645203s ago: executing program 5 (id=1208): mkdirat(0xffffffffffffff9c, 0x0, 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x149040) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) open_by_handle_at(r4, 0x0, 0x68000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) 9m35.07857704s ago: executing program 5 (id=1214): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) r6 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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") r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20048084) 9m19.032891149s ago: executing program 33 (id=1214): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) r6 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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") r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20048084) 1m2.5929893s ago: executing program 3 (id=2229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0xffffffff, {0xa}}, 0x14}}, 0x20008080) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x108, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(r6, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) pwritev(r6, 0x0, 0x0, 0xffffff01, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x100019b, &(0x7f0000000100), 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000400000100c28000080005000500000008000500", @ANYRES32=r10, @ANYBLOB="1f84f82c9bfa2be57be459be2b6b366bfe3244d1fe99c63d397ed0eefe0d85dd61d1d677bcfc12a4ab64614002d511324f1501057256e03d1e7f8037b628d0310bc70a4baf8c0a86be2315168e0996d6f08392cc1b41488cb7b7f81ca902ed8da13e9c017b13c4e8d80c6c4fbe4d7fce786741a6b78bc435d44747f6ee3a5cde362b03b173825baf"], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1m1.116222825s ago: executing program 3 (id=2231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 58.602267061s ago: executing program 3 (id=2237): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000090000000000", @ANYBLOB="3126e0dd9db049f4f81b9b14996e83b8f5665c5ecd61ee1064bc1a5917b3fcba93e20280dac03fd5d71515a12d02fbe9aad92cc1a4de96c10c038f1205b15b5d8599e1e5266b98682642ccf67db4b69a2713c9f4a6528b94a7621bc18099293d75ae7f98e6a2e2eca50a5bf2031e847d4f294918ff928b2ab955290722749558b988c7ca010ab6ba701fa29ffd5d408191376a2643385046fe22da8f2b4316a6995724d88bb46fab8413fa76be0726672b7aca7ff764c1fe13542a467fa9bdf817ecefaf", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r2, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setresuid(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = semget(0x0, 0x4, 0x39c) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) nanosleep(0x0, 0x0) 58.525585545s ago: executing program 3 (id=2239): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) openat$cgroup_type(r6, &(0x7f00000000c0), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) io_submit(r4, 0x0, &(0x7f00000011c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 53.081394529s ago: executing program 3 (id=2252): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 49.738522208s ago: executing program 3 (id=2257): socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r5, &(0x7f00000008c0)="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", 0xcad) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40) r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r8 = getegid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000802, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,time_offset=0x0000000000000003,gid=', @ANYRESHEX=r8, @ANYBLOB="2c666d61736b3d30303030303000303030263030303030303030303030362c696f636861727365743d63703836332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c757466382c646d61736b3d3030303030303030303030303030303030303030a930312c00"], 0x1, 0x1537, &(0x7f00000034c0)="$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") write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0xfffffffffffffffd, 0xe, 0xac, 0x3, 0x4, {0x0, 0xff00000000000000, 0x5, 0x40000000005, 0x85, 0x7fffffff, 0x8000, 0x7fffffff, 0xfffffffe, 0x4000, 0x0, 0xee00, r8, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) 34.643691827s ago: executing program 34 (id=2257): socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r5, &(0x7f00000008c0)="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", 0xcad) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40) r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r8 = getegid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000802, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,time_offset=0x0000000000000003,gid=', @ANYRESHEX=r8, @ANYBLOB="2c666d61736b3d30303030303000303030263030303030303030303030362c696f636861727365743d63703836332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c757466382c646d61736b3d3030303030303030303030303030303030303030a930312c00"], 0x1, 0x1537, &(0x7f00000034c0)="$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") write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0xfffffffffffffffd, 0xe, 0xac, 0x3, 0x4, {0x0, 0xff00000000000000, 0x5, 0x40000000005, 0x85, 0x7fffffff, 0x8000, 0x7fffffff, 0xfffffffe, 0x4000, 0x0, 0xee00, r8, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) 19.794563184s ago: executing program 4 (id=2312): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x97c, 0x100, 0x4, 0x34424752, [0x101, 0x9], [0x200, 0x101], 0x1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) openat$sndseq(0xffffff9c, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) openat$sysfs(0xffffff9c, 0x0, 0x42000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) 17.094656779s ago: executing program 4 (id=2318): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15.269942782s ago: executing program 6 (id=2321): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0xffffffffffffffae) writev(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r3, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x766db42456863251) getsockname$packet(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 15.10302122s ago: executing program 4 (id=2323): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000090000000000", @ANYBLOB="3126e0dd9db049f4f81b9b14996e83b8f5665c5ecd61ee1064bc1a5917b3fcba93e20280dac03fd5d71515a12d02fbe9aad92cc1a4de96c10c038f1205b15b5d8599e1e5266b98682642ccf67db4b69a2713c9f4a6528b94a7621bc18099293d75ae7f98e6a2e2eca50a5bf2031e847d4f294918ff928b2ab955290722749558b988c7ca010ab6ba701fa29ffd5d408191376a2643385046fe22da8f2b4316a6995724d88bb46fab8413fa76be0726672b7aca7ff764c1fe13542a467fa9bdf817ecefaf", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r2, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setresuid(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = semget(0x0, 0x4, 0x39c) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="24f101c5bf369a17a809b951fec464d9b7cfc7bccbd7f767a872a50bde9c1d2aa825e830fde502ec460d38555339c7e62142e26f7aba304888ec9dbb4e5720ecc16f6304d26eaece48e2d28ce66b4d7cb0d43cfa091de8b9da1bd7", @ANYRES16, @ANYBLOB, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000ffff02110840000802110000001000000002000000"], 0x1e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000000)=[{0x0, 0x2, 0xe0, 0x4}, {0x9, 0x40, 0x5, 0xffffffff}]}, 0x10) 12.278162992s ago: executing program 0 (id=2327): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0xffffffffffffffae) writev(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r3, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x766db42456863251) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039042abd7000f8dbdf2500000000", @ANYRES32, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f"], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) socket$nl_netfilter(0x10, 0x3, 0xc) 11.679116352s ago: executing program 6 (id=2328): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX], 0x5, 0x191, &(0x7f00000003c0)="$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") fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f0000000700), 0xc0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e00030903000000fedbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @broadcast, @broadcast}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') epoll_create1(0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)}, 0x8}], 0x1, 0x122, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) 10.466720113s ago: executing program 4 (id=2329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) shmctl$IPC_SET(r0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syslog(0x2, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000540)={0x0, [[0x223], [0xfffffffb], [0x7]], '\x00', [{}, {0x0, 0xffffffff, 0x0, 0x1}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x280001, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x7fff) sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r5, 0x1) 10.465626203s ago: executing program 0 (id=2338): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0xffffffffffffffae) writev(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r3, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x766db42456863251) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039042abd7000f8dbdf2500000000", @ANYRES32, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f"], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) socket$nl_netfilter(0x10, 0x3, 0xc) 10.464261653s ago: executing program 6 (id=2331): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0xa, 0x400001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0xc, 0x1, &(0x7f0000000040)={0x15, "a9634bb50e02beebf7d28f4bcb87ed9b4472422d5a82aae5849d2c2c2aa9bd026b"}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @reserved}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0xc201}) 8.860741484s ago: executing program 6 (id=2333): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) mkdir(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013900000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x200, 0x0, 0x5, 0x0, &(0x7f00000001c0)=0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x24044040, 0x0, 0x0) 8.843309695s ago: executing program 4 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) mmap(&(0x7f0000b8c000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0xfae76000) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@gid}, {@creator={'creator', 0x3d, "062d407f"}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uid}]}, 0x5, 0x357, &(0x7f0000000580)="$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") socket$netlink(0x10, 0x3, 0x10) listen(r0, 0x563) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}}], 0x1, 0x4008440) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) r9 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r9, &(0x7f0000000180)="a19b03d33b9098fcf7af3f47035584a94f86dc293bee5b2979238b9aa08fe9dfcd4a4b98b84596f701241018dabfacdcbaf5bc0d3fb41968ae8a2a892e2906e384310ea10aa474b267f5c714694fe6c80e0d794bc4cec33a97b958810ddfe9c045e0fb621832", &(0x7f0000000200)=""/76}, 0x20) getdents(r9, &(0x7f0000001fc0)=""/184, 0x20002078) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 8.73339254s ago: executing program 0 (id=2335): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0xffffffffffffffae) writev(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r3, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x766db42456863251) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039042abd7000f8dbdf2500000000", @ANYRES32, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f"], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) socket$nl_netfilter(0x10, 0x3, 0xc) 7.604704217s ago: executing program 6 (id=2336): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000001200)={[{@grpquota}, {@delalloc}, {@resuid}, {@data_ordered}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) open(0x0, 0x40000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x40000001, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfe6}], 0x1}}], 0x2, 0x42, 0x0) geteuid() 7.568021669s ago: executing program 0 (id=2337): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000090000000000", @ANYBLOB="3126e0dd9db049f4f81b9b14996e83b8f5665c5ecd61ee1064bc1a5917b3fcba93e20280dac03fd5d71515a12d02fbe9aad92cc1a4de96c10c038f1205b15b5d8599e1e5266b98682642ccf67db4b69a2713c9f4a6528b94a7621bc18099293d75ae7f98e6a2e2eca50a5bf2031e847d4f294918ff928b2ab955290722749558b988c7ca010ab6ba701fa29ffd5d408191376a2643385046fe22da8f2b4316a6995724d88bb46fab8413fa76be0726672b7aca7ff764c1fe13542a467fa9bdf817ecefaf", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r2, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setresuid(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = semget(0x0, 0x4, 0x39c) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="24f101c5bf369a17a809b951fec464d9b7cfc7bccbd7f767a872a50bde9c1d2aa825e830fde502ec460d38555339c7e62142e26f7aba304888ec9dbb4e5720ecc16f6304d26eaece48e2d28ce66b4d7cb0d43cfa091de8b9da1bd7", @ANYRES16, @ANYBLOB, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) nanosleep(0x0, 0x0) 7.234510155s ago: executing program 0 (id=2340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r6, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0x1, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x134, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x184}}, 0x0) bind$tipc(r2, 0x0, 0x0) inotify_init() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "b54b55c9b691706d", "b5421a989404d5c952ba74f879bed1a5bfadabb985e5681803932ccc7beb0f83", '@;6\x00', "ef3c6c588e3360e2"}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 6.323305462s ago: executing program 1 (id=2341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413000905810320000000000905820220000000000905"], 0x0) 5.682438203s ago: executing program 1 (id=2342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 4.711293403s ago: executing program 1 (id=2343): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0xa, 0x400001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0xc, 0x1, &(0x7f0000000040)={0x15, "a9634bb50e02beebf7d28f4bcb87ed9b4472422d5a82aae5849d2c2c2aa9bd026b"}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @reserved}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0xc201}) 4.218637817s ago: executing program 0 (id=2344): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000001200)={[{@grpquota}, {@delalloc}, {@resuid}, {@data_ordered}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) open(0x0, 0x40000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x40000001, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) setgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfe6}], 0x1}}], 0x2, 0x42, 0x0) geteuid() 3.650744856s ago: executing program 1 (id=2345): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000000)=0x43, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) read(r1, &(0x7f0000000040), 0x0) 2.631232237s ago: executing program 1 (id=2346): socket(0x200000000000011, 0x4000000000080002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000000500010006000000050004000000000009"], 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0xa00004, &(0x7f0000000500)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@mode={'mode', 0x3d, 0x8}}, {}, {@adinicb}, {@gid_forget}, {@uid_forget}, {@umask}, {@anchor={'anchor', 0x3d, 0x907}}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5e11, &(0x7f000000bc40)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffd4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) r7 = creat(0x0, 0x0) fcntl$setstatus(r7, 0x4, 0x6000) io_setup(0x202, 0x0) 1.132218122s ago: executing program 1 (id=2347): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013900000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x200, 0x0, 0x5, 0x0, &(0x7f00000001c0)=0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x24044040, 0x0, 0x0) 50.538917ms ago: executing program 4 (id=2348): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000090000000000", @ANYBLOB="3126e0dd9db049f4f81b9b14996e83b8f5665c5ecd61ee1064bc1a5917b3fcba93e20280dac03fd5d71515a12d02fbe9aad92cc1a4de96c10c038f1205b15b5d8599e1e5266b98682642ccf67db4b69a2713c9f4a6528b94a7621bc18099293d75ae7f98e6a2e2eca50a5bf2031e847d4f294918ff928b2ab955290722749558b988c7ca010ab6ba701fa29ffd5d408191376a2643385046fe22da8f2b4316a6995724d88bb46fab8413fa76be0726672b7aca7ff764c1fe13542a467fa9bdf817ecefaf", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r2, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setresuid(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = semget(0x0, 0x4, 0x39c) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) nanosleep(0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000ffff02110840000802110000001000000002000000"], 0x1e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000000)=[{0x0, 0x2, 0xe0, 0x4}, {0x9, 0x40, 0x5, 0xffffffff}]}, 0x10) 0s ago: executing program 6 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000090000000000", @ANYBLOB="3126e0dd9db049f4f81b9b14996e83b8f5665c5ecd61ee1064bc1a5917b3fcba93e20280dac03fd5d71515a12d02fbe9aad92cc1a4de96c10c038f1205b15b5d8599e1e5266b98682642ccf67db4b69a2713c9f4a6528b94a7621bc18099293d75ae7f98e6a2e2eca50a5bf2031e847d4f294918ff928b2ab955290722749558b988c7ca010ab6ba701fa29ffd5d408191376a2643385046fe22da8f2b4316a6995724d88bb46fab8413fa76be0726672b7aca7ff764c1fe13542a467fa9bdf817ecefaf", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r2, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setresuid(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = semget(0x0, 0x4, 0x39c) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="24f101c5bf369a17a809b951fec464d9b7cfc7bccbd7f767a872a50bde9c1d2aa825e830fde502ec460d38555339c7e62142e26f7aba304888ec9dbb4e5720ecc16f6304d26eaece48e2d28ce66b4d7cb0d43cfa091de8b9da1bd7", @ANYRES16, @ANYBLOB, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) nanosleep(0x0, 0x0) kernel console output (not intermixed with test programs): 4.391967][ T4275] le_conn_complete_evt+0x1062/0x1670 [ 474.397623][ T4275] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 474.404023][ T4275] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 474.409774][ T4275] ? skb_pull_data+0xf7/0x200 [ 474.414652][ T4275] hci_le_conn_complete_evt+0x183/0x440 [ 474.420528][ T4275] ? hci_remote_host_features_evt+0x270/0x270 [ 474.426924][ T4275] hci_event_packet+0x7b9/0x1280 [ 474.431908][ T4275] ? bis_list+0x280/0x280 [ 474.436342][ T4275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 474.442306][ T4275] ? kcov_remote_start+0x4c7/0x7e0 [ 474.449014][ T4275] ? sync_thread_master+0x620/0x10b0 [ 474.454665][ T4275] ? hci_send_to_monitor+0x9c/0x4a0 [ 474.460046][ T4275] hci_rx_work+0x3eb/0xd40 [ 474.465597][ T4275] ? _raw_spin_unlock+0x40/0x40 [ 474.471644][ T4275] ? process_one_work+0x7b0/0x1160 [ 474.476893][ T4275] process_one_work+0x8a2/0x1160 [ 474.481940][ T4275] ? worker_detach_from_pool+0x240/0x240 [ 474.487790][ T4275] ? _raw_spin_lock_irq+0xb7/0xf0 [ 474.493224][ T4275] ? _raw_spin_lock_irqsave+0x100/0x100 [ 474.499594][ T4275] ? kthread_data+0x4b/0xc0 [ 474.504471][ T4275] worker_thread+0xaa2/0x1270 [ 474.509198][ T4275] kthread+0x29d/0x330 [ 474.513298][ T4275] ? worker_clr_flags+0x1a0/0x1a0 [ 474.519032][ T4275] ? kthread_blkcg+0xd0/0xd0 [ 474.523882][ T4275] ret_from_fork+0x1f/0x30 [ 474.528600][ T4275] [ 474.588985][ T4275] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 474.603000][ T4275] Bluetooth: hci4: failed to register connection device [ 475.434350][ T7587] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 475.448880][ T7587] hpfs: filesystem error: improperly stopped [ 475.455122][ T7587] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 475.502723][ T7587] hpfs: You really don't want any checks? You are crazy... [ 475.577241][ T7585] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 475.587801][ T7585] FAT-fs (loop5): Filesystem has been set read-only [ 475.595438][ T7585] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 475.606177][ T7585] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 475.617174][ T7585] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 475.633241][ T7587] hpfs: hpfs_map_sector(): read error [ 475.639150][ T26] audit: type=1800 audit(1774538250.510:29): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.661" name="file1" dev="loop5" ino=1048671 res=0 errno=0 [ 475.675560][ T7587] hpfs: code page support is disabled [ 475.743988][ T7594] loop0: detected capacity change from 0 to 32768 [ 475.794486][ T7587] hpfs: hpfs_map_4sectors(): unaligned read [ 475.821015][ T7587] hpfs: hpfs_map_4sectors(): unaligned read [ 475.826973][ T7587] hpfs: filesystem error: unable to find root dir [ 475.846501][ T7594] XFS (loop0): Mounting V5 Filesystem [ 476.524069][ T7594] XFS (loop0): Ending clean mount [ 476.561891][ T7594] XFS (loop0): Quotacheck needed: Please wait. [ 477.419383][ T7594] XFS (loop0): Quotacheck: Done. [ 478.240867][ T26] audit: type=1800 audit(1774538253.090:30): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.663" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 478.676314][ T4266] XFS (loop0): Unmounting Filesystem [ 479.564293][ T7637] loop1: detected capacity change from 0 to 8 [ 479.595503][ T7637] SQUASHFS error: Failed to read block 0x1ec: -5 [ 479.602148][ T7637] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 479.684472][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz.5.667'. [ 481.476326][ T7656] loop1: detected capacity change from 0 to 128 [ 481.507632][ T7656] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 481.550964][ T7656] hpfs: filesystem error: improperly stopped [ 481.571093][ T7656] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 481.585637][ T7656] hpfs: You really don't want any checks? You are crazy... [ 481.596161][ T7656] hpfs: hpfs_map_sector(): read error [ 481.614422][ T7656] hpfs: code page support is disabled [ 481.669715][ T7656] hpfs: hpfs_map_4sectors(): unaligned read [ 481.686462][ T7656] hpfs: hpfs_map_4sectors(): unaligned read [ 481.700295][ T7656] hpfs: filesystem error: unable to find root dir [ 486.781743][ T7701] loop0: detected capacity change from 0 to 4096 [ 486.789740][ T7701] ntfs3: Unknown parameter 'windows_names' [ 493.331120][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.702'. [ 494.756745][ T7801] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 495.978389][ T7808] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 496.026346][ T7808] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 498.301909][ T7825] loop4: detected capacity change from 0 to 128 [ 498.375874][ T7825] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 499.039005][ T7832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.719'. [ 499.158079][ T7825] hpfs: filesystem error: improperly stopped [ 499.248873][ T7825] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 499.256675][ T7825] hpfs: You really don't want any checks? You are crazy... [ 499.445712][ T7825] hpfs: hpfs_map_sector(): read error [ 499.458801][ T7825] hpfs: code page support is disabled [ 499.468963][ T7825] hpfs: hpfs_map_4sectors(): unaligned read [ 499.475086][ T7825] hpfs: hpfs_map_4sectors(): unaligned read [ 499.538841][ T7825] hpfs: filesystem error: unable to find root dir [ 499.984590][ T7855] overlayfs: missing 'workdir' [ 501.823244][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.831011][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.934760][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 509.507005][ T7924] overlayfs: missing 'workdir' [ 509.986451][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.736'. [ 517.591984][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.752'. [ 520.837257][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.759'. [ 522.659512][ T8016] loop5: detected capacity change from 0 to 128 [ 522.965580][ T8016] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 523.172095][ T8016] hpfs: filesystem error: improperly stopped [ 523.282428][ T8016] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 523.394463][ T8016] hpfs: You really don't want any checks? You are crazy... [ 523.739137][ T8016] hpfs: hpfs_map_sector(): read error [ 523.765107][ T8016] hpfs: code page support is disabled [ 523.838931][ T8016] hpfs: hpfs_map_4sectors(): unaligned read [ 523.845169][ T8016] hpfs: hpfs_map_4sectors(): unaligned read [ 523.941431][ T8016] hpfs: filesystem error: unable to find root dir [ 524.326585][ T8029] 9pnet_virtio: no channels available for device [ 526.452049][ T8042] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 526.462163][ T8042] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 526.472102][ T8042] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 526.489865][ T8042] syz.0.757 (8042) used greatest stack depth: 18136 bytes left [ 527.445605][ T26] audit: type=1800 audit(1774538301.340:31): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.757" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 533.004659][ T8083] loop5: detected capacity change from 0 to 128 [ 533.044665][ T8083] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 533.099152][ T8083] hpfs: filesystem error: improperly stopped [ 533.109952][ T8083] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 533.128298][ T8083] hpfs: You really don't want any checks? You are crazy... [ 533.177248][ T8083] hpfs: hpfs_map_sector(): read error [ 533.193627][ T8083] hpfs: code page support is disabled [ 533.228318][ T8083] hpfs: hpfs_map_4sectors(): unaligned read [ 533.238450][ T8083] hpfs: hpfs_map_4sectors(): unaligned read [ 533.263495][ T8083] hpfs: filesystem error: unable to find root dir [ 537.109970][ T8098] loop1: detected capacity change from 0 to 32768 [ 538.474725][ T8098] XFS (loop1): Mounting V5 Filesystem [ 538.667039][ T8113] Bluetooth: MGMT ver 1.22 [ 539.275975][ T8098] XFS (loop1): Ending clean mount [ 539.285546][ T8098] XFS (loop1): Quotacheck needed: Please wait. [ 539.406005][ T8098] XFS (loop1): Quotacheck: Done. [ 539.565852][ T4267] XFS (loop1): Unmounting Filesystem [ 540.898365][ T8129] Device name cannot be null; rc = [-22] [ 541.188982][ T4524] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 541.396599][ T4524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.413535][ T4524] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 541.532648][ T4524] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 541.542063][ T4524] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 541.550674][ T4524] usb 6-1: Product: syz [ 541.554863][ T4524] usb 6-1: SerialNumber: syz [ 541.573755][ T4524] usb 6-1: config 0 descriptor?? [ 541.836298][ T8127] netlink: 96 bytes leftover after parsing attributes in process `syz.5.787'. [ 543.367630][ T8138] loop1: detected capacity change from 0 to 4096 [ 544.040049][ T8138] ntfs3: Unknown parameter 'windows_names' [ 544.146774][ T4315] usb 6-1: USB disconnect, device number 2 [ 549.386397][ T8187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.799'. [ 554.121018][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'. [ 555.960431][ T8255] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 557.041291][ T8264] syz.4.815 (8264) used greatest stack depth: 17680 bytes left [ 557.188347][ T8266] loop4: detected capacity change from 0 to 64 [ 557.228737][ T8266] MINIX-fs: bad superblock [ 558.134552][ T8266] loop4: detected capacity change from 0 to 4096 [ 558.334229][ T8273] trusted_key: encrypted_key: insufficient parameters specified [ 559.558798][ T8280] netlink: 'syz.1.820': attribute type 2 has an invalid length. [ 559.622895][ T8281] netlink: 'syz.1.820': attribute type 2 has an invalid length. [ 559.646839][ T8280] device 0 entered promiscuous mode [ 559.722950][ T8281] netlink: 10 bytes leftover after parsing attributes in process `syz.1.820'. [ 562.248027][ T8303] loop1: detected capacity change from 0 to 256 [ 562.383949][ T8303] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 563.252441][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.258909][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.394046][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.826'. [ 564.258907][ T8319] loop0: detected capacity change from 0 to 128 [ 564.559881][ T8319] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 564.668927][ T8319] hpfs: filesystem error: improperly stopped [ 564.706054][ T8319] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 564.756769][ T8319] hpfs: You really don't want any checks? You are crazy... [ 564.821611][ T8319] hpfs: hpfs_map_sector(): read error [ 564.827755][ T8319] hpfs: code page support is disabled [ 564.879946][ T8319] hpfs: hpfs_map_4sectors(): unaligned read [ 565.019766][ T8319] hpfs: hpfs_map_4sectors(): unaligned read [ 565.031076][ T8319] hpfs: filesystem error: unable to find root dir [ 566.416706][ T8337] loop5: detected capacity change from 0 to 40427 [ 566.438628][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.823'. [ 566.515555][ T8337] F2FS-fs (loop5): invalid crc value [ 566.706054][ T8337] F2FS-fs (loop5): Found nat_bits in checkpoint [ 566.777833][ T8337] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 566.836695][ T8340] loop1: detected capacity change from 0 to 1024 [ 567.019638][ T8340] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 567.182610][ T5684] syz-executor: attempt to access beyond end of device [ 567.182610][ T5684] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 567.225753][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 569.423901][ T8383] loop0: detected capacity change from 0 to 128 [ 569.470409][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.477639][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.505625][ T8383] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 569.559847][ T8383] hpfs: filesystem error: improperly stopped [ 569.565129][ T8371] bridge0: port 3(syz_tun) entered blocking state [ 569.567565][ T8383] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 569.594809][ T8383] hpfs: You really don't want any checks? You are crazy... [ 569.607981][ T8383] hpfs: hpfs_map_sector(): read error [ 569.614839][ T8383] hpfs: code page support is disabled [ 569.625724][ T8383] hpfs: hpfs_map_4sectors(): unaligned read [ 569.638426][ T8383] hpfs: hpfs_map_4sectors(): unaligned read [ 569.658933][ T8371] bridge0: port 3(syz_tun) entered disabled state [ 569.681133][ T8371] device syz_tun entered promiscuous mode [ 569.687275][ T8383] hpfs: filesystem error: unable to find root dir [ 571.495385][ T8397] loop0: detected capacity change from 0 to 32768 [ 571.611412][ T8401] loop1: detected capacity change from 0 to 4096 [ 571.624375][ T8401] ntfs3: Unknown parameter 'windows_names' [ 571.684595][ T8397] XFS (loop0): Mounting V5 Filesystem [ 573.764472][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'. [ 573.813651][ T8397] XFS (loop0): Ending clean mount [ 573.825485][ T8397] XFS (loop0): Quotacheck needed: Please wait. [ 574.047160][ T8397] XFS (loop0): Quotacheck: Done. [ 574.551154][ T26] audit: type=1800 audit(1774538349.430:32): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.844" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 576.162358][ T8436] loop4: detected capacity change from 0 to 128 [ 576.232368][ T8436] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 576.301068][ T8436] hpfs: filesystem error: improperly stopped [ 576.348881][ T8436] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 576.428833][ T8436] hpfs: You really don't want any checks? You are crazy... [ 576.430110][ T4266] XFS (loop0): Unmounting Filesystem [ 576.436897][ T8436] hpfs: hpfs_map_sector(): read error [ 576.570327][ T8436] hpfs: code page support is disabled [ 576.576245][ T8436] hpfs: hpfs_map_4sectors(): unaligned read [ 576.607095][ T8436] hpfs: hpfs_map_4sectors(): unaligned read [ 576.615912][ T8436] hpfs: filesystem error: unable to find root dir [ 576.948254][ T8441] trusted_key: encrypted_key: insufficient parameters specified [ 578.591354][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.852'. [ 583.246542][ T8502] trusted_key: encrypted_key: insufficient parameters specified [ 584.512376][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.871'. [ 585.585658][ T8526] Sensor A: ================= START STATUS ================= [ 585.628754][ T8526] Sensor A: Test Pattern: 75% Colorbar [ 585.648845][ T8526] Sensor A: Show Information: All [ 585.654320][ T8526] Sensor A: Vertical Flip: false [ 585.660344][ T8526] Sensor A: Horizontal Flip: false [ 585.665813][ T8526] Sensor A: Brightness: 128 [ 585.671564][ T8526] Sensor A: Contrast: 128 [ 585.676419][ T8526] Sensor A: Hue: 0 [ 585.680596][ T8526] Sensor A: Saturation: 128 [ 585.686955][ T8526] Sensor A: ================== END STATUS ================== [ 585.887456][ T4825] Bluetooth: hci2: Frame reassembly failed (-84) [ 585.912087][ T4825] Bluetooth: hci2: Frame reassembly failed (-84) [ 587.898879][ T4275] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 590.192752][ T8561] loop5: detected capacity change from 0 to 32768 [ 590.249935][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.880'. [ 590.402957][ T8571] trusted_key: encrypted_key: insufficient parameters specified [ 590.544448][ T8570] loop1: detected capacity change from 0 to 128 [ 591.778928][ T8561] XFS (loop5): Mounting V5 Filesystem [ 591.966121][ T8561] XFS (loop5): Ending clean mount [ 592.078301][ T8561] XFS (loop5): Quotacheck needed: Please wait. [ 592.253033][ T8561] XFS (loop5): Quotacheck: Done. [ 593.222520][ T26] audit: type=1800 audit(1774538367.480:33): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.882" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4428 res=0 errno=0 [ 593.544874][ T5684] XFS (loop5): Unmounting Filesystem [ 593.658048][ T8592] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.887'. [ 593.667580][ T8592] bridge_slave_1: default FDB implementation only supports local addresses [ 596.345272][ T8620] loop4: detected capacity change from 0 to 32768 [ 596.425160][ T8620] XFS (loop4): Mounting V5 Filesystem [ 596.541839][ T8620] XFS (loop4): Ending clean mount [ 596.549607][ T8620] XFS (loop4): Quotacheck needed: Please wait. [ 596.764756][ T8620] XFS (loop4): Quotacheck: Done. [ 597.604231][ T4277] XFS (loop4): Unmounting Filesystem [ 597.630543][ T8641] loop5: detected capacity change from 0 to 128 [ 597.674722][ T8641] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 597.766878][ T8641] hpfs: filesystem error: improperly stopped [ 597.825061][ T8641] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 597.878834][ T8641] hpfs: You really don't want any checks? You are crazy... [ 597.892185][ T8641] hpfs: hpfs_map_sector(): read error [ 597.897720][ T8641] hpfs: code page support is disabled [ 597.907020][ T8641] hpfs: hpfs_map_4sectors(): unaligned read [ 597.935639][ T8641] hpfs: hpfs_map_4sectors(): unaligned read [ 597.951833][ T8641] hpfs: filesystem error: unable to find root dir [ 598.271288][ T8647] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 598.662697][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.899'. [ 599.367682][ T8655] loop1: detected capacity change from 0 to 512 [ 599.377158][ T8655] EXT4-fs: Ignoring removed nobh option [ 599.419479][ T8655] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 599.554171][ T8655] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 599.574644][ T8655] EXT4-fs (loop1): 1 truncate cleaned up [ 599.580957][ T8655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 600.942030][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 601.276847][ T8672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 601.284939][ T8672] IPv6: NLM_F_CREATE should be set when creating new route [ 601.292421][ T8672] IPv6: NLM_F_CREATE should be set when creating new route [ 601.299843][ T8672] IPv6: NLM_F_CREATE should be set when creating new route [ 601.906912][ T8684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 604.183393][ T8704] loop1: detected capacity change from 0 to 128 [ 604.216591][ T8704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 604.229593][ T8704] hpfs: filesystem error: improperly stopped [ 604.235743][ T8704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 604.244125][ T8704] hpfs: You really don't want any checks? You are crazy... [ 604.252741][ T8704] hpfs: hpfs_map_sector(): read error [ 604.258948][ T8704] hpfs: code page support is disabled [ 604.638892][ T8704] hpfs: hpfs_map_4sectors(): unaligned read [ 604.645394][ T8704] hpfs: hpfs_map_4sectors(): unaligned read [ 604.664441][ T8704] hpfs: filesystem error: unable to find root dir [ 606.096523][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.916'. [ 606.364080][ T8733] netlink: 'syz.4.919': attribute type 10 has an invalid length. [ 606.372437][ T8733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.919'. [ 606.382422][ T8733] device batadv0 entered promiscuous mode [ 607.036675][ T8733] bond0: (slave batadv0): Releasing backup interface [ 607.115749][ T8733] bridge0: port 4(batadv0) entered blocking state [ 607.122447][ T8733] bridge0: port 4(batadv0) entered disabled state [ 608.171003][ T4375] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 608.181443][ T4375] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 609.964626][ T8764] loop5: detected capacity change from 0 to 32768 [ 611.647178][ T8781] loop0: detected capacity change from 0 to 32768 [ 611.872036][ T8791] loop4: detected capacity change from 0 to 128 [ 612.408449][ T7207] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 612.443408][ T8781] XFS (loop0): Mounting V5 Filesystem [ 612.789103][ T8781] XFS (loop0): Ending clean mount [ 612.796274][ T8781] XFS (loop0): Quotacheck needed: Please wait. [ 614.882444][ T8781] XFS (loop0): Quotacheck: Done. [ 615.063263][ T4266] XFS (loop0): Unmounting Filesystem [ 621.535204][ T8862] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.946'. [ 621.544621][ T8862] bridge_slave_1: default FDB implementation only supports local addresses [ 624.717229][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.841273][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.169589][ T8888] loop0: detected capacity change from 0 to 64 [ 625.218578][ T8888] MINIX-fs: bad superblock [ 625.272231][ T8886] SET target dimension over the limit! [ 629.879686][ T8931] loop0: detected capacity change from 0 to 256 [ 631.863021][ T8931] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 632.502087][ T8941] loop1: detected capacity change from 0 to 1024 [ 632.509409][ T8941] EXT4-fs: Ignoring removed oldalloc option [ 632.515403][ T8941] EXT4-fs: Ignoring removed bh option [ 632.521726][ T8941] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 632.679153][ T8941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 632.699890][ T26] audit: type=1804 audit(1774538663.584:34): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.961" name="/newroot/197/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 633.299240][ T8957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 634.083899][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 634.479424][ T4275] Bluetooth: Wrong link type (-22) [ 635.474179][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 640.632714][ T9016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 646.005223][ T9047] trusted_key: encrypted_key: insufficient parameters specified [ 647.221550][ T9057] loop4: detected capacity change from 0 to 256 [ 647.250885][ T9057] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 649.191133][ T9077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.828905][ T9122] trusted_key: encrypted_key: insufficient parameters specified [ 655.234526][ T9130] loop5: detected capacity change from 0 to 128 [ 656.786280][ T9137] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 658.110189][ T9140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.842233][ T9168] loop1: detected capacity change from 0 to 64 [ 661.852057][ T9168] hfs: type requires a 4 character value [ 661.857764][ T9168] hfs: unable to parse mount options [ 662.050789][ T9167] loop1: detected capacity change from 0 to 64 [ 663.626179][ T9183] loop4: detected capacity change from 0 to 1024 [ 663.633729][ T9183] EXT4-fs: Ignoring removed oldalloc option [ 663.639914][ T9183] EXT4-fs: Ignoring removed bh option [ 664.183152][ T9183] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 664.186581][ T9188] SET target dimension over the limit! [ 664.343697][ T9183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 664.380782][ T26] audit: type=1804 audit(1774538695.264:35): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1020" name="/newroot/194/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 664.701195][ T9188] delete_channel: no stack [ 665.226302][ T9186] netlink: 'syz.5.1016': attribute type 1 has an invalid length. [ 665.439736][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 665.930066][ T9203] loop0: detected capacity change from 0 to 4096 [ 665.997902][ T9205] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 670.200304][ T9239] Cannot find add_set index 0 as target [ 671.244432][ T9237] delete_channel: no stack [ 671.458062][ T9248] loop5: detected capacity change from 0 to 1024 [ 672.250029][ T9248] EXT4-fs: Ignoring removed oldalloc option [ 672.256528][ T9248] EXT4-fs: Ignoring removed bh option [ 673.138828][ T9248] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 673.261113][ T9263] loop4: detected capacity change from 0 to 1764 [ 673.817387][ T7207] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 673.868903][ T9248] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 675.546774][ T5684] EXT4-fs (loop5): unmounting filesystem. [ 677.920510][ T9312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1048'. [ 684.800852][ T9359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1063'. [ 686.132523][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.139860][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.983980][ T9413] Set syz0 is full, maxelem 0 reached [ 694.058868][ T9418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1077'. [ 697.156979][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1081'. [ 702.910817][ T9478] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1089'. [ 703.141972][ T9484] trusted_key: encrypted_key: insufficient parameters specified [ 705.235756][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1096'. [ 706.698009][ T9513] trusted_key: encrypted_key: insufficient parameters specified [ 708.531745][ T9514] bridge0: port 3(erspan0) entered blocking state [ 708.538350][ T9514] bridge0: port 3(erspan0) entered disabled state [ 708.546249][ T9514] device erspan0 entered promiscuous mode [ 708.552738][ T9514] bridge0: port 3(erspan0) entered blocking state [ 708.559635][ T9514] bridge0: port 3(erspan0) entered forwarding state [ 710.119574][ T9536] loop4: detected capacity change from 0 to 16 [ 710.380957][ T9539] trusted_key: encrypted_key: insufficient parameters specified [ 710.858751][ T9536] erofs: (device loop4): mounted with root inode @ nid 36. [ 710.892125][ T9536] syz.4.1103: attempt to access beyond end of device [ 710.892125][ T9536] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 711.034278][ T9536] syz.4.1103: attempt to access beyond end of device [ 711.034278][ T9536] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 711.052775][ T9536] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 711.411114][ T26] audit: type=1800 audit(1774538741.954:36): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1103" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 713.649163][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1109'. [ 716.886261][ T9593] Set syz0 is full, maxelem 0 reached [ 718.341868][ T9599] bridge0: port 4(erspan0) entered blocking state [ 718.348439][ T9599] bridge0: port 4(erspan0) entered disabled state [ 718.356017][ T9599] device erspan0 entered promiscuous mode [ 718.362407][ T9599] bridge0: port 4(erspan0) entered blocking state [ 718.369720][ T9599] bridge0: port 4(erspan0) entered forwarding state [ 721.542022][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1124'. [ 724.147024][ T9638] trusted_key: encrypted_key: insufficient parameters specified [ 724.840688][ T9640] SET target dimension over the limit! [ 724.926298][ T9642] delete_channel: no stack [ 728.711876][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1130'. [ 729.719714][ T9688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1138'. [ 737.374153][ T4275] Bluetooth: hci4: Malformed Event: 0x02 [ 738.866900][ T9770] trusted_key: encrypted_key: insufficient parameters specified [ 739.794322][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 745.738939][ T9816] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 745.747286][ T9816] UDF-fs: Scanning with blocksize 512 failed [ 745.765322][ T9816] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 745.773765][ T9816] UDF-fs: Scanning with blocksize 1024 failed [ 745.785807][ T9816] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 745.793583][ T9816] UDF-fs: Scanning with blocksize 2048 failed [ 745.809096][ T9816] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 745.816861][ T9816] UDF-fs: Scanning with blocksize 4096 failed [ 746.087164][ T26] audit: type=1326 audit(1774539032.972:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.0.1168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f947079c799 code=0x0 [ 746.818720][ T4275] Bluetooth: hci5: Malformed Event: 0x02 [ 746.848953][ T9820] loop4: detected capacity change from 0 to 512 [ 747.504275][ T9820] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 747.570987][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.578964][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.926522][ T9864] fuse: Bad value for 'fd' [ 752.601021][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 752.608699][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 752.622463][ T9879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.613739][ T9901] loop4: detected capacity change from 0 to 4096 [ 756.565709][ T9908] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 760.706562][ T9936] loop4: detected capacity change from 0 to 128 [ 761.923283][ T9936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 763.387240][ T9936] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.651673][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 768.404516][ T9988] loop0: detected capacity change from 0 to 1024 [ 768.457592][ T9988] EXT4-fs: Ignoring removed nobh option [ 773.660608][ T9988] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 773.796607][T10023] trusted_key: encrypted_key: insufficient parameters specified [ 773.977215][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 774.850923][T10033] loop0: detected capacity change from 0 to 32768 [ 774.967574][T10037] xt_HMARK: spi-set and port-set can't be combined [ 776.937213][T10052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1220'. [ 777.801013][T10061] loop5: detected capacity change from 0 to 4096 [ 777.862717][T10062] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 781.725712][T10077] loop0: detected capacity change from 0 to 40427 [ 781.749925][T10077] F2FS-fs (loop0): Unrecognized mount option "errors=continue" or missing value [ 783.894296][T10089] loop0: detected capacity change from 0 to 128 [ 784.559629][T10089] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 785.379501][T10089] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.714786][T10105] random: crng reseeded on system resumption [ 786.825881][T10106] ax25_connect(): syz.0.1226 uses autobind, please contact jreuter@yaina.de [ 787.438126][T10115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1232'. [ 791.589773][T10144] fuse: Bad value for 'fd' [ 792.699487][T10056] bridge0: port 3(syz_tun) entered disabled state [ 792.784595][T10056] device syz_tun left promiscuous mode [ 792.800733][T10056] bridge0: port 3(syz_tun) entered disabled state [ 793.020402][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 793.147525][ T8532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 793.173849][ T8532] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 793.190976][ T8532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 793.230268][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 793.250033][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 793.259966][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 794.264824][ T5943] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.412558][T10153] loop4: detected capacity change from 0 to 256 [ 794.971495][T10165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1244'. [ 795.328669][ T8532] Bluetooth: hci2: command 0x0409 tx timeout [ 795.390788][ T5943] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.232929][ T5943] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.397054][ T5943] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.408683][ T8532] Bluetooth: hci2: command 0x041b tx timeout [ 798.629718][T10145] chnl_net:caif_netlink_parms(): no params data found [ 799.281304][T10207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1252'. [ 799.490401][ T8532] Bluetooth: hci2: command 0x040f tx timeout [ 800.883178][T10145] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.127170][T10145] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.449402][T10228] xt_CONNSECMARK: invalid mode: 0 [ 801.848747][T10229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1255'. [ 801.958776][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1256'. [ 802.811569][T10230] loop0: detected capacity change from 0 to 32768 [ 802.914042][ T8532] Bluetooth: hci2: command 0x0419 tx timeout [ 803.057806][T10145] device bridge_slave_0 entered promiscuous mode [ 803.081837][T10232] loop4: detected capacity change from 0 to 1024 [ 803.089530][T10230] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1256 (10230) [ 803.129994][T10230] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 803.140606][T10230] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 803.149605][T10230] BTRFS info (device loop0): using free space tree [ 803.486260][T10224] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1257'. [ 804.207662][T10224] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1257'. [ 804.216755][T10224] tc_dump_action: action bad kind [ 804.228704][T10145] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.302852][T10145] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.365694][T10145] device bridge_slave_1 entered promiscuous mode [ 804.521178][T10230] BTRFS error (device loop0): open_ctree failed: -12 [ 804.629766][ T9551] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (9551) [ 806.357791][T10145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.894215][T10294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1266'. [ 808.202605][T10145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.940058][T10314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1269'. [ 809.016374][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.055500][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.551844][T10319] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1270'. [ 810.797940][T10327] loop4: detected capacity change from 0 to 1024 [ 810.822309][T10145] team0: Port device team_slave_0 added [ 810.870354][T10145] team0: Port device team_slave_1 added [ 810.883834][T10329] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 810.913845][T10327] hfsplus: unable to parse mount options [ 810.977255][ T5943] bridge0: port 4(erspan0) entered disabled state [ 811.780544][ T5943] device erspan0 left promiscuous mode [ 811.786299][ T5943] bridge0: port 4(erspan0) entered disabled state [ 812.197834][T10145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.277785][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.442651][T10145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.763522][T10145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.856307][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.969098][T10362] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 813.213392][T10364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1277'. [ 814.062527][T10145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.585487][ T8532] Bluetooth: hci3: Malformed Event: 0x02 [ 819.752417][T10145] device hsr_slave_0 entered promiscuous mode [ 820.019556][T10145] device hsr_slave_1 entered promiscuous mode [ 820.227847][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1290'. [ 826.713131][T10145] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 826.941251][T10145] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 827.154037][T10145] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 827.199022][ T5943] device batadv0 left promiscuous mode [ 827.580161][T10485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1303'. [ 827.592545][ T5943] device bond0 left promiscuous mode [ 827.619254][ T5943] device bond_slave_0 left promiscuous mode [ 827.638258][ T5943] device bond_slave_1 left promiscuous mode [ 827.686261][ T5943] device bridge0 left promiscuous mode [ 828.732107][ T5943] device hsr_slave_0 left promiscuous mode [ 829.568856][ T5943] device hsr_slave_1 left promiscuous mode [ 829.583292][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.636990][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.685037][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.703243][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.724023][ T5943] device bridge_slave_1 left promiscuous mode [ 829.743965][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.785492][ T5943] device bridge_slave_0 left promiscuous mode [ 829.823270][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.965667][T10516] overlayfs: failed to resolve './file1': -2 [ 830.713763][ T5943] device veth1_macvtap left promiscuous mode [ 830.739387][ T5943] device veth0_macvtap left promiscuous mode [ 830.745672][ T5943] device veth1_vlan left promiscuous mode [ 830.793890][ T5943] device veth0_vlan left promiscuous mode [ 831.963388][T10538] loop4: detected capacity change from 0 to 128 [ 832.035989][T10538] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 832.154632][T10538] hpfs: filesystem error: improperly stopped [ 832.179815][T10538] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 832.205663][T10538] hpfs: You really don't want any checks? You are crazy... [ 832.213974][T10538] hpfs: hpfs_map_sector(): read error [ 832.219836][T10538] hpfs: code page support is disabled [ 832.225499][T10538] hpfs: hpfs_map_4sectors(): unaligned read [ 832.232838][T10538] hpfs: hpfs_map_4sectors(): unaligned read [ 832.244198][T10538] hpfs: filesystem error: unable to find root dir [ 832.431727][T10542] loop0: detected capacity change from 0 to 128 [ 832.495918][T10542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 832.510584][T10542] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 833.464244][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 833.640461][T10554] loop0: detected capacity change from 0 to 1024 [ 833.671013][T10554] hfsplus: unable to parse mount options [ 833.695112][T10555] trusted_key: encrypted_key: insufficient parameters specified [ 836.990289][T10571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1317'. [ 838.883999][T10593] loop4: detected capacity change from 0 to 512 [ 838.899566][T10593] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 839.650756][T10316] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 839.960008][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 840.272109][T10600] loop0: detected capacity change from 0 to 512 [ 841.039161][T10600] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 841.048422][T10600] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.082316][T10596] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.1324: invalid size [ 841.098171][T10596] EXT4-fs (loop0): Remounting filesystem read-only [ 841.912520][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 842.047263][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.967717][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.965080][T10626] loop4: detected capacity change from 0 to 2368 [ 845.756145][T10633] trusted_key: encrypted_key: insufficient parameters specified [ 846.356603][ T5943] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 846.372846][ T8540] infiniband syz1: ib_query_port failed (-19) [ 846.381103][ T5943] bond0 (unregistering): Released all slaves [ 846.525759][T10145] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 846.537957][ T4522] bond0 speed is unknown, defaulting to 1000 [ 846.584128][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 846.594642][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 846.603153][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 846.610823][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 846.618433][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 846.626012][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 846.633633][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 846.641432][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 846.649460][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 846.657429][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 846.665607][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 846.673796][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 846.682438][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 846.690693][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 846.701007][T10625] bridge0: port 3(syz_tun) entered blocking state [ 846.707912][T10625] bridge0: port 3(syz_tun) entered listening state [ 846.714855][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.722408][T10625] bridge0: port 2(bridge_slave_1) entered listening state [ 846.730182][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.737695][T10625] bridge0: port 1(bridge_slave_0) entered listening state [ 846.746507][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 846.755349][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 846.764228][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 846.772512][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 846.809712][T10625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 847.112304][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 849.751874][T10145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.588210][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 850.644746][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 856.468123][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.476660][T10714] device batadv_slave_0 entered promiscuous mode [ 856.496234][T10715] bridge0: port 3(syz_tun) entered blocking state [ 856.502912][T10715] bridge0: port 3(syz_tun) entered forwarding state [ 856.510015][T10715] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.517248][T10715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.524790][T10715] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.532163][T10715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.541742][T10715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 856.549584][T10715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 856.606024][T10715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 856.687775][T10375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 856.904768][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 856.952724][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.738872][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.809548][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.830318][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 857.842849][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 857.879051][T10731] loop4: detected capacity change from 0 to 1024 [ 858.826808][ T9903] hfsplus: b-tree write err: -5, ino 25 [ 858.844091][ T9903] hfsplus: b-tree write err: -5, ino 4 [ 858.937265][ T9903] hfsplus: b-tree write err: -5, ino 2 [ 859.009249][ T9903] hfsplus: b-tree write err: -5, ino 26 [ 859.890718][ T8532] Bluetooth: hci2: command 0x0409 tx timeout [ 861.968907][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 862.338119][T10722] chnl_net:caif_netlink_parms(): no params data found [ 863.107461][T10778] loop5: detected capacity change from 0 to 7 [ 863.121631][T10316] loop5: [ 863.125065][T10316] loop5: partition table partially beyond EOD, truncated [ 863.163860][T10778] loop5: [ 863.186369][T10778] loop5: partition table partially beyond EOD, truncated [ 864.218359][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 864.287188][T10787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.296303][T10787] device batadv_slave_0 entered promiscuous mode [ 864.738835][T10722] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.746301][T10722] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.820320][T10722] device bridge_slave_0 entered promiscuous mode [ 864.954794][T10722] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.973027][T10722] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.241168][T10722] device bridge_slave_1 entered promiscuous mode [ 865.842644][T10722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.891189][T10722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.011901][T10722] team0: Port device team_slave_0 added [ 866.092314][T10722] team0: Port device team_slave_1 added [ 866.168951][T10722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.223731][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.289219][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 867.242927][T10722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.338212][T10722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.355700][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.468334][T10722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.693611][T10722] device hsr_slave_0 entered promiscuous mode [ 867.735852][T10722] device hsr_slave_1 entered promiscuous mode [ 867.794931][T10722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 867.814283][T10722] Cannot create hsr debugfs directory [ 868.572232][T10838] trusted_key: encrypted_key: insufficient parameters specified [ 870.496538][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.502952][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.181716][T10722] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 871.241792][T10722] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 873.018800][T10722] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 873.112260][ T5943] device hsr_slave_0 left promiscuous mode [ 873.701874][ T5943] device hsr_slave_1 left promiscuous mode [ 873.716104][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.783886][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.802386][ T5943] device bridge_slave_1 left promiscuous mode [ 873.851563][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.894638][ T5943] device bridge_slave_0 left promiscuous mode [ 873.910626][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.680252][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 874.766212][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 874.834225][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.900022][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.368187][ T5943] bond0 (unregistering): Released all slaves [ 876.572518][T10722] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 876.848891][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 876.859375][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 876.866742][ C0] bridge0: port 3(syz_tun) entered learning state [ 878.030925][T10722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.217048][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 878.271581][T10928] trusted_key: encrypted_key: insufficient parameters specified [ 878.289547][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 878.339674][T10722] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.394555][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 878.395173][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 878.395605][ T4517] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.395728][ T4517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.396209][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 878.504110][T10375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 878.505281][T10375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 878.505842][T10375] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.505904][T10375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.506348][T10375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 878.526541][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 878.529503][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 878.537147][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 878.537963][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 878.606563][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 879.069401][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.113541][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 879.132760][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 879.159615][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 879.199419][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 879.228745][T10722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 879.646483][T10942] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 880.085484][T10945] overlayfs: failed to resolve './file1': -2 [ 882.391795][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 882.408808][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 882.462660][T10722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.561427][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 884.590197][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 884.681814][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 884.722795][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 884.771947][T10722] device veth0_vlan entered promiscuous mode [ 884.790838][T11005] loop4: detected capacity change from 0 to 1024 [ 884.811763][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 884.824777][T11005] hfsplus: unable to parse mount options [ 884.827077][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 884.848069][T10722] device veth1_vlan entered promiscuous mode [ 884.904267][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 884.941469][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 884.987188][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 886.060073][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 886.209624][T10722] device veth0_macvtap entered promiscuous mode [ 886.221356][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 886.277912][T10722] device veth1_macvtap entered promiscuous mode [ 886.340804][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.403637][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.454615][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.188492][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.275524][T10722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.327504][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 887.347343][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 887.371320][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.411099][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.448881][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.480116][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.528646][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.569909][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.618789][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.661255][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.702174][T10722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.735120][T10722] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.747005][T11034] trusted_key: encrypted_key: insufficient parameters specified [ 887.776420][T10722] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.806170][T10722] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.836479][T10722] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.909511][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 887.952180][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 888.334140][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.628745][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.221218][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 889.395689][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 889.431224][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.480053][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.637514][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 890.362165][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1236'. [ 895.934030][T11111] loop6: detected capacity change from 0 to 512 [ 895.989740][T11111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 896.038634][T11111] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 896.216707][T11111] EXT4-fs (loop6): 1 truncate cleaned up [ 896.309128][T11111] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 898.272969][T10722] EXT4-fs (loop6): unmounting filesystem. [ 900.534256][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 903.926159][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 906.745954][T11205] vivid-000: kernel_thread() failed [ 907.485036][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 907.491816][ C0] bridge0: topology change detected, propagating [ 907.499814][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.507353][ C0] bridge0: topology change detected, propagating [ 907.514151][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.521610][ C0] bridge0: topology change detected, propagating [ 907.565452][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 909.094984][T11232] overlayfs: failed to clone upperpath [ 909.145836][T11233] overlayfs: failed to clone upperpath [ 910.835272][T11238] x_tables: unsorted underflow at hook 3 [ 911.019245][T11244] loop4: detected capacity change from 0 to 16 [ 911.027073][T11244] erofs: Unknown parameter '0xffffffffffffffffÿÿ' [ 911.673167][T11253] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1444'. [ 911.683374][T11253] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1444'. [ 912.625879][ T26] audit: type=1326 audit(1774539199.512:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 912.743778][ T26] audit: type=1326 audit(1774539199.512:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 912.808290][ T26] audit: type=1326 audit(1774539199.512:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 912.882590][ T26] audit: type=1326 audit(1774539199.512:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 913.004008][ T26] audit: type=1326 audit(1774539199.512:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 913.078608][ T26] audit: type=1326 audit(1774539199.512:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 913.206769][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 913.216107][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 913.223803][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 913.231662][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 913.239492][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 913.247447][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 913.255547][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 913.265650][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 913.273508][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 913.313230][T11270] loop4: detected capacity change from 0 to 2368 [ 913.650319][ T26] audit: type=1326 audit(1774539199.512:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 913.883480][ T26] audit: type=1326 audit(1774539199.512:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 913.968638][T11269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 914.049982][T11267] ceph: No mds server is up or the cluster is laggy [ 914.062482][ T34] libceph: connect (1)[c::]:6789 error -101 [ 914.087074][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 914.150309][ T26] audit: type=1326 audit(1774539199.512:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 914.368553][ T26] audit: type=1326 audit(1774539199.512:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.6.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 915.961088][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1450'. [ 916.073778][T11290] device vlan1 entered promiscuous mode [ 916.457392][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'. [ 920.580046][T11344] overlayfs: failed to clone upperpath [ 921.374525][ T7] libceph: connect (1)[c::]:6789 error -101 [ 921.389852][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 921.400399][T11347] ceph: No mds server is up or the cluster is laggy [ 921.411038][T11352] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 921.420518][T11352] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 921.428194][T11352] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 921.435696][T11352] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 921.444082][T11352] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 921.452123][T11352] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 921.459869][T11352] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 921.469731][T11352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 921.477439][T11352] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 921.502367][T11356] loop4: detected capacity change from 0 to 2368 [ 922.003815][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1464'. [ 922.015983][ T6274] libceph: connect (1)[c::]:6789 error -101 [ 922.023534][ T6274] libceph: mon0 (1)[c::]:6789 connect error [ 922.458120][T11352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 925.619983][T11402] infiniband syz2: set active [ 925.644386][T11402] infiniband syz2: set active [ 925.699899][T11402] infiniband syz2: set active [ 928.111780][T11432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1476'. [ 931.601765][T11464] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1479'. [ 932.089872][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.096922][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.103951][ T4282] Bluetooth: Wrong link type (-22) [ 932.855200][T11474] trusted_key: encrypted_key: insufficient parameters specified [ 934.169832][T11479] x_tables: ip_tables: osf match: only valid for protocol 6 [ 934.379827][T11483] trusted_key: encrypted_key: insufficient parameters specified [ 936.224982][T11512] loop6: detected capacity change from 0 to 512 [ 936.294861][T11516] loop4: detected capacity change from 0 to 128 [ 936.476530][T11512] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 936.487792][T11516] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 936.562711][T11516] hpfs: filesystem error: improperly stopped [ 936.569181][T11512] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.582055][T11516] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 936.643799][T11516] hpfs: You really don't want any checks? You are crazy... [ 936.841633][T11516] hpfs: hpfs_map_sector(): read error [ 937.546386][T11528] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 937.558514][T11516] hpfs: code page support is disabled [ 937.563616][T11528] __quota_error: 6 callbacks suppressed [ 937.563634][T11528] Quota error (device loop6): write_blk: dquota write failed [ 937.583301][T11528] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 937.593551][T11528] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.1491: Failed to acquire dquot type 0 [ 937.659380][T11516] hpfs: hpfs_map_4sectors(): unaligned read [ 937.700088][T11516] hpfs: hpfs_map_4sectors(): unaligned read [ 937.706327][T11516] hpfs: filesystem error: unable to find root dir [ 937.731084][T10722] EXT4-fs (loop6): unmounting filesystem. [ 939.346854][T11544] trusted_key: encrypted_key: insufficient parameters specified [ 941.316316][T11572] trusted_key: encrypted_key: insufficient parameters specified [ 941.736817][T11568] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1504'. [ 942.052077][T11573] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 944.079011][T11610] trusted_key: encrypted_key: insufficient parameters specified [ 946.987996][T11632] trusted_key: encrypted_key: insufficient parameters specified [ 947.463803][T11641] loop6: detected capacity change from 0 to 128 [ 947.622209][T11641] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 947.644887][T11641] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 948.602769][T10722] EXT4-fs (loop6): unmounting filesystem. [ 948.862563][T11663] loop4: detected capacity change from 0 to 128 [ 949.698375][T11663] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 949.731223][T11663] hpfs: filesystem error: improperly stopped [ 949.737398][T11663] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 949.763553][T11663] hpfs: You really don't want any checks? You are crazy... [ 949.776016][T11663] hpfs: hpfs_map_sector(): read error [ 949.786092][T11663] hpfs: code page support is disabled [ 949.828723][T11663] hpfs: hpfs_map_4sectors(): unaligned read [ 949.834763][T11663] hpfs: hpfs_map_4sectors(): unaligned read [ 949.848591][T11663] hpfs: filesystem error: unable to find root dir [ 950.388055][T11677] trusted_key: encrypted_key: insufficient parameters specified [ 953.639585][T11706] trusted_key: encrypted_key: insufficient parameters specified [ 953.922053][T11708] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 954.476016][T11716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.669330][T11719] loop4: detected capacity change from 0 to 512 [ 954.755747][T11719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 954.843846][T11719] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.193770][T11727] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 956.209384][T11727] Quota error (device loop4): write_blk: dquota write failed [ 956.217839][T11727] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 956.227976][T11727] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1529: Failed to acquire dquot type 0 [ 956.606495][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 956.862963][T11736] loop4: detected capacity change from 0 to 64 [ 956.945241][T11736] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 957.281477][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 959.068910][ T8532] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 959.078728][ T8532] CPU: 1 PID: 8532 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 959.086573][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 959.097475][ T8532] Workqueue: hci3 hci_rx_work [ 959.102511][ T8532] Call Trace: [ 959.106029][ T8532] [ 959.109104][ T8532] dump_stack_lvl+0x188/0x24e [ 959.114152][ T8532] ? show_regs_print_info+0x12/0x12 [ 959.119733][ T8532] ? load_image+0x400/0x400 [ 959.124680][ T8532] sysfs_create_dir_ns+0x26a/0x290 [ 959.129807][ T8532] ? sysfs_warn_dup+0xa0/0xa0 [ 959.134674][ T8532] ? do_raw_spin_unlock+0x11d/0x230 [ 959.139893][ T8532] kobject_add_internal+0x61c/0xcc0 [ 959.145310][ T8532] kobject_add+0x160/0x230 [ 959.149943][ T8532] ? kobject_init+0x1d0/0x1d0 [ 959.154837][ T8532] ? klist_children_get+0x50/0x50 [ 959.159894][ T8532] ? get_device_parent+0x121/0x3f0 [ 959.165295][ T8532] device_add+0x483/0xfb0 [ 959.169729][ T8532] ? kmem_cache_free+0xf7/0x290 [ 959.175055][ T8532] hci_conn_add_sysfs+0xd1/0x1e0 [ 959.180301][ T8532] le_conn_complete_evt+0x1062/0x1670 [ 959.185702][ T8532] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 959.192220][ T8532] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 959.197873][ T8532] ? skb_pull_data+0xf7/0x200 [ 959.202554][ T8532] hci_le_conn_complete_evt+0x183/0x440 [ 959.208286][ T8532] ? hci_remote_host_features_evt+0x270/0x270 [ 959.214389][ T8532] hci_event_packet+0x7b9/0x1280 [ 959.219714][ T8532] ? bis_list+0x280/0x280 [ 959.224219][ T8532] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 959.230301][ T8532] ? kcov_remote_start+0x4c7/0x7e0 [ 959.235556][ T8532] ? sync_thread_master+0x620/0x10b0 [ 959.241442][ T8532] ? hci_send_to_monitor+0x9c/0x4a0 [ 959.246755][ T8532] hci_rx_work+0x3eb/0xd40 [ 959.251204][ T8532] ? _raw_spin_unlock+0x40/0x40 [ 959.256078][ T8532] ? process_one_work+0x7b0/0x1160 [ 959.261559][ T8532] process_one_work+0x8a2/0x1160 [ 959.266736][ T8532] ? worker_detach_from_pool+0x240/0x240 [ 959.272501][ T8532] ? _raw_spin_lock_irq+0xb7/0xf0 [ 959.277739][ T8532] ? _raw_spin_lock_irqsave+0x100/0x100 [ 959.283306][ T8532] ? kthread_data+0x4b/0xc0 [ 959.287851][ T8532] worker_thread+0xaa2/0x1270 [ 959.292659][ T8532] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 959.298669][ T8532] ? __kthread_parkme+0x162/0x1c0 [ 959.303735][ T8532] kthread+0x29d/0x330 [ 959.307895][ T8532] ? worker_clr_flags+0x1a0/0x1a0 [ 959.313051][ T8532] ? kthread_blkcg+0xd0/0xd0 [ 959.317739][ T8532] ret_from_fork+0x1f/0x30 [ 959.322201][ T8532] [ 959.330008][ T8532] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 959.351166][ T8532] Bluetooth: hci3: failed to register connection device [ 959.359210][T11776] loop6: detected capacity change from 0 to 512 [ 959.417347][T11776] EXT4-fs: Ignoring removed nobh option [ 959.545154][T11776] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1544: iget: bad i_size value: 38620345925642 [ 959.566564][T11776] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1544: couldn't read orphan inode 15 (err -117) [ 959.612385][T11776] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 960.251312][T10722] EXT4-fs (loop6): unmounting filesystem. [ 961.229050][T11804] trusted_key: encrypted_key: insufficient parameters specified [ 961.743488][T11809] loop4: detected capacity change from 0 to 128 [ 961.972770][T11809] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 962.066192][T11809] hpfs: filesystem error: improperly stopped [ 962.171721][T11809] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 962.245791][T11809] hpfs: You really don't want any checks? You are crazy... [ 962.296024][T11809] hpfs: hpfs_map_sector(): read error [ 962.330407][T11809] hpfs: code page support is disabled [ 962.757537][T11809] hpfs: hpfs_map_4sectors(): unaligned read [ 962.995483][T11809] hpfs: hpfs_map_4sectors(): unaligned read [ 963.002771][T11809] hpfs: filesystem error: unable to find root dir [ 966.418333][T11889] loop4: detected capacity change from 0 to 128 [ 966.458043][T11889] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 966.500132][T11889] hpfs: filesystem error: improperly stopped [ 966.506378][T11889] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 966.546945][T11889] hpfs: You really don't want any checks? You are crazy... [ 966.590380][T11889] hpfs: hpfs_map_sector(): read error [ 966.596044][T11889] hpfs: code page support is disabled [ 966.637431][T11889] hpfs: hpfs_map_4sectors(): unaligned read [ 966.643852][T11889] hpfs: hpfs_map_4sectors(): unaligned read [ 966.736874][T11889] hpfs: filesystem error: unable to find root dir [ 967.359729][T11899] trusted_key: encrypted_key: insufficient parameters specified [ 976.877654][T11991] loop6: detected capacity change from 0 to 2048 [ 978.109914][T11991] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 978.138661][T11991] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 978.184597][T11991] EXT4-fs (loop6): unmounting filesystem. [ 979.246796][T12011] trusted_key: encrypted_key: insufficient parameters specified [ 979.397262][T12016] loop4: detected capacity change from 0 to 128 [ 979.461361][T12016] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 979.626765][T12019] trusted_key: encrypted_key: insufficient parameters specified [ 979.699029][T12016] hpfs: filesystem error: improperly stopped [ 979.706811][T12016] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 979.881954][T12016] hpfs: You really don't want any checks? You are crazy... [ 979.945323][T12016] hpfs: hpfs_map_sector(): read error [ 980.001262][T12016] hpfs: code page support is disabled [ 980.058654][T12016] hpfs: hpfs_map_4sectors(): unaligned read [ 980.119824][T12016] hpfs: hpfs_map_4sectors(): unaligned read [ 980.130210][T12016] hpfs: filesystem error: unable to find root dir [ 981.521072][ T8532] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 990.363107][T12098] Non-string source [ 990.437070][T12086] trusted_key: encrypted_key: insufficient parameters specified [ 991.619946][T12111] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 993.407871][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.414844][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.817928][T12155] loop6: detected capacity change from 0 to 512 [ 998.333884][T12155] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 998.368775][T12155] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.757940][T12167] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 998.773656][T12167] Quota error (device loop6): write_blk: dquota write failed [ 998.781648][T12167] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 998.792033][T12167] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.1622: Failed to acquire dquot type 0 [ 999.613429][T10722] EXT4-fs (loop6): unmounting filesystem. [ 1002.613834][T12200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1642'. [ 1003.308597][T12201] loop6: detected capacity change from 0 to 512 [ 1003.380917][T12201] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1004.529200][ T9] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1005.173824][T12218] trusted_key: encrypted_key: insufficient parameters specified [ 1005.534266][T12226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1637'. [ 1006.850593][T12238] batman_adv: batadv0: Adding interface: dummy0 [ 1006.856970][T12238] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.882612][T12238] batman_adv: batadv0: Interface activated: dummy0 [ 1010.489817][T12247] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1641'. [ 1012.210696][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 1013.501550][T12274] loop6: detected capacity change from 0 to 128 [ 1013.955808][T12274] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1014.228625][T12274] hpfs: filesystem error: improperly stopped [ 1014.234755][T12274] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1014.268477][T12274] hpfs: You really don't want any checks? You are crazy... [ 1014.308857][T12274] hpfs: hpfs_map_sector(): read error [ 1014.314309][T12274] hpfs: code page support is disabled [ 1014.444234][T12274] hpfs: hpfs_map_4sectors(): unaligned read [ 1014.454306][T12274] hpfs: hpfs_map_4sectors(): unaligned read [ 1014.468465][T12274] hpfs: filesystem error: unable to find root dir [ 1015.252881][T12285] loop4: detected capacity change from 0 to 1024 [ 1015.262557][T12285] EXT4-fs: Ignoring removed orlov option [ 1017.644710][T12291] trusted_key: encrypted_key: insufficient parameters specified [ 1018.828912][T12285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1019.733401][T12314] trusted_key: encrypted_key: insufficient parameters specified [ 1020.009355][T12320] trusted_key: encrypted_key: insufficient parameters specified [ 1020.690224][T12321] loop6: detected capacity change from 0 to 128 [ 1020.729646][T12321] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1020.780525][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1020.790201][T12321] hpfs: filesystem error: improperly stopped [ 1020.796864][T12321] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1021.694338][T12321] hpfs: You really don't want any checks? You are crazy... [ 1021.771649][T12321] hpfs: hpfs_map_sector(): read error [ 1021.791078][T12321] hpfs: code page support is disabled [ 1021.796652][T12321] hpfs: hpfs_map_4sectors(): unaligned read [ 1021.868772][T12321] hpfs: hpfs_map_4sectors(): unaligned read [ 1021.976314][T12321] hpfs: filesystem error: unable to find root dir [ 1023.815842][T12338] loop4: detected capacity change from 0 to 1024 [ 1023.832355][T12338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1024.549794][T12338] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1024.646959][T12338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1024.878804][T12354] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1024.878804][T12354] The task syz.6.1676 (12354) triggered the difference, watch for misbehavior. [ 1024.967676][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 1026.266204][T12352] bridge0: port 3(syz_tun) entered disabled state [ 1026.368327][T12352] device syz_tun left promiscuous mode [ 1026.374075][T12352] bridge0: port 3(syz_tun) entered disabled state [ 1026.474355][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1026.990321][T12372] trusted_key: encrypted_key: insufficient parameters specified [ 1030.564771][T12405] trusted_key: encrypted_key: insufficient parameters specified [ 1031.123703][T12415] loop4: detected capacity change from 0 to 16 [ 1031.145039][T12415] erofs: (device loop4): mounted with root inode @ nid 36. [ 1032.219100][T12433] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1032.742674][T12440] loop6: detected capacity change from 0 to 512 [ 1033.729397][T12440] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1033.861758][T12440] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.899990][T12455] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1034.914950][T12455] Quota error (device loop6): write_blk: dquota write failed [ 1034.922616][T12455] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1034.932758][T12455] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.1687: Failed to acquire dquot type 0 [ 1035.091831][T10722] EXT4-fs (loop6): unmounting filesystem. [ 1036.582553][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1692'. [ 1040.447775][ T26] audit: type=1107 audit(1774539583.328:54): pid=12522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1043.531347][ T8532] Bluetooth: hci2: command 0x0406 tx timeout [ 1046.840681][T12580] loop6: detected capacity change from 0 to 32768 [ 1046.849893][T12580] (syz.6.1720,12580,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1046.860499][T12580] (syz.6.1720,12580,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1048.529169][T11429] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1056.363404][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.370229][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.632676][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 1056.643862][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 1056.653531][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 1056.663598][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 1056.674842][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 1057.787247][T12681] loop4: detected capacity change from 0 to 512 [ 1057.883271][T12681] EXT4-fs (loop4): DAX unsupported by block device. [ 1060.469491][T12697] No such timeout policy "syz1" [ 1060.476351][T12697] autofs4:pid:12697:autofs_fill_super: called with bogus options [ 1061.149021][T12708] o2cb: This node has not been configured. [ 1061.156021][T12708] o2cb: Cluster check failed. Fix errors before retrying. [ 1061.163676][T12708] (syz.6.1751,12708,0):user_dlm_register:674 ERROR: status = -22 [ 1061.171698][T12708] (syz.6.1751,12708,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1061.184193][T12708] o2cb: This node has not been configured. [ 1061.190161][T12708] o2cb: Cluster check failed. Fix errors before retrying. [ 1061.197513][T12708] (syz.6.1751,12708,0):user_dlm_register:674 ERROR: status = -22 [ 1061.205364][T12708] (syz.6.1751,12708,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1063.030147][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 1066.965382][T12767] vivid-008: kernel_thread() failed [ 1070.793763][T12821] overlayfs: failed to clone upperpath [ 1071.473568][T12824] kernel profiling enabled (shift: 9) [ 1072.112362][T12827] loop4: detected capacity change from 0 to 128 [ 1072.150251][T12827] FAT-fs (loop4): Directory bread(block 414) failed [ 1072.183110][T12827] FAT-fs (loop4): Directory bread(block 415) failed [ 1072.229688][T12827] FAT-fs (loop4): Directory bread(block 416) failed [ 1072.249557][T12827] FAT-fs (loop4): Directory bread(block 417) failed [ 1072.293408][T12827] FAT-fs (loop4): Directory bread(block 418) failed [ 1072.318469][T12827] FAT-fs (loop4): Directory bread(block 419) failed [ 1072.325146][T12827] FAT-fs (loop4): Directory bread(block 420) failed [ 1072.359858][T12827] FAT-fs (loop4): Directory bread(block 421) failed [ 1074.267946][T12847] FAT-fs (loop4): Directory bread(block 414) failed [ 1074.275616][T12847] FAT-fs (loop4): Directory bread(block 415) failed [ 1074.840359][ T8532] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1074.851062][ T8532] CPU: 1 PID: 8532 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1074.858673][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1074.869128][ T8532] Workqueue: hci2 hci_rx_work [ 1074.873994][ T8532] Call Trace: [ 1074.877276][ T8532] [ 1074.880202][ T8532] dump_stack_lvl+0x188/0x24e [ 1074.884925][ T8532] ? show_regs_print_info+0x12/0x12 [ 1074.890686][ T8532] ? load_image+0x400/0x400 [ 1074.895220][ T8532] sysfs_create_dir_ns+0x26a/0x290 [ 1074.900351][ T8532] ? sysfs_warn_dup+0xa0/0xa0 [ 1074.905145][ T8532] ? do_raw_spin_unlock+0x11d/0x230 [ 1074.910354][ T8532] kobject_add_internal+0x61c/0xcc0 [ 1074.915685][ T8532] kobject_add+0x160/0x230 [ 1074.920279][ T8532] ? kobject_init+0x1d0/0x1d0 [ 1074.924965][ T8532] ? klist_children_get+0x50/0x50 [ 1074.930094][ T8532] ? get_device_parent+0x121/0x3f0 [ 1074.935220][ T8532] device_add+0x483/0xfb0 [ 1074.939646][ T8532] ? kmem_cache_free+0xf7/0x290 [ 1074.944708][ T8532] hci_conn_add_sysfs+0xd1/0x1e0 [ 1074.949754][ T8532] le_conn_complete_evt+0x1062/0x1670 [ 1074.955348][ T8532] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1074.961595][ T8532] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1074.967242][ T8532] ? skb_pull_data+0xf7/0x200 [ 1074.971920][ T8532] hci_le_conn_complete_evt+0x183/0x440 [ 1074.977499][ T8532] ? hci_remote_host_features_evt+0x270/0x270 [ 1074.984040][ T8532] hci_event_packet+0x7b9/0x1280 [ 1074.989106][ T8532] ? bis_list+0x280/0x280 [ 1074.993442][ T8532] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1074.999433][ T8532] ? kcov_remote_start+0x4c7/0x7e0 [ 1075.004548][ T8532] ? sync_thread_master+0x620/0x10b0 [ 1075.010056][ T8532] ? hci_send_to_monitor+0x9c/0x4a0 [ 1075.015300][ T8532] hci_rx_work+0x3eb/0xd40 [ 1075.019736][ T8532] ? _raw_spin_unlock+0x40/0x40 [ 1075.024632][ T8532] ? process_one_work+0x7b0/0x1160 [ 1075.029941][ T8532] process_one_work+0x8a2/0x1160 [ 1075.035098][ T8532] ? worker_detach_from_pool+0x240/0x240 [ 1075.040944][ T8532] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1075.046178][ T8532] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1075.051832][ T8532] ? kthread_data+0x4b/0xc0 [ 1075.056352][ T8532] worker_thread+0xaa2/0x1270 [ 1075.061338][ T8532] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1075.067379][ T8532] ? __kthread_parkme+0x162/0x1c0 [ 1075.072461][ T8532] kthread+0x29d/0x330 [ 1075.076540][ T8532] ? worker_clr_flags+0x1a0/0x1a0 [ 1075.081560][ T8532] ? kthread_blkcg+0xd0/0xd0 [ 1075.086156][ T8532] ret_from_fork+0x1f/0x30 [ 1075.090584][ T8532] [ 1075.098704][ T8532] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1075.114878][ T8532] Bluetooth: hci2: failed to register connection device [ 1081.008107][T12896] fuse: Bad value for 'fd' [ 1082.664202][T12896] ceph: No mds server is up or the cluster is laggy [ 1084.714178][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 1085.961447][T12950] tipc: Cannot configure node identity twice [ 1092.718042][T13009] device geneve1 entered promiscuous mode [ 1092.729450][T13009] device macsec1 entered promiscuous mode [ 1092.771727][ T4282] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1092.782607][T13009] device geneve1 left promiscuous mode [ 1096.617204][T13042] loop4: detected capacity change from 0 to 128 [ 1096.685278][T13042] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1096.700044][T13042] hpfs: filesystem error: improperly stopped [ 1096.706464][T13042] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1096.763403][T13042] hpfs: You really don't want any checks? You are crazy... [ 1096.795055][T13042] hpfs: hpfs_map_sector(): read error [ 1096.801109][T13042] hpfs: code page support is disabled [ 1096.806886][T13042] hpfs: hpfs_map_4sectors(): unaligned read [ 1096.817293][T13042] hpfs: hpfs_map_4sectors(): unaligned read [ 1096.823890][T13042] hpfs: filesystem error: unable to find root dir [ 1098.138952][T13072] loop4: detected capacity change from 0 to 256 [ 1098.629988][T13072] exfat: Deprecated parameter 'utf8' [ 1098.853233][T13072] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1099.239055][T13082] trusted_key: encrypted_key: insufficient parameters specified [ 1099.682371][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1836'. [ 1100.575039][T13096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.400337][T13112] loop6: detected capacity change from 0 to 128 [ 1102.445607][T13112] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1102.473625][T13112] hpfs: filesystem error: improperly stopped [ 1102.486221][T13112] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1102.496060][T13112] hpfs: You really don't want any checks? You are crazy... [ 1102.505318][T13112] hpfs: hpfs_map_sector(): read error [ 1102.511336][T13112] hpfs: code page support is disabled [ 1102.518099][T13112] hpfs: hpfs_map_4sectors(): unaligned read [ 1102.524573][T13112] hpfs: hpfs_map_4sectors(): unaligned read [ 1102.539843][T13112] hpfs: filesystem error: unable to find root dir [ 1103.650277][T13122] trusted_key: encrypted_key: insufficient parameters specified [ 1104.802122][T13140] block nbd6: NBD_DISCONNECT [ 1111.835594][T13223] loop4: detected capacity change from 0 to 128 [ 1111.879071][T13223] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1111.968558][T13223] hpfs: filesystem error: improperly stopped [ 1112.150969][T13223] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1112.184984][T13223] hpfs: You really don't want any checks? You are crazy... [ 1112.194066][T13223] hpfs: hpfs_map_sector(): read error [ 1112.199640][T13223] hpfs: code page support is disabled [ 1112.644233][T13223] hpfs: hpfs_map_4sectors(): unaligned read [ 1112.650966][T13223] hpfs: hpfs_map_4sectors(): unaligned read [ 1112.658099][T13223] hpfs: filesystem error: unable to find root dir [ 1117.929173][T13269] loop6: detected capacity change from 0 to 128 [ 1118.089814][T13269] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1118.138637][T13269] hpfs: filesystem error: improperly stopped [ 1118.157262][T13269] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1118.177569][T13269] hpfs: You really don't want any checks? You are crazy... [ 1118.199030][T13269] hpfs: hpfs_map_sector(): read error [ 1118.205194][T13269] hpfs: code page support is disabled [ 1118.268753][T13269] hpfs: hpfs_map_4sectors(): unaligned read [ 1118.298858][T13269] hpfs: hpfs_map_4sectors(): unaligned read [ 1118.305937][T13269] hpfs: filesystem error: unable to find root dir [ 1119.272070][T13287] loop6: detected capacity change from 0 to 128 [ 1120.567756][T13287] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1120.623669][T13287] hpfs: filesystem error: improperly stopped [ 1120.632436][T13287] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1120.644249][T13287] hpfs: You really don't want any checks? You are crazy... [ 1120.757559][T13287] hpfs: hpfs_map_sector(): read error [ 1120.779469][T13287] hpfs: code page support is disabled [ 1120.785114][T13287] hpfs: hpfs_map_4sectors(): unaligned read [ 1120.795606][T13295] trusted_key: encrypted_key: insufficient parameters specified [ 1120.825906][T13287] hpfs: hpfs_map_4sectors(): unaligned read [ 1120.836127][T13287] hpfs: filesystem error: unable to find root dir [ 1121.335741][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.589090][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.665552][T13326] loop6: detected capacity change from 0 to 128 [ 1124.908982][T13326] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1124.921159][T13326] hpfs: filesystem error: improperly stopped [ 1124.927199][T13326] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1124.935295][T13326] hpfs: You really don't want any checks? You are crazy... [ 1125.590532][T13333] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 1125.598462][T13333] netlink: 'syz.3.1902': attribute type 2 has an invalid length. [ 1126.368770][T13326] hpfs: hpfs_map_sector(): read error [ 1126.374357][T13326] hpfs: code page support is disabled [ 1126.437852][T13326] hpfs: hpfs_map_4sectors(): unaligned read [ 1126.627547][T13326] hpfs: hpfs_map_4sectors(): unaligned read [ 1126.810010][T13326] hpfs: filesystem error: unable to find root dir [ 1127.089227][T13343] trusted_key: encrypted_key: insufficient parameters specified [ 1127.559274][T13344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1893'. [ 1128.296654][T13358] trusted_key: encrypted_key: insufficient parameters specified [ 1128.554158][T13367] trusted_key: encrypted_key: insufficient parameters specified [ 1129.600004][ T26] audit: type=1326 audit(2000000086.930:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1129.843574][ T26] audit: type=1326 audit(2000000086.930:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1130.608413][ T26] audit: type=1326 audit(2000000086.980:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1130.650356][ T26] audit: type=1326 audit(2000000086.980:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1130.693648][ T26] audit: type=1326 audit(2000000086.980:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1130.778408][ T26] audit: type=1326 audit(2000000086.980:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1131.636314][ T26] audit: type=1326 audit(2000000086.980:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1131.673213][ T26] audit: type=1326 audit(2000000086.980:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1131.751053][ T26] audit: type=1326 audit(2000000086.990:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1131.777486][ T26] audit: type=1326 audit(2000000087.010:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.6.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6c39c799 code=0x7ffc0000 [ 1133.371222][T13407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1916'. [ 1134.067754][T13420] trusted_key: encrypted_key: insufficient parameters specified [ 1134.157177][T13418] device geneve1 entered promiscuous mode [ 1134.399156][T13418] device macsec1 entered promiscuous mode [ 1135.164749][T13418] device geneve1 left promiscuous mode [ 1142.043112][ T4315] kernel write not supported for file bpf-map (pid: 4315 comm: kworker/0:5) [ 1142.348998][T13480] trusted_key: encrypted_key: insufficient parameters specified [ 1145.380824][T13507] loop4: detected capacity change from 0 to 128 [ 1146.046179][T13507] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1149.298438][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1149.298457][ T26] audit: type=1800 audit(2000000106.610:69): pid=13529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1941" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 1149.696976][T13541] trusted_key: encrypted_key: insufficient parameters specified [ 1154.123466][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1956'. [ 1155.514776][T13596] trusted_key: encrypted_key: insufficient parameters specified [ 1161.960565][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1970'. [ 1162.974763][T13645] trusted_key: encrypted_key: insufficient parameters specified [ 1168.010325][T13682] Illegal XDP return value 4294967274 on prog (id 67) dev N/A, expect packet loss! [ 1170.349616][T13690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1982'. [ 1171.465791][T13707] trusted_key: encrypted_key: insufficient parameters specified [ 1171.970460][T13712] loop4: detected capacity change from 0 to 128 [ 1172.915638][T13712] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1172.931125][T13712] ext4 filesystem being mounted at /384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.223773][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1176.397655][T13748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1995'. [ 1180.410292][T13774] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 1180.418188][T13774] netlink: 'syz.1.1998': attribute type 2 has an invalid length. [ 1182.047302][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'. [ 1182.097799][T13780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.244792][T13780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.600118][T13795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2016'. [ 1182.783173][T13797] loop4: detected capacity change from 0 to 128 [ 1182.859724][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.868441][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.318504][T13796] syz.4.2007: attempt to access beyond end of device [ 1183.318504][T13796] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1183.398092][T13792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1184.489456][T13803] ceph: No mds server is up or the cluster is laggy [ 1184.499896][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 1184.525515][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 1187.481418][T13838] can0: slcan on ttyS3. [ 1187.630376][T13838] netlink: 'syz.6.2014': attribute type 1 has an invalid length. [ 1187.638935][T13838] netlink: 'syz.6.2014': attribute type 2 has an invalid length. [ 1189.309373][T13830] can0 (unregistered): slcan off ttyS3. [ 1192.653652][T13872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.204377][T13881] loop4: detected capacity change from 0 to 1024 [ 1193.410420][T13881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1193.620049][T13881] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1193.753671][T13881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1194.098244][T13895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2034'. [ 1194.581890][T13897] netlink: 'syz.0.2032': attribute type 1 has an invalid length. [ 1195.074964][T13897] netlink: 'syz.0.2032': attribute type 2 has an invalid length. [ 1197.018590][T13905] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1197.459169][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1197.559008][T13909] overlayfs: failed to clone upperpath [ 1197.702825][T13913] loop4: detected capacity change from 0 to 1024 [ 1200.623758][T13575] hfsplus: b-tree write err: -5, ino 25 [ 1200.778220][T13575] hfsplus: b-tree write err: -5, ino 4 [ 1200.804569][T13575] hfsplus: b-tree write err: -5, ino 2 [ 1200.805655][T13929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.461336][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 1204.253857][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2045'. [ 1204.291652][T13950] capability: warning: `syz.0.2046' uses 32-bit capabilities (legacy support in use) [ 1205.356781][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2058'. [ 1206.080785][T13967] can0: slcan on ttyS3. [ 1206.088192][T13967] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 1206.097362][T13967] netlink: 'syz.4.2048': attribute type 2 has an invalid length. [ 1206.949924][T13975] loop6: detected capacity change from 0 to 128 [ 1207.266971][T13975] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 1207.302868][T13975] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 1207.311345][T13975] vxfs: can't find superblock. [ 1208.860213][T13959] can0 (unregistered): slcan off ttyS3. [ 1215.478348][T14047] vivid-002: kernel_thread() failed [ 1216.362530][T14059] loop6: detected capacity change from 0 to 1024 [ 1216.422248][T14059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1216.463667][T14059] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1218.054881][T14059] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1219.250572][T10722] EXT4-fs (loop6): unmounting filesystem. [ 1220.573233][T14101] ptrace attach of ""[14104] was attempted by "./syz-executor exec"[14101] [ 1222.396694][T14123] loop6: detected capacity change from 0 to 1024 [ 1222.405017][T14123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1222.425093][T14123] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1223.382239][T14137] loop4: detected capacity change from 0 to 1024 [ 1223.391136][T14137] ext2: Unknown parameter 'smackfsdef' [ 1223.773614][T14123] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1225.198926][T13514] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1225.815606][T14159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2091'. [ 1226.403091][T10722] EXT4-fs (loop6): unmounting filesystem. [ 1230.681292][T14196] loop4: detected capacity change from 0 to 256 [ 1230.690899][T14196] exfat: Deprecated parameter 'namecase' [ 1230.757640][T14196] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 1233.398414][T14211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.662379][T14235] vivid-000: kernel_thread() failed [ 1235.641760][T14250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.656357][T14253] loop6: detected capacity change from 0 to 512 [ 1235.695412][T14250] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1235.708492][T14253] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1235.751709][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1235.777153][T14253] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.2111: missing EA_INODE flag [ 1235.828412][T14253] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2111: error while reading EA inode 2 err=-117 [ 1235.848619][T14253] EXT4-fs (loop6): 1 truncate cleaned up [ 1235.854823][T14253] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1235.914105][T10722] EXT4-fs (loop6): unmounting filesystem. [ 1237.536840][T14280] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2115'. [ 1242.372411][T14332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.059052][T14342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.206824][T14352] loop4: detected capacity change from 0 to 128 [ 1244.222308][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.238166][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.286545][T14352] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1244.326884][T14352] hpfs: filesystem error: improperly stopped [ 1244.349154][T14352] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1244.377396][T14352] hpfs: You really don't want any checks? You are crazy... [ 1244.405948][T14352] hpfs: hpfs_map_sector(): read error [ 1244.426335][T14352] hpfs: code page support is disabled [ 1244.446209][T14352] hpfs: hpfs_map_4sectors(): unaligned read [ 1244.469561][T14352] hpfs: hpfs_map_4sectors(): unaligned read [ 1244.506470][T14352] hpfs: filesystem error: unable to find root dir [ 1248.058994][T14395] overlayfs: failed to clone upperpath [ 1250.130347][T14421] vivid-008: kernel_thread() failed [ 1250.218469][T14419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1251.301617][T14442] hugetlbfs: syz.6.2143 (14442): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1251.330428][T14447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2145'. [ 1252.734349][T14459] netlink: 'syz.3.2149': attribute type 13 has an invalid length. [ 1252.815609][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1253.068820][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1253.161248][T14473] loop6: detected capacity change from 0 to 128 [ 1253.834273][T14468] syz.6.2148: attempt to access beyond end of device [ 1253.834273][T14468] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1253.993082][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1254.217600][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1254.272358][T14487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1255.541726][T14459] infiniband syz2: set active [ 1255.559892][T14459] infiniband syz2: set active [ 1255.694183][T14510] loop4: detected capacity change from 0 to 512 [ 1256.319169][T14510] EXT4-fs: Mount option(s) incompatible with ext3 [ 1256.390464][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1258.908371][T14534] overlayfs: failed to resolve './file1': -2 [ 1259.295043][T14538] loop4: detected capacity change from 0 to 128 [ 1259.578062][T14538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1260.218813][T14538] ext4 filesystem being mounted at /418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1260.846014][T14550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1262.706259][T14571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1263.173511][T14580] loop6: detected capacity change from 0 to 128 [ 1263.217820][T14580] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1263.252700][T14580] hpfs: filesystem error: improperly stopped [ 1263.278192][T14580] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1263.317202][T14580] hpfs: You really don't want any checks? You are crazy... [ 1263.348790][T14580] hpfs: hpfs_map_sector(): read error [ 1263.354401][T14580] hpfs: code page support is disabled [ 1263.394970][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1263.401586][T14580] hpfs: hpfs_map_4sectors(): unaligned read [ 1263.407806][T14580] hpfs: hpfs_map_4sectors(): unaligned read [ 1263.417058][T14580] hpfs: filesystem error: unable to find root dir [ 1263.808493][T14588] trusted_key: encrypted_key: insufficient parameters specified [ 1266.762164][T14619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.946030][T14629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1269.016669][T14648] trusted_key: encrypted_key: insufficient parameters specified [ 1270.848630][T14662] vivid-002: kernel_thread() failed [ 1271.578350][T14670] loop6: detected capacity change from 0 to 7 [ 1272.057351][T14670] Dev loop6: unable to read RDB block 7 [ 1272.095754][T14670] loop6: unable to read partition table [ 1272.104150][T14670] loop6: partition table beyond EOD, truncated [ 1272.148531][T14670] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1274.295178][T14685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.633431][T14765] vivid-008: kernel_thread() failed [ 1282.843080][T14753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.904873][T14806] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 1288.643509][T14823] vivid-008: kernel_thread() failed [ 1288.845500][T14819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.022540][T14817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.206033][T14867] loop6: detected capacity change from 0 to 1024 [ 1293.223442][T14867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1293.987006][T14867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1294.096102][T14867] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1295.571216][T10722] EXT4-fs (loop6): unmounting filesystem. [ 1295.695627][T14897] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1295.756741][T14896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1296.013210][T14902] overlayfs: failed to clone upperpath [ 1298.537623][T14922] loop6: detected capacity change from 0 to 128 [ 1298.555541][T14922] befs: Unrecognized mount option "$" or missing value [ 1298.562676][T14922] befs: (loop6): cannot parse mount options [ 1301.304563][T13476] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1302.769300][T14952] loop6: detected capacity change from 0 to 1024 [ 1304.077571][T14952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1304.090286][T14952] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1304.202991][T14956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1304.221182][T14952] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1304.893488][T10722] EXT4-fs (loop6): unmounting filesystem. [ 1305.172620][T14979] loop6: detected capacity change from 0 to 7 [ 1305.583209][T13476] Dev loop6: unable to read RDB block 7 [ 1305.651263][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.657787][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.097474][T13476] loop6: unable to read partition table [ 1306.418546][T13476] loop6: partition table beyond EOD, truncated [ 1307.368010][T14994] loop4: detected capacity change from 0 to 128 [ 1309.692974][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.139445][T15021] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1310.148280][T15021] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2277'. [ 1310.860882][T15024] loop6: detected capacity change from 0 to 1024 [ 1310.872651][T15024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1310.896907][T15024] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1311.799271][T15024] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1312.424127][T10722] EXT4-fs (loop6): unmounting filesystem. [ 1313.117951][T15038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1313.241348][T15043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1313.292185][T15045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1316.891015][T15072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1316.898895][T15072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1316.917246][T15072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1316.928258][T15072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1317.437043][T15075] Trying to write to read-only block-device nullb0 [ 1317.446267][T15075] Trying to write to read-only block-device nullb0 [ 1317.454190][T15075] Trying to write to read-only block-device nullb0 [ 1317.461848][T15075] Trying to write to read-only block-device nullb0 [ 1317.469411][T15075] Trying to write to read-only block-device nullb0 [ 1317.477025][T15075] Trying to write to read-only block-device nullb0 [ 1317.484888][T15075] Trying to write to read-only block-device nullb0 [ 1317.492820][T15075] Trying to write to read-only block-device nullb0 [ 1317.500515][T15075] Trying to write to read-only block-device nullb0 [ 1317.508293][T15075] Trying to write to read-only block-device nullb0 [ 1318.654715][T15081] loop4: detected capacity change from 0 to 2048 [ 1318.726732][T15081] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1318.776395][T15081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1318.909437][T15089] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2292'. [ 1319.336892][T15096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1319.373029][T15096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1319.466089][T15096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1319.480411][T15096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1319.491441][T15096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1319.503521][T15096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1319.541368][T15087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1320.375914][T13575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.523006][T13575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.946021][T15096] Bluetooth: hci3: command 0x0409 tx timeout [ 1322.626387][T13575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.862340][T13575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.945775][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1324.036866][T15096] Bluetooth: hci3: command 0x041b tx timeout [ 1324.240199][ T7] usb 5-1: device descriptor read/64, error -71 [ 1324.346706][T15136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1325.376454][T15090] chnl_net:caif_netlink_parms(): no params data found [ 1326.048299][T15096] Bluetooth: hci3: command 0x040f tx timeout [ 1328.023096][T15090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.053868][T15090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.066367][T15090] device bridge_slave_0 entered promiscuous mode [ 1328.083881][T15169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.128376][T15096] Bluetooth: hci3: command 0x0419 tx timeout [ 1328.153113][T15171] loop4: detected capacity change from 0 to 2048 [ 1328.239440][T15090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.248662][T15090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.266977][T15090] device bridge_slave_1 entered promiscuous mode [ 1328.267476][T15171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1328.450611][T15090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.968513][ T26] audit: type=1800 audit(2000000542.291:70): pid=15184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2308" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 1329.054296][T15090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.255582][T15202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.486185][T15090] team0: Port device team_slave_0 added [ 1331.943362][T15090] team0: Port device team_slave_1 added [ 1332.394041][T15226] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1333.284185][T13575] bridge0: port 3(erspan0) entered disabled state [ 1333.671481][T13575] device erspan0 left promiscuous mode [ 1333.677318][T13575] bridge0: port 3(erspan0) entered disabled state [ 1333.870478][T15090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.878511][T15090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.912884][T15090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.281624][T15090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.298712][T15090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.388405][T15090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.076417][T15248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.135579][T15090] device hsr_slave_0 entered promiscuous mode [ 1337.191551][T15090] device hsr_slave_1 entered promiscuous mode [ 1337.285108][T15268] loop6: detected capacity change from 0 to 16 [ 1337.337484][T15268] erofs: (device loop6): mounted with root inode @ nid 36. [ 1338.231471][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2328'. [ 1340.061270][T15299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.352471][T15306] loop4: detected capacity change from 0 to 64 [ 1341.284196][T13575] device batadv0 left promiscuous mode [ 1341.386541][T13575] device bond0 left promiscuous mode [ 1341.400191][T15320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.418443][T13575] device bond_slave_0 left promiscuous mode [ 1341.434973][T13575] device bond_slave_1 left promiscuous mode [ 1341.449301][T15321] loop6: detected capacity change from 0 to 1024 [ 1341.493668][T13575] device hsr_slave_0 left promiscuous mode [ 1341.499716][T15321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1341.517405][T15321] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1341.548682][T13575] device hsr_slave_1 left promiscuous mode [ 1341.557059][T13575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.573571][T13575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.588892][T15321] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1341.598754][T13575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.606339][T13575] batman_adv: batadv0: Removing interface: batadv_slave_1 Stopping sshd: stopped /usr/sbin/sshd (pid 4027) OK [ 1341.792199][T13575] device bridge_slave_1 left promiscuous mode [ 1341.829580][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.848506][T13575] device bridge_slave_0 left promiscuous mode [ 1341.856280][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.422917][T13575] device veth1_macvtap left promiscuous mode [ 1342.479428][T13575] device veth0_macvtap left promiscuous mode [ 1342.526614][T13575] device veth1_vlan left promiscuous mode [ 1342.567162][T13575] device veth0_vlan left promiscuous mode Stopping crond: [ 1342.707257][T13575] infiniband syz2: set down stopped /usr/sbin/crond (pid 4010) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3931) [ 1344.526078][ T4913] smc: removing ib device syz2 Stopping network: [ 1346.144861][T13575] team0 (unregistering): Port device team_slave_1 removed [ 1346.238434][T13575] team0 (unregistering): Port device team_slave_0 removed [ 1346.360343][T13575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.460573][T13575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.570430][T15375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2346'. [ 1347.967100][T13575] bond0 (unregistering): Released all slaves [ 1348.663291][T15317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1348.793294][ T4315] ================================================================== [ 1348.801511][ T4315] BUG: KASAN: use-after-free in __ethtool_get_link_ksettings+0x6a/0x180 [ 1348.810127][ T4315] Read of size 8 at addr ffff888072e66208 by task kworker/0:5/4315 [ 1348.818129][ T4315] [ 1348.820474][ T4315] CPU: 0 PID: 4315 Comm: kworker/0:5 Not tainted syzkaller #0 [ 1348.828208][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1348.838547][ T4315] Workqueue: events smc_ib_port_event_work [ 1348.844496][ T4315] Call Trace: [ 1348.848247][ T4315] [ 1348.851183][ T4315] dump_stack_lvl+0x188/0x24e [ 1348.855946][ T4315] ? __lock_acquire+0x7d10/0x7d10 [ 1348.860967][ T4315] ? show_regs_print_info+0x12/0x12 [ 1348.866163][ T4315] ? load_image+0x400/0x400 [ 1348.870655][ T4315] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1348.876222][ T4315] ? __virt_addr_valid+0x188/0x540 [ 1348.881331][ T4315] ? __virt_addr_valid+0x465/0x540 [ 1348.886441][ T4315] ? __ethtool_get_link_ksettings+0x6a/0x180 [ 1348.892414][ T4315] print_report+0xa8/0x210 [ 1348.896822][ T4315] kasan_report+0x10b/0x140 [ 1348.901334][ T4315] ? __ethtool_get_link_ksettings+0x6a/0x180 [ 1348.907308][ T4315] __ethtool_get_link_ksettings+0x6a/0x180 [ 1348.913114][ T4315] ib_get_eth_speed+0x176/0x510 [ 1348.918059][ T4315] ? _ib_modify_qp+0xd30/0xd30 [ 1348.923362][ T4315] ? rxe_query_port+0x35/0x190 [ 1348.928228][ T4315] rxe_query_port+0x58/0x190 [ 1348.932846][ T4315] ib_query_port+0x163/0x820 [ 1348.937475][ T4315] smc_ib_port_event_work+0x163/0x940 [ 1348.942880][ T4315] ? read_lock_is_recursive+0x10/0x10 [ 1348.948455][ T4315] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1348.954363][ T4315] ? process_one_work+0x7b0/0x1160 [ 1348.959490][ T4315] process_one_work+0x8a2/0x1160 [ 1348.964516][ T4315] ? worker_detach_from_pool+0x240/0x240 [ 1348.970323][ T4315] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1348.975686][ T4315] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1348.981395][ T4315] ? kthread_data+0x4b/0xc0 [ 1348.985895][ T4315] worker_thread+0xaa2/0x1270 [ 1348.990660][ T4315] ? __kthread_parkme+0x162/0x1c0 [ 1348.996463][ T4315] kthread+0x29d/0x330 [ 1349.000619][ T4315] ? worker_clr_flags+0x1a0/0x1a0 [ 1349.006015][ T4315] ? kthread_blkcg+0xd0/0xd0 [ 1349.010689][ T4315] ret_from_fork+0x1f/0x30 [ 1349.015207][ T4315] [ 1349.018254][ T4315] [ 1349.020679][ T4315] Allocated by task 4276: [ 1349.025260][ T4315] kasan_set_track+0x4b/0x70 [ 1349.029885][ T4315] __kasan_kmalloc+0x8e/0xa0 [ 1349.034480][ T4315] __kmalloc_node+0xb0/0x240 [ 1349.039106][ T4315] kvmalloc_node+0x6c/0x180 [ 1349.043692][ T4315] alloc_netdev_mqs+0x84/0xf00 [ 1349.048722][ T4315] rtnl_create_link+0x2fb/0xb80 [ 1349.053659][ T4315] rtnl_newlink+0x1452/0x2080 [ 1349.058359][ T4315] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1349.063592][ T4315] netlink_rcv_skb+0x1fb/0x450 [ 1349.068531][ T4315] netlink_unicast+0x74d/0x8d0 [ 1349.073287][ T4315] netlink_sendmsg+0x8ad/0xbd0 [ 1349.078042][ T4315] __sys_sendto+0x497/0x650 [ 1349.082557][ T4315] __x64_sys_sendto+0xda/0xf0 [ 1349.087223][ T4315] do_syscall_64+0x4c/0xa0 [ 1349.091640][ T4315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.097525][ T4315] [ 1349.099837][ T4315] Freed by task 13575: [ 1349.103980][ T4315] kasan_set_track+0x4b/0x70 [ 1349.109192][ T4315] kasan_save_free_info+0x2d/0x50 [ 1349.114390][ T4315] ____kasan_slab_free+0x126/0x1e0 [ 1349.119504][ T4315] slab_free_freelist_hook+0x131/0x1a0 [ 1349.125144][ T4315] __kmem_cache_free+0xb6/0x1f0 [ 1349.130020][ T4315] device_release+0x92/0x1c0 [ 1349.134771][ T4315] kobject_put+0x21d/0x460 [ 1349.139345][ T4315] netdev_run_todo+0xcb3/0xdb0 [ 1349.144505][ T4315] default_device_exit_batch+0x9eb/0xa80 [ 1349.150868][ T4315] cleanup_net+0x791/0xba0 [ 1349.155641][ T4315] process_one_work+0x8a2/0x1160 [ 1349.160657][ T4315] worker_thread+0xaa2/0x1270 [ 1349.165438][ T4315] kthread+0x29d/0x330 [ 1349.170020][ T4315] ret_from_fork+0x1f/0x30 [ 1349.174439][ T4315] [ 1349.176924][ T4315] The buggy address belongs to the object at ffff888072e66000 [ 1349.176924][ T4315] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1349.192068][ T4315] The buggy address is located 520 bytes inside of [ 1349.192068][ T4315] 4096-byte region [ffff888072e66000, ffff888072e67000) [ 1349.205433][ T4315] [ 1349.207908][ T4315] The buggy address belongs to the physical page: [ 1349.214555][ T4315] page:ffffea0001cb9800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888072e60000 pfn:0x72e60 [ 1349.226188][ T4315] head:ffffea0001cb9800 order:3 compound_mapcount:0 compound_pincount:0 [ 1349.234548][ T4315] memcg:ffff888020ac0541 [ 1349.238778][ T4315] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1349.247392][ T4315] raw: 00fff00000010200 ffffea00015ef408 ffffea0001f2f808 ffff88801744c280 [ 1349.256428][ T4315] raw: ffff888072e60000 0000000000040003 00000001ffffffff ffff888020ac0541 [ 1349.265284][ T4315] page dumped because: kasan: bad access detected [ 1349.271754][ T4315] page_owner tracks the page as allocated [ 1349.277476][ T4315] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4272, tgid 4272 (syz-executor), ts 69908316403, free_ts 69853841532 [ 1349.299352][ T4315] post_alloc_hook+0x173/0x1a0 [ 1349.304289][ T4315] get_page_from_freelist+0x1a1e/0x1ab0 [ 1349.309852][ T4315] __alloc_pages+0x1ec/0x4f0 [ 1349.315224][ T4315] alloc_slab_page+0x5d/0x160 [ 1349.320504][ T4315] new_slab+0x87/0x2c0 [ 1349.324563][ T4315] ___slab_alloc+0xbc6/0x1240 [ 1349.329257][ T4315] __kmem_cache_alloc_node+0x1a0/0x260 [ 1349.334706][ T4315] __kmalloc_node_track_caller+0x9e/0x230 [ 1349.340419][ T4315] kmemdup+0x27/0x60 [ 1349.344320][ T4315] __addrconf_sysctl_register+0xa2/0x3e0 [ 1349.349944][ T4315] addrconf_sysctl_register+0x15c/0x1b0 [ 1349.355810][ T4315] ipv6_add_dev+0xbe0/0x1120 [ 1349.360658][ T4315] addrconf_notify+0x634/0xf40 [ 1349.365844][ T4315] raw_notifier_call_chain+0xcb/0x160 [ 1349.371213][ T4315] register_netdevice+0x163f/0x1b00 [ 1349.377015][ T4315] geneve_configure+0x637/0xa70 [ 1349.381859][ T4315] page last free stack trace: [ 1349.386693][ T4315] free_unref_page_prepare+0x8b4/0x9a0 [ 1349.392409][ T4315] free_unref_page+0x2e/0x3f0 [ 1349.397182][ T4315] __unfreeze_partials+0x1a5/0x200 [ 1349.402391][ T4315] put_cpu_partial+0x17c/0x250 [ 1349.407158][ T4315] qlist_free_all+0x76/0xe0 [ 1349.411840][ T4315] kasan_quarantine_reduce+0x144/0x160 [ 1349.417398][ T4315] __kasan_slab_alloc+0x1e/0x80 [ 1349.422258][ T4315] slab_post_alloc_hook+0x4b/0x480 [ 1349.427369][ T4315] __kmem_cache_alloc_node+0x140/0x260 [ 1349.432837][ T4315] kmalloc_trace+0x26/0xe0 [ 1349.437264][ T4315] ref_tracker_alloc+0x14e/0x4b0 [ 1349.442326][ T4315] netdev_queue_update_kobjects+0x18d/0x480 [ 1349.448392][ T4315] netdev_register_kobject+0x273/0x320 [ 1349.453935][ T4315] register_netdevice+0x12dc/0x1b00 [ 1349.459321][ T4315] xfrmi_newlink+0x4fe/0x740 [ 1349.464884][ T4315] rtnl_newlink+0x1542/0x2080 [ 1349.470274][ T4315] [ 1349.472590][ T4315] Memory state around the buggy address: [ 1349.478404][ T4315] ffff888072e66100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1349.487206][ T4315] ffff888072e66180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1349.495306][ T4315] >ffff888072e66200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1349.503362][ T4315] ^ [ 1349.507780][ T4315] ffff888072e66280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1349.516108][ T4315] ffff888072e66300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1349.524177][ T4315] ================================================================== [ 1349.539564][T10722] EXT4-fs (loop6): unmounting filesystem. [ 1349.571681][ T4315] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1349.578929][ T4315] CPU: 0 PID: 4315 Comm: kworker/0:5 Not tainted syzkaller #0 [ 1349.586490][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1349.596670][ T4315] Workqueue: events smc_ib_port_event_work [ 1349.602917][ T4315] Call Trace: [ 1349.606214][ T4315] [ 1349.609162][ T4315] dump_stack_lvl+0x188/0x24e [ 1349.613869][ T4315] ? memcpy+0x3c/0x60 [ 1349.618144][ T4315] ? show_regs_print_info+0x12/0x12 [ 1349.623428][ T4315] ? load_image+0x400/0x400 [ 1349.628580][ T4315] panic+0x2e5/0x730 [ 1349.632606][ T4315] ? asm_common_interrupt+0x22/0x40 [ 1349.638191][ T4315] ? bpf_jit_dump+0xd0/0xd0 [ 1349.642723][ T4315] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1349.648886][ T4315] ? _raw_spin_unlock+0x40/0x40 [ 1349.653779][ T4315] check_panic_on_warn+0x80/0xa0 [ 1349.658747][ T4315] ? __ethtool_get_link_ksettings+0x6a/0x180 [ 1349.664809][ T4315] end_report+0x66/0x110 [ 1349.669571][ T4315] kasan_report+0x118/0x140 [ 1349.674160][ T4315] ? __ethtool_get_link_ksettings+0x6a/0x180 [ 1349.680135][ T4315] __ethtool_get_link_ksettings+0x6a/0x180 [ 1349.685937][ T4315] ib_get_eth_speed+0x176/0x510 [ 1349.690793][ T4315] ? _ib_modify_qp+0xd30/0xd30 [ 1349.695552][ T4315] ? rxe_query_port+0x35/0x190 [ 1349.700330][ T4315] rxe_query_port+0x58/0x190 [ 1349.704921][ T4315] ib_query_port+0x163/0x820 [ 1349.709538][ T4315] smc_ib_port_event_work+0x163/0x940 [ 1349.715195][ T4315] ? read_lock_is_recursive+0x10/0x10 [ 1349.720665][ T4315] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1349.726641][ T4315] ? process_one_work+0x7b0/0x1160 [ 1349.731828][ T4315] process_one_work+0x8a2/0x1160 [ 1349.736757][ T4315] ? worker_detach_from_pool+0x240/0x240 [ 1349.742551][ T4315] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1349.747611][ T4315] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1349.753234][ T4315] ? kthread_data+0x4b/0xc0 [ 1349.757733][ T4315] worker_thread+0xaa2/0x1270 [ 1349.762486][ T4315] ? __kthread_parkme+0x162/0x1c0 [ 1349.767533][ T4315] kthread+0x29d/0x330 [ 1349.771598][ T4315] ? worker_clr_flags+0x1a0/0x1a0 [ 1349.776612][ T4315] ? kthread_blkcg+0xd0/0xd0 [ 1349.781291][ T4315] ret_from_fork+0x1f/0x30 [ 1349.785705][ T4315] [ 1349.789049][ T4315] Kernel Offset: disabled [ 1349.793386][ T4315] Rebooting in 86400 seconds..