last executing test programs: 27m8.895888927s ago: executing program 32 (id=773): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x4, 0x5, 0x2, 0x8, "5d2ca36a07330aee0c3d8b86dc41a6f45009d1", 0x2, 0x2}) 25m12.822299906s ago: executing program 33 (id=1943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000002c0003801800038014000100777c616c310000000000000000000000080002400000d250080001400000000014000000110001000000000000000000"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 24m56.914881695s ago: executing program 34 (id=2027): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/4118, 0x1016}, {&(0x7f0000000280)=""/198, 0xc6}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 23m38.346443s ago: executing program 35 (id=2633): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 23m7.804937201s ago: executing program 36 (id=2921): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 21m52.794560835s ago: executing program 37 (id=3517): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setregid(0x0, 0xee00) utime(&(0x7f0000000340)='./file0\x00', 0x0) 20m58.417424211s ago: executing program 38 (id=3926): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x180, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) read$FUSE(r1, 0x0, 0x6c) 20m18.90754609s ago: executing program 39 (id=4202): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x100) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffffffffffd}) flock(r0, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/124, 0x7c}], 0x1, 0x6, 0x0) 17m23.865342422s ago: executing program 40 (id=5609): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x8, 0x4) recvfrom(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 16m50.559594417s ago: executing program 41 (id=5862): r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x1b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 16m5.282283091s ago: executing program 42 (id=6166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r0}, &(0x7f00000000c0), &(0x7f0000000200)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 15m43.246845173s ago: executing program 43 (id=6302): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0xfe, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/80, 0x50}], 0x6, &(0x7f0000000580)=""/80, 0x50}}], 0x4000000000001ac, 0x2, 0x0) 14m49.125043725s ago: executing program 44 (id=6608): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0x7}}, {@shortad}, {@nostrict}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uid_ignore}, {@mode={'mode', 0x3d, 0x9}}, {@longad}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@undelete}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x5, 0xc6d, &(0x7f0000002600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 13m57.843087335s ago: executing program 45 (id=6886): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900", 0x2c}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 13m23.622457169s ago: executing program 46 (id=6988): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 13m16.79726109s ago: executing program 1 (id=7104): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$sock(r1, &(0x7f00000002c0), 0x1, 0x4080850) io_setup(0xff, &(0x7f0000000140)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 13m15.739371378s ago: executing program 1 (id=7108): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x7fffffff800000, 0x2) close(0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x1}, 0x8) 13m15.253401368s ago: executing program 1 (id=7111): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 13m14.940306621s ago: executing program 1 (id=7112): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00970a000008000b000000000006000100070000000c000f810000000000000000050005"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 13m10.56802246s ago: executing program 1 (id=7133): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b) keyctl$revoke(0x3, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 13m9.957713792s ago: executing program 47 (id=7133): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b) keyctl$revoke(0x3, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 12m40.781052092s ago: executing program 2 (id=7263): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/144, 0x90}, 0xa7a}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 12m40.494030156s ago: executing program 2 (id=7264): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 12m37.672472677s ago: executing program 2 (id=7277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) getpgid(0x0) 12m32.308544349s ago: executing program 2 (id=7305): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) 12m30.844335227s ago: executing program 2 (id=7309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) 12m24.412027023s ago: executing program 2 (id=7337): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008004) setrlimit(0x9, &(0x7f0000000080)={0x5, 0x7}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 12m23.759843962s ago: executing program 48 (id=7337): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008004) setrlimit(0x9, &(0x7f0000000080)={0x5, 0x7}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 11m37.422778937s ago: executing program 3 (id=7643): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)) 11m37.010019969s ago: executing program 3 (id=7646): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x340, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x310, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11m35.606826898s ago: executing program 3 (id=7655): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 11m35.197921813s ago: executing program 3 (id=7661): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x80078b, &(0x7f0000000040)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsv0}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 11m34.340307653s ago: executing program 3 (id=7668): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x83c, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x810, 0x2, [@TCA_FW_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x80e, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x2000003, 0x9, 0x3, 0xffffffff, 0x10b, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0x800000, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac0, 0x80000000, 0x3, 0xfe000004, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x7, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x10000487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7275, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0xfffffffe, 0x9, 0x8400, 0x3, 0x0, 0x4cf, 0xb, 0x0, 0xce, 0x4, 0x0, 0xc8, 0x4, 0x5, 0xc38, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x401, 0x2, 0x800, 0x7, 0x5, 0x1, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0x5, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x20000009, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x1, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x400, 0xec, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9a, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x88, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x7, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0x3, 0x7, 0x1, 0x3, 0x9, 0x6, 0xb, 0xfffffffa, 0x4, 0x10000df, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x0, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x80000000, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0x625, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0x0, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x8, 0x0, 0x2, 0x7, 0x2, 0x1ff, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x10000, 0x8, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x2008001, 0x9, 0x4, 0x3, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x83c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbaf5) 11m33.813971361s ago: executing program 3 (id=7669): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 11m32.501699444s ago: executing program 49 (id=7669): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 10m12.584930888s ago: executing program 0 (id=8279): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 10m12.370166161s ago: executing program 0 (id=8281): r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x40) 10m11.78495247s ago: executing program 0 (id=8284): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40cf82223eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb0091554f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c80926a103a2584ab40a68e528329dffafc3612e325c1eb4a3a92e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ppoll(0x0, 0x0, 0x0, &(0x7f0000000180)={[0xfffdffffffffff68]}, 0x8) 10m11.260871589s ago: executing program 0 (id=8288): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) 10m11.067920972s ago: executing program 0 (id=8292): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 10m10.856035393s ago: executing program 0 (id=8294): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r2, r0, 0x0) 9m55.812766533s ago: executing program 50 (id=8294): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r2, r0, 0x0) 3m46.856187918s ago: executing program 6 (id=10491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f0000000340)) 3m44.047815303s ago: executing program 6 (id=10496): socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040)=0xfffffffe, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r1, &(0x7f0000001340), 0x0, 0xc040) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m40.055653711s ago: executing program 6 (id=10507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 3m37.332526409s ago: executing program 6 (id=10511): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioprio_set$pid(0x3, r0, 0x2004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={0x18, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x20040010) 3m34.4338338s ago: executing program 6 (id=10516): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) 3m31.229604932s ago: executing program 6 (id=10520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m12.502762863s ago: executing program 51 (id=10520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m5.021492525s ago: executing program 1 (id=10547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) 24.512684254s ago: executing program 7 (id=10873): r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 24.026541727s ago: executing program 5 (id=10875): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001780)=[{0x0}, {0xfffffffffffffffc}], 0x2, 0xa, 0x67271ce1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140) 21.848453905s ago: executing program 7 (id=10878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000), 0x0) 21.093991696s ago: executing program 4 (id=10879): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@loopback, @in=@multicast1, 0x200, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffff7fe, 0x800000000000002}, 0x8, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x3504, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0xc004004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x10001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r1, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x9}, 0x1c) 19.944408592s ago: executing program 4 (id=10880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(r3, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 18.92542373s ago: executing program 4 (id=10881): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 18.737472293s ago: executing program 9 (id=10882): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, 0x0, &(0x7f0000000940)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, 0x0, &(0x7f0000000080)=@tcp6, 0x1}, 0x20) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18.55514905s ago: executing program 5 (id=10884): socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf) futex(0x0, 0x3, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) open(&(0x7f0000000300)='./file0\x00', 0x80140, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x60000600) 18.394128751s ago: executing program 4 (id=10885): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r3}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.31419868s ago: executing program 9 (id=10887): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) 16.160781629s ago: executing program 4 (id=10888): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r3, 0x0, 0x0) 14.236029924s ago: executing program 8 (id=10892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000480)={[], [{@obj_user={'obj_user', 0x3d, 'e)t\x13\x00-\x84Q\xa9\xf5\x89o\x8a\xce$\x88 b^X\xe8\x1b\xde\xb4\xf6\x15\xf1zIKE\x89\xb2\x0f\x9d\xd7\v\xbf d\xa7\x19\x98Gl\x15\xfd0\xd3\xaf\xd6Uh\xcf\x92O\x19\xdd1d\xf7\x06\xa0a\x1ai0o\x1160b\xad\xbff7\xe8R\xa7\x91@Y\xd0\x9d\xd5\xd5\a\x8f\x9a!\xc0,\x1b,\x8a\xe6\xbd\xd7\x13\xe7\xfemi\xa31\xef \x98\xfa\xc0\xc2\xf7ArZ\x8b\x91\xe3\x9b-7\x04\xc6C\x80\xa4\f\xed\x00\xc5b\xdcA\xca\xd7\x14\xbb\xf4\xe4\xae\xcd\xd8+O\xf7-\xdeF\xe5\xee\xb4\xec\xc1\xdd\xac2\x87Z\x89\x85;\x13{\x95V\xb7\xbe\xb6\xd3\xbb\x94[C\xd8U\xa4\xe04\xa2\x8b\'H\x8e\xda\xe8=\xca\xa24|\x8c\x88\x8aLWK\x8c\xde\vH\x17\xa6\xde\x87\xdd\x9c\xa6\x97x\xbf\x8c\xa5\x19\x18\xbd\x03o\xa8l\x04\xf0[\f\'=;\x1e8A\x13n\"\xfc\x18\x95\xa4\xad\xed\x03\xcb2e\x99\'\xc1W\xde!\xb46\x8cp\xac\xcdH\xf1%a3X\x8d\x8et&hI\xa2\xde\xfb\xa2z\xb5\xa8\xc4J\af\x90\xc9\xa8\x18\x06\xb910\xc3\xb4\xfaIq15I\xef\x04\xb9\xdc\xd8\xd6+\x11\xfb\xf6\xaa\x04\xf1\x17\xf6zP\xd4\xacj\x05\x85\x83,n0\x9e\n\x8cZ%\xf8 \xd7\x01U3\xb9\xe9\xe0\xfc(\xb8\xa7n\xc79\xe2\xfd\x8e\x94\xb2\x1f\xbe\'\x945\xace\x01D\x00\x1f\x00k\xa0R\xed\xbc\x13y\xb5CRb\xcf\xec5\xff++\xaa\xab\xfb1\x9d \xc9\x0ex\xd3\xa9\xb2e\x1e\x12&\x9b\xc7\'\xb4\f\x9bmQ/\x9b^\x1a\x13\x9f\x03 \x903\xc0A\xe2\xf8\xc2\x0e\xc9\xa7\xf8W\xe5\xb3\xe8\r+\xe6\xd5?\x1aC\xab\xee'}}]}, 0xff, 0x548, &(0x7f0000001300)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x48010) 13.16350506s ago: executing program 5 (id=10893): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002000)=@bpf_tracing={0x1a, 0x10, &(0x7f0000001d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x401, 0xe3, &(0x7f0000001e40)=""/227, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001f80)={0x3, 0x5, 0x8, 0x6}, 0x10, 0x1088a, 0xffffffffffffffff, 0x0, &(0x7f0000001fc0)=[0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 13.162157005s ago: executing program 7 (id=10894): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x35a53000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000900)={0x0, 0x0, 0x7}) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat(0xffffffffffffffff, 0x0, 0x22003, 0xd6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 11.841998532s ago: executing program 8 (id=10895): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) 9.39077328s ago: executing program 9 (id=10896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) keyctl$revoke(0x3, r3) 8.153466365s ago: executing program 5 (id=10897): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, r6, 0x1, 0x70bd2b, 0x25dfdc06, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0) 8.144797343s ago: executing program 8 (id=10898): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 7.956507006s ago: executing program 7 (id=10899): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0xa) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r0, 0xa) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 3.544955417s ago: executing program 9 (id=10900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) syz_open_pts(r3, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300)=r0, 0x12) 3.222424122s ago: executing program 8 (id=10901): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="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", @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$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") r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, 0x0, 0x0) 3.070079193s ago: executing program 5 (id=10902): syz_open_dev$ptys(0xc, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mbind(&(0x7f00004fa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1ff, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, 0x0, 0xc8) getsockname$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) 2.948273445s ago: executing program 7 (id=10903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x851, 0x1) syz_open_dev$evdev(0x0, 0x7, 0x200000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) rmdir(0x0) socket$netlink(0x10, 0x3, 0x9) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) timer_create(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) 2.227600685s ago: executing program 4 (id=10904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prlimit64(r0, 0xd, 0x0, 0x0) r4 = dup(r3) sendto$packet(r4, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.446656089s ago: executing program 8 (id=10905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1e94c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0xa71, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0xffe3) 1.094722064s ago: executing program 9 (id=10906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") 0s ago: executing program 5 (id=10907): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006be000/0x4000)=nil, &(0x7f00006be000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000721000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0xfc6b}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xdaa9, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0xb, 0x0, 0x80, 0x0}) kernel console output (not intermixed with test programs): ice [ 1239.516862][ T664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8576'. [ 1239.533710][ T718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1239.571372][ T718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.760261][T19742] bond2: (slave bridge1): failed to get link speed/duplex [ 1239.815352][ T30] audit: type=1326 audit(1777563645.567:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=676 comm="syz.7.8580" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841299cdd9 code=0x0 [ 1239.852839][ T667] ªªªªªª: renamed from vlan0 (while UP) [ 1239.991680][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1240.110060][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1240.239739][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1241.085865][ T706] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8587'. [ 1241.101388][T19734] bond2: (slave bridge1): failed to get link speed/duplex [ 1241.151223][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1241.340424][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1241.703577][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1241.896230][ T732] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1241.934451][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1242.103608][T19739] bond2: (slave bridge1): failed to get link speed/duplex [ 1242.400679][ T738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1242.798524][ T718] bridge_slave_1: left allmulticast mode [ 1242.832258][ T718] bridge_slave_1: left promiscuous mode [ 1242.862245][ T718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.900820][T24920] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1242.910768][T24920] Bluetooth: hci2: Injecting HCI hardware error event [ 1242.926908][ T5634] Bluetooth: hci2: hardware error 0x00 [ 1242.979081][ T718] bridge_slave_0: left allmulticast mode [ 1243.002196][ T718] bridge_slave_0: left promiscuous mode [ 1243.020892][ T718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.376807][ T757] loop8: detected capacity change from 0 to 16 [ 1243.529284][ T757] erofs (device loop8): mounted with root inode @ nid 36. [ 1243.880877][T27413] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1244.063731][T27413] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1244.095150][T27413] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.201507][T27413] usb 9-1: config 0 descriptor?? [ 1244.249310][T27413] cp210x 9-1:0.0: cp210x converter detected [ 1244.345986][ T718] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1244.674510][T27413] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1244.727331][T27413] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1244.926393][T27413] usb 9-1: USB disconnect, device number 21 [ 1245.029831][T27413] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1245.062955][ T5634] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1245.111300][T27413] cp210x 9-1:0.0: device disconnected [ 1245.542887][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 1245.666534][ T718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.733035][ T718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.768147][ T718] bond0 (unregistering): Released all slaves [ 1245.807692][ T718] bond1 (unregistering): Released all slaves [ 1245.950341][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1246.093199][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1246.186680][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1246.246868][ T91] bond2: (slave bridge1): failed to get link speed/duplex [ 1246.325271][ T816] fuse: fd is not a fuse device [ 1246.404256][ T718] tipc: Disabling bearer [ 1246.442059][ T718] tipc: Left network mode [ 1246.452560][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1246.680065][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1246.794903][ T827] netlink: 'syz.4.8615': attribute type 19 has an invalid length. [ 1246.832751][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1247.412041][ T813] loop8: detected capacity change from 0 to 32768 [ 1247.428474][ T813] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8610 (813) [ 1247.544229][ T813] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1247.574391][ T813] BTRFS info (device loop8): using sha256 checksum algorithm [ 1247.720536][ T813] BTRFS info (device loop8): enabling ssd optimizations [ 1247.765568][ T813] BTRFS info (device loop8): turning on async discard [ 1247.774106][ T813] BTRFS info (device loop8): enabling free space tree [ 1247.781445][ T813] BTRFS info (device loop8): enabling auto defrag [ 1247.788165][ T813] BTRFS info (device loop8): max_inline set to 4096 [ 1248.052648][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1248.198278][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1248.342411][T19734] bond2: (slave bridge1): failed to get link speed/duplex [ 1248.469996][T19739] bond2: (slave bridge1): failed to get link speed/duplex [ 1248.600882][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1248.707387][ T881] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1248.769129][ T881] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1248.829099][T23692] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1248.899149][ T881] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1248.994460][ T881] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1249.091513][T23692] usb 10-1: Using ep0 maxpacket: 8 [ 1249.117905][T23692] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1249.163268][T23692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.185514][T23692] usb 10-1: Product: syz [ 1249.206010][T23692] usb 10-1: Manufacturer: syz [ 1249.221761][T23692] usb 10-1: SerialNumber: syz [ 1249.257312][T23692] usb 10-1: config 0 descriptor?? [ 1249.271868][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1249.482871][ T718] hsr_slave_0: left promiscuous mode [ 1249.490628][T23692] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1249.517725][ T718] hsr_slave_1: left promiscuous mode [ 1249.533049][T30285] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1249.543427][ T718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.543454][ T718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.636395][ T718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.686759][ T718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.804460][ T718] veth1_macvtap: left promiscuous mode [ 1249.834946][ T718] veth0_macvtap: left promiscuous mode [ 1249.864401][ T718] veth1_vlan: left promiscuous mode [ 1249.892424][ T718] veth0_vlan: left promiscuous mode [ 1249.998407][T23692] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1250.044653][ T903] fuse: fd is not a fuse device [ 1250.054459][T23692] usb 10-1: USB disconnect, device number 19 [ 1250.947414][ T922] fuse: fd is not a fuse device [ 1251.300341][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1251.950163][T23692] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1252.147486][T23692] usb 9-1: config 0 has no interfaces? [ 1252.178702][T23692] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1252.221683][T23692] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.274839][T23692] usb 9-1: config 0 descriptor?? [ 1252.575859][T23692] usb 9-1: USB disconnect, device number 22 [ 1253.257994][ T943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.309553][ T943] batadv_slave_0: entered promiscuous mode [ 1253.384397][ T942] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1253.393780][ T942] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1253.405058][ T942] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1253.457242][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1253.640896][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1253.791579][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1253.945121][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1254.132092][ T5786] IPVS: starting estimator thread 0... [ 1254.280231][ T1005] IPVS: using max 31 ests per chain, 74400 per kthread [ 1254.448516][ T1000] bond1: left promiscuous mode [ 1254.468557][ T1000] vcan1: left promiscuous mode [ 1254.585186][ T1000] bridge1: left allmulticast mode [ 1254.631205][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1254.785133][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1254.940964][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1255.057637][ T718] IPVS: stop unused estimator thread 0... [ 1255.255741][ T1027] bond1: entered allmulticast mode [ 1255.335711][ T1033] macvlan2: entered allmulticast mode [ 1255.364880][ T1033] bond1: (slave macvlan2): Opening slave failed [ 1255.460348][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1255.600969][ T91] bond2: (slave bridge1): failed to get link speed/duplex [ 1255.750067][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1255.996403][ T30] audit: type=1326 audit(1777563661.747:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841299cdd9 code=0x7ffc0000 [ 1256.086730][ T30] audit: type=1326 audit(1777563661.777:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841299cdd9 code=0x7ffc0000 [ 1256.162135][ T30] audit: type=1326 audit(1777563661.777:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841299cdd9 code=0x7ffc0000 [ 1256.265352][ T30] audit: type=1326 audit(1777563661.777:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f841299cdd9 code=0x7ffc0000 [ 1256.350580][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1256.367706][ T30] audit: type=1326 audit(1777563661.827:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f841295d60e code=0x7ffc0000 [ 1256.479808][ T30] audit: type=1326 audit(1777563661.867:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f841295d60e code=0x7ffc0000 [ 1256.641270][ T30] audit: type=1326 audit(1777563661.867:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f841295d60e code=0x7ffc0000 [ 1256.798519][ T30] audit: type=1326 audit(1777563661.867:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f841295d60e code=0x7ffc0000 [ 1256.830641][ T1081] xt_hashlimit: size too large, truncated to 1048576 [ 1256.956889][ T30] audit: type=1326 audit(1777563661.877:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f841295d60e code=0x7ffc0000 [ 1257.072897][ T1094] fuse: Bad value for 'fd' [ 1257.083300][ T30] audit: type=1326 audit(1777563661.877:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="syz.7.8671" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f841295d60e code=0x7ffc0000 [ 1257.427577][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1257.629802][ T1105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8681'. [ 1258.622765][ T718] net_ratelimit: 20 callbacks suppressed [ 1258.622791][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1258.801487][ T91] bond2: (slave bridge1): failed to get link speed/duplex [ 1258.865260][ T1154] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1258.951369][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1258.967517][ T1157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8697'. [ 1259.140065][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.284551][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.430861][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.562211][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.607209][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1259.713092][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.854635][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.992492][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1260.550321][ T5626] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1260.755973][ T5626] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.789797][ T5626] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1260.820959][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1260.866232][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1260.915535][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1260.954501][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1260.999545][ T5626] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.052067][ T5626] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1261.093863][ T5626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.125525][ T5626] usb 9-1: Product: syz [ 1261.156246][ T5626] usb 9-1: Manufacturer: syz [ 1261.170218][ T5626] usb 9-1: SerialNumber: syz [ 1261.195574][ T5626] usb 9-1: config 0 descriptor?? [ 1261.223165][ T1184] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1261.297002][ T5626] ati_remote 9-1:0.0: Initializing ati_remote hardware failed. [ 1261.360533][ T5626] ati_remote 9-1:0.0: probe with driver ati_remote failed with error -5 [ 1261.385376][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1261.527619][ T5626] usb 9-1: USB disconnect, device number 23 [ 1261.812752][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1262.917484][ T1251] fuse: fd is not a fuse device [ 1263.109349][ T1261] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8727'. [ 1263.300463][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1263.630243][T22000] net_ratelimit: 31 callbacks suppressed [ 1263.630279][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1263.761117][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1263.890150][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1263.951207][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1263.958468][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1264.026481][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.161302][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1264.241562][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.398150][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.554896][ T1290] team0: Port device syz_tun added [ 1264.601123][ T91] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.746828][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.903196][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.914878][T23692] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1264.976878][ T1310] overlayfs: failed to clone upperpath [ 1265.052037][ T91] bond2: (slave bridge1): failed to get link speed/duplex [ 1265.093662][T23692] usb 10-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1265.131608][T23692] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1265.148382][T23692] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1265.201849][T23692] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1265.232640][T23692] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1265.278476][T23692] usb 10-1: Product: syz [ 1265.308604][T23692] usb 10-1: Manufacturer: syz [ 1265.331411][T23692] usb 10-1: SerialNumber: syz [ 1265.363409][T23692] usb 10-1: config 0 descriptor?? [ 1265.376948][ T1300] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1265.419345][T23692] usb 10-1: selecting invalid altsetting 0 [ 1265.825696][T23692] usb 10-1: USB disconnect, device number 20 [ 1265.870758][ T1331] fuse: fd is not a fuse device [ 1265.925250][ T8099] udevd[8099]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1266.424753][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1268.642148][ T91] net_ratelimit: 31 callbacks suppressed [ 1268.642174][ T91] bond2: (slave bridge1): failed to get link speed/duplex [ 1268.800553][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1268.923755][ T1384] overlayfs: failed to clone upperpath [ 1268.940328][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.067914][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.212055][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.362290][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.389373][ T1393] VFS: Mount too revealing [ 1269.469612][ T1399] fuse: fd is not a fuse device [ 1269.495909][ T1400] 0ªî{X¹¦: left allmulticast mode [ 1269.879208][ T1407] fuse: fd is not a fuse device [ 1269.931475][ T1400] bond1: left allmulticast mode [ 1269.964871][ T1400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1270.005139][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1270.132363][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1270.273356][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1270.411379][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1270.476694][ T1426] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1271.461298][ T1442] fuse: fd is not a fuse device [ 1271.475889][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1271.872748][ T1446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8790'. [ 1272.392653][ T1461] bridge0: port 3(vlan2) entered blocking state [ 1272.438349][ T1461] bridge0: port 3(vlan2) entered disabled state [ 1272.450779][T17128] IPVS: starting estimator thread 0... [ 1272.482610][ T1461] vlan2: entered allmulticast mode [ 1272.509794][ T1461] geneve0: entered allmulticast mode [ 1272.533614][ T1461] vlan2: entered promiscuous mode [ 1272.552889][ T1461] geneve0: entered promiscuous mode [ 1272.569191][ T1466] IPVS: using max 25 ests per chain, 60000 per kthread [ 1272.862956][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1272.882819][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1273.055856][ T1486] fuse: Bad value for 'fd' [ 1273.720154][T22000] net_ratelimit: 26 callbacks suppressed [ 1273.720179][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1273.820980][ T1493] loop8: detected capacity change from 0 to 256 [ 1273.925255][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1274.075255][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1274.232379][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1274.382221][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1274.529818][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1274.912876][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1275.032684][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1275.451449][ T1510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.459175][ T1510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.885121][ T1510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.973611][ T1510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.066357][ T1529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1276.073683][ T1529] IPv6: NLM_F_CREATE should be set when creating new route [ 1276.101857][ T1529] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8819'. [ 1276.510243][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1276.635722][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.676767][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.718961][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.764941][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.811344][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1276.841612][ T5764] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1276.942436][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1277.075569][ T5764] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.114695][ T5764] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1277.158793][ T5764] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1277.205875][ T5764] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1277.237575][ T5764] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.275561][ T5764] usb 9-1: Product: syz [ 1277.287742][ T5764] usb 9-1: Manufacturer: syz [ 1277.304915][ T5764] usb 9-1: SerialNumber: syz [ 1277.923108][ T1577] overlayfs: missing 'lowerdir' [ 1278.228570][ T1584] fuse: fd is not a fuse device [ 1278.425139][ T5764] cdc_ncm 9-1:1.0: bind() failure [ 1278.474354][ T5764] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1278.512829][ T5764] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1278.538306][ T5764] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1278.565825][ T1595] fuse: fd is not a fuse device [ 1278.581657][ T5764] usb 9-1: USB disconnect, device number 24 [ 1278.816389][ T5815] net_ratelimit: 15 callbacks suppressed [ 1278.816415][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1279.452556][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1279.590019][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1279.619113][ T10] kernel write not supported for file bpf-map (pid: 10 comm: kworker/0:1) [ 1279.756237][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1279.900806][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1280.004768][ T1625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8845'. [ 1280.054912][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1280.067559][ T1625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8845'. [ 1280.294178][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1280.435146][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1280.595104][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1280.724151][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1281.109293][ T1644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8851'. [ 1281.150899][ T1644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8851'. [ 1281.325822][ T1651] fuse: fd is not a fuse device [ 1281.540143][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1281.830103][T27426] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1281.899678][ T1671] fuse: Bad value for 'fd' [ 1282.032284][T27426] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1282.038082][ T1679] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8863'. [ 1282.064343][T27426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.102614][T27426] usb 9-1: Product: syz [ 1282.120051][T27426] usb 9-1: Manufacturer: syz [ 1282.138332][T27426] usb 9-1: SerialNumber: syz [ 1282.162526][T27426] usb 9-1: config 0 descriptor?? [ 1282.402887][T27426] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1283.406628][ T1715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.428692][T27426] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1283.470474][ T1715] batadv_slave_0: entered promiscuous mode [ 1283.663802][T27426] usb 9-1: USB disconnect, device number 25 [ 1283.870271][T19728] net_ratelimit: 22 callbacks suppressed [ 1283.870297][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1284.018242][T19734] bond2: (slave bridge1): failed to get link speed/duplex [ 1284.150149][T19734] bond2: (slave bridge1): failed to get link speed/duplex [ 1284.280056][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1284.533252][T19728] bridge_slave_1: left allmulticast mode [ 1284.559439][T19728] bridge_slave_1: left promiscuous mode [ 1284.603219][T19728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.689824][T19728] bridge_slave_0: left allmulticast mode [ 1284.723652][T19728] bridge_slave_0: left promiscuous mode [ 1284.767060][T19728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.845480][T19728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.912755][T19728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.944573][T19728] bond0 (unregistering): Released all slaves [ 1286.032670][ T1743] macvtap1: entered promiscuous mode [ 1286.091050][ T1743] vlan0: entered promiscuous mode [ 1286.101264][ T1743] macvtap1: entered allmulticast mode [ 1286.106930][ T1743] vlan0: entered allmulticast mode [ 1286.112553][ T1743] veth0_vlan: entered allmulticast mode [ 1286.177187][ T1746] macvtap2: entered promiscuous mode [ 1286.200657][ T1746] macvtap2: entered allmulticast mode [ 1286.318917][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1286.490210][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1286.605939][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1286.617290][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1286.741527][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1286.961495][ T91] bond2: (slave bridge1): failed to get link speed/duplex [ 1286.968748][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1286.968766][ T30] audit: type=1326 audit(1777563692.717:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1778 comm="syz.5.8896" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5db659cdd9 code=0x0 [ 1286.969463][ T1781] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8894'. [ 1287.059387][ T1781] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8894'. [ 1287.141589][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1287.425513][ T1791] overlayfs: failed to clone upperpath [ 1287.610364][T19728] hsr_slave_0: left promiscuous mode [ 1287.655827][T19728] hsr_slave_1: left promiscuous mode [ 1287.663677][T19728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.692432][T19728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.733206][T19728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.749823][T19728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.876852][T19728] veth1_macvtap: left promiscuous mode [ 1287.884771][T19728] veth0_macvtap: left promiscuous mode [ 1287.892245][T19728] veth1_vlan: left promiscuous mode [ 1287.897660][T19728] veth0_vlan: left promiscuous mode [ 1288.559285][ T1814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1288.566635][ T1814] IPv6: NLM_F_CREATE should be set when creating new route [ 1288.587106][ T1818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8906'. [ 1289.416320][T19728] team0 (unregistering): Port device team_slave_1 removed [ 1289.504411][T19728] team0 (unregistering): Port device team_slave_0 removed [ 1289.541692][T27413] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1289.639450][ T1842] fuse: fd is not a fuse device [ 1289.750103][T27413] usb 10-1: Using ep0 maxpacket: 32 [ 1289.771172][T27413] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1289.811619][T27413] usb 10-1: config 0 has no interface number 0 [ 1289.843147][T27413] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1289.873527][T27413] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.908536][T27413] usb 10-1: Product: syz [ 1289.925104][T27413] usb 10-1: Manufacturer: syz [ 1289.939982][T27413] usb 10-1: SerialNumber: syz [ 1289.996799][T27413] usb 10-1: config 0 descriptor?? [ 1290.234268][ T1856] netlink: 'syz.7.8923': attribute type 10 has an invalid length. [ 1290.461918][T27413] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1290.507600][T27413] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1291.111015][ T36] net_ratelimit: 1 callbacks suppressed [ 1291.111039][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.313857][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.469955][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.603538][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.620424][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1291.750272][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.857557][T27413] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1291.870304][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.919009][T27413] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1291.957166][T27413] usb 10-1: USB disconnect, device number 21 [ 1292.010195][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1292.151115][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1292.271249][ T36] bond2: (slave bridge1): failed to get link speed/duplex [ 1292.299429][ T1877] fuse: fd is not a fuse device [ 1292.400189][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1292.474347][ T1883] netlink: 'syz.8.8933': attribute type 11 has an invalid length. [ 1292.490254][ T1883] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8933'. [ 1292.592134][ T1887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8936'. [ 1292.775378][ T1887] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1292.818508][ T1891] ipvlan2: entered allmulticast mode [ 1292.831696][ T1891] bond3: entered allmulticast mode [ 1292.973357][ T1895] geneve2: entered allmulticast mode [ 1293.013735][ T1895] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1293.074001][ T1906] fuse: Bad value for 'fd' [ 1293.551781][ T30] audit: type=1326 audit(1777563699.297:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1293.657286][ T30] audit: type=1326 audit(1777563699.337:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1293.759065][ T1926] netlink: 'syz.7.8949': attribute type 1 has an invalid length. [ 1293.781866][ T30] audit: type=1326 audit(1777563699.347:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1293.828288][ T1923] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8948'. [ 1293.897694][ T30] audit: type=1326 audit(1777563699.347:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1293.973081][ T1926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1294.034418][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.041697][ C0] bridge0: topology change detected, propagating [ 1294.048302][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.055569][ C0] bridge0: topology change detected, propagating [ 1294.094767][ T30] audit: type=1326 audit(1777563699.347:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1294.170737][ T1930] vlan3: entered allmulticast mode [ 1294.201109][ T1930] bond3: entered allmulticast mode [ 1294.236494][ T30] audit: type=1326 audit(1777563699.347:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1294.288113][ T1932] bond3: (slave geneve2): making interface the new active one [ 1294.310752][ T1932] geneve2: entered allmulticast mode [ 1294.349495][ T30] audit: type=1326 audit(1777563699.347:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1294.433936][ T30] audit: type=1326 audit(1777563699.347:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1294.487205][ T1932] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1294.527424][ T30] audit: type=1326 audit(1777563699.347:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1294.599006][ T30] audit: type=1326 audit(1777563699.347:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1916 comm="syz.6.8947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f202bf9cdd9 code=0x7ffc0000 [ 1294.906978][ T1952] fuse: Bad value for 'fd' [ 1295.259814][ T1964] loop8: detected capacity change from 0 to 512 [ 1295.272025][ T1964] EXT4-fs: Ignoring removed orlov option [ 1295.310076][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1295.357633][ T1964] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1295.390714][ T1964] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1295.437951][ T1964] EXT4-fs (loop8): 1 truncate cleaned up [ 1295.453467][ T1964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1295.797666][T30285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.210427][ T1985] overlayfs: failed to clone upperpath [ 1296.437651][ T1993] loop8: detected capacity change from 0 to 256 [ 1296.663028][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1296.730733][ T5815] net_ratelimit: 21 callbacks suppressed [ 1296.730758][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1296.834189][ T2002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1296.841575][ T2002] IPv6: NLM_F_CREATE should be set when creating new route [ 1296.959349][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.101471][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.240725][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.366550][ T2015] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 1297.708596][ T2029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8987'. [ 1297.720737][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.740235][ T2029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8987'. [ 1297.754158][ T1980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8968'. [ 1297.920648][ T5764] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1298.003333][ T2037] fuse: fd is not a fuse device [ 1298.071579][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 1298.090383][ T5764] usb 9-1: Using ep0 maxpacket: 32 [ 1298.106278][ T5764] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1298.146240][ T5764] usb 9-1: config 0 has no interface number 0 [ 1298.166453][ T5764] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1298.208824][ T5764] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1298.238080][ T5764] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.251108][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1298.277849][ T5764] usb 9-1: Product: syz [ 1298.306356][ T5764] usb 9-1: Manufacturer: syz [ 1298.322231][ T5764] usb 9-1: SerialNumber: syz [ 1298.479291][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1298.601513][T19734] bond2: (slave bridge1): failed to get link speed/duplex [ 1298.694912][ T5764] usb 9-1: config 0 descriptor?? [ 1298.772889][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1299.781962][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.589687][ T2086] fuse: fd is not a fuse device [ 1300.698966][ T5764] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1300.739831][ T5764] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1300.771643][ T5764] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1300.804647][ T5764] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1300.853106][ T5764] usb 9-1: USB disconnect, device number 26 [ 1300.908636][ T2092] overlayfs: failed to clone upperpath [ 1301.536357][ T2107] netlink: 168 bytes leftover after parsing attributes in process `syz.7.9021'. [ 1301.701128][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1301.825878][T19739] net_ratelimit: 26 callbacks suppressed [ 1301.825903][T19739] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.000644][T19739] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.145953][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.280386][T19739] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.421665][T19734] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.580660][T19739] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.721384][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.870078][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1303.021094][T19734] bond2: (slave bridge1): failed to get link speed/duplex [ 1303.154377][ T2132] fuse: fd is not a fuse device [ 1303.160191][T19734] bond2: (slave bridge1): failed to get link speed/duplex [ 1303.431557][T23692] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1303.467496][ T2135] bond1: entered allmulticast mode [ 1303.589509][ T2137] macvlan2: entered promiscuous mode [ 1303.601281][T23692] usb 9-1: Using ep0 maxpacket: 16 [ 1303.617744][ T2137] macvlan2: entered allmulticast mode [ 1303.618928][T23692] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.665512][ T2137] bond1: entered promiscuous mode [ 1303.690696][T23692] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1303.697916][ T2137] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1303.726776][T23692] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1303.767471][ T2137] bond1: left promiscuous mode [ 1303.769202][T23692] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.816141][T23692] usb 9-1: Product: syz [ 1303.826364][T23692] usb 9-1: Manufacturer: syz [ 1303.843577][T23692] usb 9-1: SerialNumber: syz [ 1303.926265][T23692] usb 9-1: 0:2 : does not exist [ 1304.085575][T23692] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1304.296230][T23692] usb 9-1: USB disconnect, device number 27 [ 1304.461148][ T1471] udevd[1471]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1306.550609][ T2190] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9052'. [ 1306.757691][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1306.881454][ T48] net_ratelimit: 27 callbacks suppressed [ 1306.881487][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1307.030399][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1307.171278][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1307.300749][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1307.461190][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1307.600046][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1307.765213][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1307.886018][ T2214] tipc: Enabling of bearer rejected, failed to enable media [ 1307.922141][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1308.349319][ T2225] netlink: 'syz.6.9063': attribute type 4 has an invalid length. [ 1308.357659][T19739] bond2: (slave bridge1): failed to get link speed/duplex [ 1308.491295][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1309.420198][ T2247] overlayfs: failed to clone upperpath [ 1310.096782][ T2259] netlink: 'syz.7.9076': attribute type 10 has an invalid length. [ 1310.245262][ T2259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1310.307538][ T2259] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 1310.364565][ T2259] team0: Failed to send options change via netlink (err -105) [ 1310.423168][ T2259] team0: Port device netdevsim1 added [ 1311.673771][ T2294] ªªªªªª: renamed from vlan0 (while UP) [ 1311.780351][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1311.883013][ T2300] tipc: Failed to remove unknown binding: 66,1,1/0:1370721752/1370721754 [ 1311.905843][T19743] net_ratelimit: 26 callbacks suppressed [ 1311.905890][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1311.987231][ T2302] tipc: Failed to remove unknown binding: 66,1,1/0:1370721752/1370721754 [ 1312.150142][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1312.195953][ T2306] netlink: 'syz.8.9094': attribute type 2 has an invalid length. [ 1312.511889][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1312.527472][ T2317] overlayfs: failed to resolve './file0': -2 [ 1312.632030][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1312.797945][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1312.990500][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1313.131411][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1313.280210][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1313.345338][ T2340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9106'. [ 1313.375631][ T2340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9106'. [ 1313.411838][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1313.550100][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1313.950156][T27428] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1314.140116][T27428] usb 9-1: Using ep0 maxpacket: 32 [ 1314.186930][T27428] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1314.229721][T27428] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.259524][T27428] usb 9-1: Product: syz [ 1314.284305][T27428] usb 9-1: Manufacturer: syz [ 1314.290081][ T2372] netlink: 'syz.6.9116': attribute type 27 has an invalid length. [ 1314.312764][T27428] usb 9-1: SerialNumber: syz [ 1314.350493][T27428] usb 9-1: config 0 descriptor?? [ 1314.406701][T27428] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1314.611667][ T2372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.655677][ T2372] batadv_slave_0: left promiscuous mode [ 1315.701297][ T2372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.094168][ T2397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9122'. [ 1316.149654][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9122'. [ 1316.392052][T27428] gspca_ov534_9: reg_r err -71 [ 1316.418992][ T2372] bond1: left promiscuous mode [ 1316.443039][ T2372] vcan1: left promiscuous mode [ 1316.622883][ T2372] ipvlan2: left allmulticast mode [ 1316.642814][ T2372] bond3: left allmulticast mode [ 1316.653784][ T2372] geneve2: left allmulticast mode [ 1316.671402][T27428] gspca_ov534_9: Unknown sensor 0000 [ 1316.671480][T27428] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1316.708606][T27428] usb 9-1: USB disconnect, device number 28 [ 1316.820401][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1316.865607][ T2373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.898106][ T2373] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.971732][ T2373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.142069][ T2373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.149334][ T2373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.256777][ T2373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.313365][ T2373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.687984][ T2373] veth1_vlan: left promiscuous mode [ 1317.737416][ T2373] veth0_vlan: left promiscuous mode [ 1317.785006][ T2373] veth0_vlan: entered promiscuous mode [ 1317.827229][ T2373] veth1_vlan: entered promiscuous mode [ 1317.862461][ T2373] veth1_macvtap: left promiscuous mode [ 1317.869498][ T2373] veth0_macvtap: left promiscuous mode [ 1317.879051][ T2373] veth0_macvtap: entered promiscuous mode [ 1317.889081][ T2373] veth1_macvtap: entered promiscuous mode [ 1317.923729][ T2373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1317.932404][ T2373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1317.941619][ T2373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1317.957248][ T2373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1317.989448][ T2373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1318.019731][ T2373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1318.052163][ T2373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1318.089380][ T2373] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1318.121839][ T718] net_ratelimit: 6 callbacks suppressed [ 1318.121857][ T718] bond2: (slave bridge1): link status up again after 0 ms [ 1318.160231][ T718] bond2: (slave bridge1): link status up again after 0 ms [ 1318.181264][ T718] bond2: (slave bridge1): link status up again after 0 ms [ 1318.200182][ T718] bond2: (slave bridge1): link status up again after 0 ms [ 1318.226114][ T2397] erspan0: entered promiscuous mode [ 1318.240143][T19743] bond2: (slave bridge1): link status up again after 0 ms [ 1318.261856][ T2397] macvtap1: entered promiscuous mode [ 1318.272803][ T2397] macvtap1: entered allmulticast mode [ 1318.288314][ T2397] erspan0: entered allmulticast mode [ 1318.290075][ T718] bond2: (slave bridge1): link status up again after 0 ms [ 1318.353477][ T718] bond2: (slave bridge1): link status up again after 0 ms [ 1318.359780][ T2398] erspan0: left allmulticast mode [ 1318.390381][T19728] bond2: (slave bridge1): link status up again after 0 ms [ 1318.399299][ T2398] erspan0: left promiscuous mode [ 1318.437469][ T2431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9129'. [ 1318.446840][ T5815] bond2: (slave bridge1): link status up again after 0 ms [ 1318.502562][ T5815] bond2: (slave bridge1): link status up again after 0 ms [ 1318.929544][ T2460] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9140'. [ 1318.966337][ T2460] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9140'. [ 1321.043810][ T2498] fuse: fd is not a fuse device [ 1321.862500][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1322.739142][ T2525] xt_hashlimit: size too large, truncated to 1048576 [ 1322.774622][ T2530] overlayfs: failed to clone upperpath [ 1323.043521][ T2542] fuse: fd is not a fuse device [ 1323.132690][ T48] net_ratelimit: 39 callbacks suppressed [ 1323.132716][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1323.290713][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1323.410051][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1323.540106][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1323.671561][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1323.810158][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1323.933015][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1324.050263][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1324.223797][ T2556] loop8: detected capacity change from 0 to 40427 [ 1324.262531][ T2556] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1324.271387][ T2574] netlink: 'syz.7.9174': attribute type 83 has an invalid length. [ 1324.288038][ T2556] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1324.309506][ T2556] F2FS-fs (loop8): invalid crc value [ 1324.321188][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1324.466969][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1324.666693][ T2581] fuse: fd is not a fuse device [ 1324.760963][ T2556] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1324.760962][ T2587] fuse: Bad value for 'fd' [ 1324.958727][ T2556] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1324.987924][ T2556] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1325.408726][ T2611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9186'. [ 1325.829508][ T2621] bond2: entered promiscuous mode [ 1326.146462][T24920] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 1326.904469][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1328.220813][ T48] net_ratelimit: 31 callbacks suppressed [ 1328.220837][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1328.458053][T19734] bond2: (slave bridge1): failed to get link speed/duplex [ 1328.610843][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1328.731368][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1328.880300][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1329.070926][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1329.225380][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1329.380460][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1329.510547][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1329.684913][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1330.180828][T24920] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1330.200331][T24920] Bluetooth: hci0: Injecting HCI hardware error event [ 1330.213023][ T5634] Bluetooth: hci0: hardware error 0x00 [ 1331.307957][ T2748] xt_hashlimit: max too large, truncated to 1048576 [ 1331.586305][ T2755] fuse: fd is not a fuse device [ 1331.762291][ T2763] fuse: fd is not a fuse device [ 1331.773802][ T2764] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9228'. [ 1331.941792][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1332.346086][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1332.756805][ T2795] fuse: Bad value for 'fd' [ 1332.992356][ T2809] overlayfs: failed to clone upperpath [ 1333.121854][ T2812] fuse: fd is not a fuse device [ 1333.257004][ T718] net_ratelimit: 30 callbacks suppressed [ 1333.257033][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1333.374943][ T2830] fuse: fd is not a fuse device [ 1333.530579][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1333.691338][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1334.143662][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1334.280364][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1334.347336][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9260'. [ 1334.373455][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9260'. [ 1334.410323][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1334.479041][ T2862] fuse: fd is not a fuse device [ 1334.530265][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1334.661740][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1334.803455][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1334.919326][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1334.919350][ T30] audit: type=1804 audit(1777563740.667:794): pid=2870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9266" name="file0" dev="tmpfs" ino=686 res=1 errno=0 [ 1334.940081][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1336.016730][ T2897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1336.055821][ T2897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1336.980786][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1338.297303][ T2945] bridge_slave_0: left allmulticast mode [ 1338.343415][ T2945] bridge_slave_0: left promiscuous mode [ 1338.385223][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.524055][ T2945] bond0: (slave bond_slave_0): Releasing backup interface [ 1338.589106][ T2946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1338.642167][ T2945] team0: Port device team_slave_0 removed [ 1338.729511][ T2945] team0: Port device team_slave_1 removed [ 1338.759611][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.803436][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.835268][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1338.846610][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.889405][ T2945] net_ratelimit: 19 callbacks suppressed [ 1338.889428][ T2945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1338.971065][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1339.001053][ T2947] team0: Mode changed to "loadbalance" [ 1339.120081][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1339.241851][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1339.382208][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1339.510325][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1339.650204][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1339.781388][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1339.920993][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1340.071634][ T5815] bond2: (slave bridge1): failed to get link speed/duplex [ 1341.394811][ T3014] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9314'. [ 1341.437117][ T3014] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9314'. [ 1342.638087][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1342.892285][ T5634] Bluetooth: hci5: command 0x0406 tx timeout [ 1343.146309][ T3027] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 1343.283917][ T3029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9319'. [ 1343.561404][ T3027] ftl_cs: FTL header not found. [ 1343.578591][ T3037] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9321'. [ 1343.910863][T19743] net_ratelimit: 25 callbacks suppressed [ 1343.910889][T19743] bond2: (slave bridge1): failed to get link speed/duplex [ 1344.061837][T22000] bond2: (slave bridge1): failed to get link speed/duplex [ 1344.200006][ T718] bond2: (slave bridge1): failed to get link speed/duplex [ 1344.351072][T19739] bond2: (slave bridge1): failed to get link speed/duplex [ 1344.505758][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1344.651787][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1344.697548][ T3078] fuse: fd is not a fuse device [ 1344.790081][T19739] bond2: (slave bridge1): failed to get link speed/duplex [ 1345.051926][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 1345.195617][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1345.321200][T19728] bond2: (slave bridge1): failed to get link speed/duplex [ 1346.449753][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9351'. [ 1346.491225][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9351'. [ 1347.449331][ T30] audit: type=1804 audit(1777563753.197:795): pid=3140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.9361" name="file0" dev="tmpfs" ino=1896 res=1 errno=0 [ 1347.513930][ T3142] fuse: fd is not a fuse device [ 1347.538830][ T3140] ref_ctr increment failed for inode: 0x768 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802afc8c40 [ 1347.956322][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1348.055318][ T3139] uprobe: syz.6.9361:3139 failed to unregister, leaking uprobe [ 1349.601154][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.642773][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.676236][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.719310][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.205867][ T3226] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1350.883006][ T3235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9395'. [ 1351.206085][ T3248] fuse: fd is not a fuse device [ 1351.849334][ T3272] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9408'. [ 1352.225382][ T3285] sctp: [Deprecated]: syz.4.9412 (pid 3285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1352.225382][ T3285] Use struct sctp_sack_info instead [ 1352.768658][ T3294] fuse: fd is not a fuse device [ 1352.992704][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1356.305437][ T3341] tipc: Failed to remove unknown binding: 66,0,0/0:2842263096/2842263097 [ 1356.341830][ T3341] tipc: Failed to remove unknown binding: 66,0,0/0:2842263096/2842263097 [ 1356.444514][ T3345] fuse: fd is not a fuse device [ 1356.468666][ T3345] overlayfs: failed to clone lowerpath [ 1356.605440][ T3351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9439'. [ 1356.612314][ T30] audit: type=1326 audit(1777563762.357:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3349 comm="syz.4.9438" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31f899cdd9 code=0x0 [ 1356.857806][ T3365] fuse: fd is not a fuse device [ 1357.973909][ T3400] netlink: 'syz.8.9455': attribute type 12 has an invalid length. [ 1358.026029][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1358.946384][ T3414] bridge_slave_0: left allmulticast mode [ 1358.970094][ T3414] bridge_slave_0: left promiscuous mode [ 1359.008277][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.091098][ T3414] bridge_slave_1: left allmulticast mode [ 1359.142693][ T3414] bridge_slave_1: left promiscuous mode [ 1359.204804][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.471899][ T3423] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9459'. [ 1359.517748][ T3414] bond0: (slave bond_slave_0): Releasing backup interface [ 1359.622744][ T3426] fuse: fd is not a fuse device [ 1359.646062][ T3414] bond0: (slave bond_slave_1): Releasing backup interface [ 1359.710897][ T3432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9459'. [ 1359.793742][ T3414] team0: Port device team_slave_0 removed [ 1359.903647][ T3414] team0: Port device team_slave_1 removed [ 1359.970800][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.008416][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.060413][ T3414] net_ratelimit: 23 callbacks suppressed [ 1360.060436][ T3414] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1360.099933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1360.338787][ T3416] team0: Mode changed to "loadbalance" [ 1360.538626][T27428] syz1: Port: 1 Link DOWN [ 1361.034317][ T3465] netlink: 'syz.5.9468': attribute type 1 has an invalid length. [ 1361.099798][ T3465] netlink: 'syz.5.9468': attribute type 22 has an invalid length. [ 1361.220155][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1361.240092][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.255749][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.263384][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.715037][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9474'. [ 1361.767802][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.775477][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.856589][ T3491] netlink: 'syz.8.9474': attribute type 10 has an invalid length. [ 1361.894946][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.902197][ T3491] bridge0: port 2(bridge_slave_1) entered listening state [ 1361.909626][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.916836][ T3491] bridge0: port 1(bridge_slave_0) entered listening state [ 1361.930562][ T3500] netlink: 'syz.9.9478': attribute type 11 has an invalid length. [ 1361.962552][ T3491] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1362.073028][ T3504] fuse: fd is not a fuse device [ 1362.201593][ T3508] fuse: fd is not a fuse device [ 1362.610253][ T5744] libceph: connect (1)[c::]:6789 error -22 [ 1362.621694][ T5744] libceph: mon0 (1)[c::]:6789 connect error [ 1362.677062][ T3525] ceph: No mds server is up or the cluster is laggy [ 1362.750364][T27428] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1362.865420][ T3534] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9491'. [ 1362.912298][ T3536] overlayfs: failed to clone upperpath [ 1362.953036][T27428] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1362.969182][T27428] usb 10-1: config 8 has an invalid interface number: 141 but max is 0 [ 1362.994495][T27428] usb 10-1: config 8 has no interface number 0 [ 1363.023697][T27428] usb 10-1: config 8 interface 141 has no altsetting 0 [ 1363.049369][T27428] usb 10-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=f2.dd [ 1363.063037][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1363.070146][T27428] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.090081][T27428] usb 10-1: Product: syz [ 1363.109437][T27428] usb 10-1: Manufacturer: syz [ 1363.120451][T27428] usb 10-1: SerialNumber: syz [ 1363.372055][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.388852][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9494'. [ 1363.410776][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.441089][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9494'. [ 1364.668016][ T3534] ªªªªªª (unregistering): left allmulticast mode [ 1364.688179][ T3534] ªªªªªª (unregistering): left promiscuous mode [ 1365.527700][T27428] int51x1 10-1:8.141: probe with driver int51x1 failed with error -71 [ 1365.562364][T27428] usb 10-1: USB disconnect, device number 22 [ 1366.213364][ T3543] macvtap2: entered promiscuous mode [ 1366.219674][ T3543] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1366.272622][ T3543] macvtap2: entered allmulticast mode [ 1366.287728][ T3543] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1366.301530][ T3543] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1366.317822][ T3546] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1366.353101][ T3549] lo: entered allmulticast mode [ 1366.363134][ T3550] lo: left allmulticast mode [ 1366.381657][ T5744] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1366.491712][ T3579] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9506'. [ 1366.806102][ T3593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9506'. [ 1367.027124][ T3601] input: syz1 as /devices/virtual/input/input57 [ 1367.937520][ T3632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9522'. [ 1368.101055][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1369.741070][ T3684] netlink: 'syz.7.9541': attribute type 1 has an invalid length. [ 1369.856813][ T3684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1370.007179][ T3695] netlink: 'syz.8.9544': attribute type 4 has an invalid length. [ 1370.036957][ T3690] bond4: (slave geneve3): making interface the new active one [ 1370.059070][ T3696] netlink: 'syz.8.9544': attribute type 4 has an invalid length. [ 1370.096754][ T3690] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1370.868116][ T3709] overlayfs: failed to clone upperpath [ 1371.063068][ T3716] fuse: fd is not a fuse device [ 1371.412627][ T3730] mac80211_hwsim hwsim52 ..ãc¤±: renamed from wlan1 [ 1371.497700][ T3732] fuse: fd is not a fuse device [ 1371.876274][ T3742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9561'. [ 1372.048583][ T3749] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9563'. [ 1372.114923][ T3742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1372.229132][ T3748] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1372.299593][ T3748] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1373.143388][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1373.236172][ T3769] fuse: Bad value for 'fd' [ 1373.644063][ T3783] fuse: fd is not a fuse device [ 1376.105381][ T3821] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9587'. [ 1376.550137][T27428] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1376.599263][ T3838] fuse: fd is not a fuse device [ 1376.621849][ T3837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9594'. [ 1376.700594][ T3837] hsr_slave_1 (unregistering): left promiscuous mode [ 1376.722132][T27428] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1376.744254][T27428] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.762148][T27428] usb 10-1: config 0 descriptor?? [ 1376.773583][T27428] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1377.192455][ T3854] fuse: fd is not a fuse device [ 1377.366486][ T3862] fuse: fd is not a fuse device [ 1378.633120][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1379.107297][T27428] usb 10-1: USB disconnect, device number 23 [ 1379.372876][ T3895] netlink: 'syz.8.9615': attribute type 1 has an invalid length. [ 1379.449778][ T3895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1379.671893][ T3899] bond2: (slave ip6gretap1): making interface the new active one [ 1379.744247][ T3899] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1382.452026][ T3921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1383.703054][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1383.727534][ T3942] overlayfs: failed to clone upperpath [ 1384.713818][ T3961] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1385.381656][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9649'. [ 1385.462707][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9649'. [ 1385.914872][ T3994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.965495][ T3996] netlink: 'syz.8.9653': attribute type 1 has an invalid length. [ 1386.017547][ T3996] netlink: 63735 bytes leftover after parsing attributes in process `syz.8.9653'. [ 1386.030856][ T3994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.197445][ T3994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.344036][ T4014] overlayfs: failed to resolve './cgroup': -2 [ 1387.662960][ T4022] fuse: fd is not a fuse device [ 1388.740108][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1389.167600][ T4050] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9672'. [ 1390.517536][ T4073] fuse: fd is not a fuse device [ 1391.598871][ T4093] fuse: fd is not a fuse device [ 1391.940514][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1391.947837][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1394.147306][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1394.453620][ T4151] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9712'. [ 1394.475809][ T4151] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9712'. [ 1394.499692][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.506974][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.514570][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.521748][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.536642][ T4151] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9712'. [ 1394.547345][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.554662][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.884626][ T4166] fuse: fd is not a fuse device [ 1397.069440][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1397.345401][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9729'. [ 1397.533494][ T4205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9729'. [ 1397.673377][ T4195] team1: entered promiscuous mode [ 1397.690084][ T4195] team1: entered allmulticast mode [ 1397.714944][ T4195] 8021q: adding VLAN 0 to HW filter on device team1 [ 1397.756139][ T4212] fuse: fd is not a fuse device [ 1397.811330][ T4205] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 1397.997969][ T4205] team2: entered promiscuous mode [ 1398.044408][ T4205] team2: entered allmulticast mode [ 1398.083743][ T4205] 8021q: adding VLAN 0 to HW filter on device team2 [ 1399.228952][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1399.776383][ T4252] fuse: fd is not a fuse device [ 1400.234730][ T4261] batadv_slave_0: entered promiscuous mode [ 1400.322830][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9751'. [ 1400.805457][ T4260] batadv_slave_0: left promiscuous mode [ 1401.693679][ T4291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9763'. [ 1401.732082][ T4286] tipc: Started in network mode [ 1401.750786][ T4286] tipc: Node identity ac14142f, cluster identity 4711 [ 1401.788498][ T4286] tipc: New replicast peer: 0.0.0.0 [ 1401.809187][ T4286] tipc: Enabled bearer , priority 10 [ 1401.823818][ T4295] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 1401.914763][ T4300] fuse: fd is not a fuse device [ 1402.133797][ T4291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1402.258109][ T4296] macvlan2: entered promiscuous mode [ 1402.268700][ T4296] macvlan2: entered allmulticast mode [ 1402.306720][ T4296] bond5: (slave macvlan2): Opening slave failed [ 1402.364421][ T4306] netlink: 140 bytes leftover after parsing attributes in process `syz.6.9767'. [ 1402.387288][ T4306] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9767'. [ 1402.800295][ T5744] tipc: Node number set to 2886997039 [ 1403.370890][ T30] audit: type=1326 audit(2000000001.739:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.7.9773" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841299cdd9 code=0x7fc00000 [ 1403.400120][ T30] audit: type=1326 audit(2000000001.759:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.7.9773" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f841299cdd9 code=0x7fc00000 [ 1404.271658][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1404.306795][T28890] EXT4-fs error (device loop9): kmmpd:182: comm kmmpd-loop9: Error writing to MMP block [ 1404.359798][T28890] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1404.397895][T28890] EXT4-fs (loop9): I/O error while writing superblock [ 1404.807230][ T4353] ip6t_rpfilter: unknown options [ 1405.748268][ T4360] fuse: fd is not a fuse device [ 1405.786387][ T4361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9783'. [ 1406.020516][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9786'. [ 1408.092985][ T4398] netlink: 'syz.9.9798': attribute type 1 has an invalid length. [ 1408.130175][ T4398] netlink: 'syz.9.9798': attribute type 4 has an invalid length. [ 1408.179059][ T4398] netlink: 15334 bytes leftover after parsing attributes in process `syz.9.9798'. [ 1409.310297][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1409.319686][ T4416] mac80211_hwsim hwsim48 syzkaller0: Caught tx_queue_len zero misconfig [ 1409.423150][ T4416] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 1409.452679][ T4416] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 1412.513462][ T4459] netlink: 'syz.8.9823': attribute type 1 has an invalid length. [ 1412.673956][ T4462] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1412.685451][ T4462] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1412.783781][ T4459] macvlan0: entered promiscuous mode [ 1412.799374][ T4459] macvlan0: entered allmulticast mode [ 1412.830357][ T4459] bond3: entered promiscuous mode [ 1412.848923][ T30] audit: type=1326 audit(2000000011.209:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.5.9824" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db659cdd9 code=0x7fc00000 [ 1412.887831][ T4459] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1412.934965][ T30] audit: type=1326 audit(2000000011.209:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.5.9824" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5db659cdd9 code=0x7fc00000 [ 1412.987918][ T4459] bond3: left promiscuous mode [ 1414.350926][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1414.730612][ T4504] fuse: fd is not a fuse device [ 1415.174841][ T4514] fuse: Bad value for 'fd' [ 1416.263164][ T4537] team1: left promiscuous mode [ 1416.277185][ T4537] team1: left allmulticast mode [ 1416.332883][ T4537] team2: left promiscuous mode [ 1416.368257][ T4537] team2: left allmulticast mode [ 1417.595793][ T4579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9865'. [ 1417.635745][ T4579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9865'. [ 1417.686978][ T4579] batadv_slave_0: entered promiscuous mode [ 1417.709091][ T4586] fuse: fd is not a fuse device [ 1417.951319][ T4589] overlayfs: failed to clone upperpath [ 1418.776015][ T4606] fuse: fd is not a fuse device [ 1419.426728][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1421.198880][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9881'. [ 1422.020118][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.027445][ C0] bridge0: topology change detected, propagating [ 1422.034919][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.042149][ C0] bridge0: topology change detected, propagating [ 1422.308937][ T4649] fuse: fd is not a fuse device [ 1422.682697][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.500124][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1425.736760][ T4702] netlink: 'syz.7.9903': attribute type 1 has an invalid length. [ 1425.967604][ T4705] bond6: (slave gretap1): making interface the new active one [ 1426.010597][ T4705] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1426.323141][ T4710] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9904'. [ 1426.444166][ T4710] ip6gre1: entered promiscuous mode [ 1426.469717][ T4710] ip6gre1: entered allmulticast mode [ 1426.519076][ T4714] netlink: 'syz.5.9904': attribute type 6 has an invalid length. [ 1426.571532][ T4714] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9904'. [ 1428.750691][ T4742] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9915'. [ 1428.802148][ T4742] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9915'. [ 1429.798458][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1430.495084][ T4760] fuse: fd is not a fuse device [ 1430.608116][ T4761] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1430.637251][ T4769] PKCS8: Unsupported PKCS#8 version [ 1431.020639][ T4780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9929'. [ 1432.119993][ T4792] fuse: fd is not a fuse device [ 1433.357362][ T4803] fuse: fd is not a fuse device [ 1433.883132][ T4809] ref_ctr increment failed for inode: 0x9da offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802afca4c0 [ 1434.568658][ T4809] uprobe: syz.6.9936:4809 failed to unregister, leaking uprobe [ 1434.620491][ T4809] uprobe: syz.6.9936:4809 failed to unregister, leaking uprobe [ 1434.829166][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1434.899510][ T4835] fuse: fd is not a fuse device [ 1436.311608][ T4854] overlayfs: failed to resolve './file1': -2 [ 1436.707466][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9956'. [ 1436.716850][ T4861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9956'. [ 1437.034287][ T4869] netlink: 136 bytes leftover after parsing attributes in process `syz.7.9959'. [ 1437.076664][ T4869] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 1437.245851][ T4875] xt_hashlimit: overflow, try lower: 3/0 [ 1438.157205][ T4888] fuse: fd is not a fuse device [ 1438.624934][ T4893] ip6t_rpfilter: unknown options [ 1439.860999][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1439.932117][ T4907] fuse: fd is not a fuse device [ 1441.890097][ T30] audit: type=1804 audit(2000000040.249:801): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.9989" name="file0" dev="tmpfs" ino=4390 res=1 errno=0 [ 1441.930419][ T4949] 9p: Bad value for 'rfdno' [ 1445.281813][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1446.157048][ T5015] fuse: Bad value for 'fd' [ 1447.360515][ T30] audit: type=1326 audit(2000000045.719:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.4.10017" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f899cdd9 code=0x7fc00000 [ 1447.448805][ T30] audit: type=1326 audit(2000000045.719:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.4.10017" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f31f899cdd9 code=0x7fc00000 [ 1447.626975][ T5040] tipc: Failed to remove unknown binding: 66,2,2/0:4092190276/4092190280 [ 1448.287636][ T5051] fuse: fd is not a fuse device [ 1449.840673][ T5073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1449.972879][ T5076] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1450.017289][ T718] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1450.222560][ T718] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1450.347220][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1450.424854][ T5096] cgroup: noprefix used incorrectly [ 1450.747162][ T30] audit: type=1326 audit(2000000049.109:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.9.10031" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd0f9cdd9 code=0x7fc00000 [ 1455.390075][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1458.898058][ T5204] fuse: fd is not a fuse device [ 1460.423516][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1465.144753][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10093'. [ 1465.232205][ T5284] bridge0: port 3(syz_tun) entered blocking state [ 1465.253927][ T5284] bridge0: port 3(syz_tun) entered disabled state [ 1465.280193][ T5284] syz_tun: entered allmulticast mode [ 1465.322560][ T5284] syz_tun: entered promiscuous mode [ 1465.342172][ T5284] bridge0: port 3(syz_tun) entered blocking state [ 1465.348830][ T5284] bridge0: port 3(syz_tun) entered listening state [ 1465.463696][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1467.294715][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10104'. [ 1467.749684][ T5305] tipc: Started in network mode [ 1467.839371][ T5305] tipc: Node identity 7f000001, cluster identity 4711 [ 1467.946962][ T5305] tipc: Enabling of bearer rejected, failed to enable media [ 1468.126201][ T5318] fuse: fd is not a fuse device [ 1468.230611][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10111'. [ 1468.265934][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10113'. [ 1468.291453][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10113'. [ 1468.317593][ T5323] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1468.412218][ T5329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1468.443319][ T5329] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1468.483973][ T5329] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1469.574337][ T5323] macvlan2: entered promiscuous mode [ 1469.594550][ T5323] macvlan2: entered allmulticast mode [ 1469.626762][ T5323] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 1470.540498][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1471.196023][ T5376] fuse: fd is not a fuse device [ 1471.215446][ T5374] fuse: fd is not a fuse device [ 1472.732038][ T5390] < [ 1473.241898][ T5405] fuse: Bad value for 'fd' [ 1474.163662][ T5425] netlink: 17780 bytes leftover after parsing attributes in process `syz.4.10141'. [ 1475.631635][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1477.320321][ T5468] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10156'. [ 1478.977760][ T30] audit: type=1804 audit(2000000077.339:805): pid=5502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.10166" name="file0" dev="tmpfs" ino=2703 res=1 errno=0 [ 1478.987041][ T5502] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 1479.085008][ T5505] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10168'. [ 1479.097692][ T5502] ref_ctr increment failed for inode: 0xa8f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880377e0000 [ 1479.129454][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10168'. [ 1479.155949][ T5506] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 1479.190092][ T5506] ref_ctr decrement failed for inode: 0xa8f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880377e0000 [ 1479.277877][ T5506] uprobe: syz.6.10166:5506 failed to unregister, leaking uprobe [ 1480.864080][ T5526] fuse: fd is not a fuse device [ 1480.873020][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1483.229472][ T5550] fuse: fd is not a fuse device [ 1484.490222][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.708655][ T5592] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1485.748861][ T5567] orangefs_mount: mount request failed with -4 [ 1485.940186][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1487.185023][ T5613] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10201'. [ 1489.230027][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1490.996537][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1491.695347][ T5658] IPv6: NLM_F_CREATE should be specified when creating new route [ 1492.427656][ T30] audit: type=1804 audit(2000000089.759:806): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.10213" name="bus" dev="ramfs" ino=116398 res=1 errno=0 [ 1492.539251][ T30] audit: type=1804 audit(2000000090.839:807): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.10213" name="bus" dev="ramfs" ino=116398 res=1 errno=0 [ 1493.699976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1495.467403][ T5707] batadv_slave_0: entered promiscuous mode [ 1495.620128][ C1] bridge0: port 3(syz_tun) entered learning state [ 1495.668825][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10232'. [ 1496.032755][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1496.357240][ T5707] bond0: (slave bond_slave_0): Releasing backup interface [ 1497.070794][ T5705] batadv_slave_0: left promiscuous mode [ 1497.532912][T24920] Bluetooth: hci5: Unknown advertising packet type: 0x16 [ 1497.532998][T24920] Bluetooth: hci5: Unknown advertising packet type: 0x1c [ 1497.542104][T24920] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1498.609301][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10245'. [ 1498.683006][ T5754] tmpfs: Bad value for 'nr_blocks' [ 1498.721453][ T5751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1499.035920][ T5757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1499.074291][ T5757] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1499.147306][ T5757] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1499.521586][ T5777] fuse: fd is not a fuse device [ 1499.632535][ T5751] macvlan0: entered promiscuous mode [ 1499.773825][ T5751] macvlan0: entered allmulticast mode [ 1500.250676][ T5751] bond4: (slave macvlan0): Error -98 calling set_mac_address [ 1501.061724][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1501.584498][ T5827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10263'. [ 1501.594205][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10262'. [ 1501.629999][ T5827] netlink: 'syz.4.10263': attribute type 7 has an invalid length. [ 1501.664079][ T5827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10263'. [ 1504.747742][ T5872] 9p: Bad value for 'rfdno' [ 1504.970856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1505.096044][ T5879] GUP no longer grows the stack in syz.5.10279 (5879): 200000005000-200000008000 (200000004000) [ 1505.280380][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: syz.5.10279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1505.280423][ T5879] Tainted: [L]=SOFTLOCKUP [ 1505.280434][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1505.280451][ T5879] Call Trace: [ 1505.280462][ T5879] [ 1505.280474][ T5879] dump_stack_lvl+0xe8/0x150 [ 1505.280511][ T5879] fixup_user_fault+0x637/0x6f0 [ 1505.280552][ T5879] fault_in_user_writeable+0x71/0xd0 [ 1505.280585][ T5879] futex_lock_pi+0x814/0xb10 [ 1505.280623][ T5879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1505.280672][ T5879] ? __pfx_futex_lock_pi+0x10/0x10 [ 1505.280745][ T5879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1505.280786][ T5879] ? __pfx_futex_wake_mark+0x10/0x10 [ 1505.280842][ T5879] ? mptcp_setsockopt+0xcb0/0x36a0 [ 1505.280889][ T5879] ? __local_bh_enable_ip+0xd0/0x130 [ 1505.280919][ T5879] ? lockdep_hardirqs_on+0x7a/0x110 [ 1505.280959][ T5879] do_futex+0x292/0x420 [ 1505.281001][ T5879] ? __pfx_do_futex+0x10/0x10 [ 1505.281047][ T5879] __se_sys_futex+0x3a8/0x450 [ 1505.281090][ T5879] ? __pfx___se_sys_futex+0x10/0x10 [ 1505.281124][ T5879] ? rcu_is_watching+0x15/0xb0 [ 1505.281167][ T5879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1505.281200][ T5879] ? __x64_sys_futex+0x21/0xf0 [ 1505.281234][ T5879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.281264][ T5879] do_syscall_64+0x15f/0xf80 [ 1505.281306][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.281335][ T5879] RIP: 0033:0x7f5db659cdd9 [ 1505.281358][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.281382][ T5879] RSP: 002b:00007f5db74bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1505.281410][ T5879] RAX: ffffffffffffffda RBX: 00007f5db6815fa0 RCX: 00007f5db659cdd9 [ 1505.281430][ T5879] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1505.281450][ T5879] RBP: 00007f5db6632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1505.281468][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.281485][ T5879] R13: 00007f5db6816038 R14: 00007f5db6815fa0 R15: 00007ffdbfbd3bb8 [ 1505.281529][ T5879] [ 1506.100016][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1509.026164][ T5916] Set syz0 is full, maxelem 0 reached [ 1509.246202][ T5921] netlink: 'syz.7.10291': attribute type 1 has an invalid length. [ 1511.246203][ T5936] netlink: 'syz.5.10292': attribute type 15 has an invalid length. [ 1511.682848][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1512.656311][ T5952] netlink: 'syz.8.10300': attribute type 12 has an invalid length. [ 1516.834390][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1518.889358][ T6022] netlink: 132 bytes leftover after parsing attributes in process `syz.8.10323'. [ 1522.022610][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1523.328317][ T6049] team0: Port device bridge3 added [ 1523.379811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 1524.444171][T24920] Bluetooth: hci5: unexpected event 0x04 length: 13 > 10 [ 1524.444459][T24920] Bluetooth: hci5: connection err: -111 [ 1525.706986][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 1525.714691][ C1] bridge0: topology change detected, propagating [ 1527.070228][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1529.966722][ T6113] fuse: fd is not a fuse device [ 1530.562900][ T3170] IPVS: starting estimator thread 0... [ 1530.720654][ T6122] IPVS: using max 24 ests per chain, 57600 per kthread [ 1532.111271][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1532.566052][ T6144] netlink: 'syz.4.10360': attribute type 39 has an invalid length. [ 1537.161371][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1537.628176][ T6181] Invalid ELF header magic: != ELF [ 1540.009808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 1540.489802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 1540.499793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 1540.549799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 1540.774166][ T6210] netlink: 'syz.6.10380': attribute type 12 has an invalid length. [ 1541.152161][ T6221] netlink: 'syz.9.10382': attribute type 1 has an invalid length. [ 1542.016067][ T6227] netlink: 14 bytes leftover after parsing attributes in process `syz.9.10382'. [ 1542.180453][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1544.143606][ T6221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1544.354036][ T6223] bond2: (slave dummy0): making interface the new active one [ 1544.366635][ T6223] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1544.450511][ T6255] tipc: Failed to remove unknown binding: 66,0,0/0:3382235527/3382235529 [ 1544.464862][ T6255] tipc: Failed to remove unknown binding: 66,0,0/0:3382235527/3382235528 [ 1544.474477][ T6227] bond2: (slave dummy0): Releasing active interface [ 1544.519555][ T6255] tipc: Failed to remove unknown binding: 66,0,0/0:3382235527/3382235529 [ 1544.552395][ T6255] tipc: Failed to remove unknown binding: 66,0,0/0:3382235527/3382235528 [ 1545.556865][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.520188][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1548.692206][ T6296] ptrace attach of ""[6297] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6296] [ 1552.590955][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1552.628190][ T6324] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1199711273/1199711275 [ 1552.638181][ T6324] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1199711273/1199711274 [ 1552.651184][ T6324] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1199711273/1199711275 [ 1552.660814][ T6324] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1199711273/1199711274 [ 1557.667063][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1562.821231][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1563.606188][ T6421] netlink: 56 bytes leftover after parsing attributes in process `syz.9.10441'. [ 1567.169782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 1567.648279][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10451'. [ 1568.030694][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1568.811409][ T6452] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1569.136819][ T6453] macvlan2: entered promiscuous mode [ 1569.191944][ T6453] macvlan2: entered allmulticast mode [ 1569.236932][ T6453] bond7: entered promiscuous mode [ 1569.263338][ T6453] bridge3: entered promiscuous mode [ 1569.335025][ T6453] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1569.389355][ T6453] bond7: left promiscuous mode [ 1569.427994][ T6453] bridge3: left promiscuous mode [ 1570.062911][ T6483] 9p: Bad value for 'wfdno' [ 1572.373261][ T6501] fuse: fd is not a fuse device [ 1573.381649][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1578.432805][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1583.461439][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1588.500162][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1589.079103][ T6617] fuse: fd is not a fuse device [ 1593.657904][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1593.777328][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10509'. [ 1598.813712][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1599.677338][ T3170] IPVS: starting estimator thread 0... [ 1599.831284][ T6692] IPVS: using max 26 ests per chain, 62400 per kthread [ 1603.056741][ T6724] ptrace attach of ""[6725] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[6724] [ 1603.974171][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1605.720254][ T6717] bridge0: port 3(syz_tun) entered disabled state [ 1605.755879][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.763552][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.381777][ T6743] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10529'. [ 1607.124055][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.685911][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1608.970947][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1609.520287][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1612.413944][ T6717] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode [ 1612.428953][ T6717] mac80211_hwsim hwsim48 syzkaller0: left allmulticast mode [ 1612.459208][ T6653] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.494215][ T6653] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.539500][ T6653] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.587448][ T6653] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.656049][ T6653] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.728015][ T6653] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.792257][ T6653] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.845520][ T6653] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.392717][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10543'. [ 1618.124091][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1620.366033][ T6807] udevd[6807]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1620.585702][ T6807] udevd[6807]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1620.783251][ T6828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1620.837640][ T6828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1620.855903][ T6828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1620.875264][ T6828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1620.906595][ T6828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1623.300301][T24920] Bluetooth: hci1: command 0x0c1a tx timeout [ 1623.340075][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1624.085974][ T6827] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1624.857693][ T6840] PKCS8: Unsupported PKCS#8 version [ 1628.471504][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1631.910490][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10565'. [ 1633.665926][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1633.955202][ T6828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1633.986533][ T6828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1634.002979][ T6828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1634.012178][ T6828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1634.023528][ T6828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1634.237675][ T6906] batman_adv: batadv0: Adding interface: dummy0 [ 1634.273318][ T6906] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1634.408636][ T6906] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1634.721963][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10572'. [ 1635.126156][ T6915] sctp: [Deprecated]: syz.4.10574 (pid 6915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1635.126156][ T6915] Use struct sctp_sack_info instead [ 1635.200221][ T6916] sctp: [Deprecated]: syz.4.10574 (pid 6916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1635.200221][ T6916] Use struct sctp_sack_info instead [ 1635.260365][ T6918] fuse: fd is not a fuse device [ 1635.563108][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10576'. [ 1635.582997][ T6926] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1636.101733][T24920] Bluetooth: hci0: command tx timeout [ 1636.854138][ T30] audit: type=1326 audit(275910826.218:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd0f9cdd9 code=0x7ffc0000 [ 1637.511534][ T30] audit: type=1326 audit(275910826.248:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd0f9cdd9 code=0x7ffc0000 [ 1637.751703][ T30] audit: type=1326 audit(275910826.248:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd0f9cdd9 code=0x7ffc0000 [ 1638.063283][ T30] audit: type=1326 audit(275910826.248:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd0f9cdd9 code=0x7ffc0000 [ 1638.322215][ T30] audit: type=1326 audit(275910826.248:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6bd0f9cdd9 code=0x7ffc0000 [ 1638.362527][T24920] Bluetooth: hci0: command tx timeout [ 1639.049227][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1639.330627][ T30] audit: type=1326 audit(275910826.878:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd0f9cdd9 code=0x7ffc0000 [ 1639.365550][ T30] audit: type=1326 audit(275910826.878:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6bd0f9cb42 code=0x7ffc0000 [ 1639.393452][ T30] audit: type=1326 audit(275910826.878:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6bd0f9cbd7 code=0x7ffc0000 [ 1639.459153][ T30] audit: type=1326 audit(275910826.878:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6bd0f59ad1 code=0x7ffc0000 [ 1639.647015][ T30] audit: type=1326 audit(275910826.918:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.9.10581" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6bd0f9dbc9 code=0x7ffc0000 [ 1640.437507][T24920] Bluetooth: hci0: command tx timeout [ 1642.862530][T24920] Bluetooth: hci0: command tx timeout [ 1644.118300][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1644.295881][ T6998] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10596'. [ 1644.362550][ T6998] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10596'. [ 1644.524825][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.880759][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.947967][ T6896] bridge_slave_0: entered allmulticast mode [ 1646.343175][ T6896] bridge_slave_0: entered promiscuous mode [ 1646.420459][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10599'. [ 1647.327800][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.335549][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.345874][ T6896] bridge_slave_1: entered allmulticast mode [ 1647.355932][ T6896] bridge_slave_1: entered promiscuous mode [ 1649.165195][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1650.269247][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.282801][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.239359][ T6896] team0: Port device team_slave_0 added [ 1651.308136][ T6896] team0: Port device team_slave_1 added [ 1652.113384][ T7042] tipc: Started in network mode [ 1652.141349][ T7042] tipc: Node identity 080211000001, cluster identity 4711 [ 1652.182394][ T7042] tipc: Enabled bearer , priority 0 [ 1652.222495][ T7045] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 1652.257465][ T7045] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 1652.296530][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1652.305214][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.333648][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1652.383404][ T7050] mac80211_hwsim hwsim48 syzkaller0: Caught tx_queue_len zero misconfig [ 1652.449423][ T7042] tipc: Resetting bearer [ 1652.488536][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1652.530134][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.820323][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.180008][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1655.738455][ T2405] tipc: Node number set to 134418688 [ 1655.813424][ T6896] hsr_slave_0: entered promiscuous mode [ 1655.829304][ T6896] hsr_slave_1: entered promiscuous mode [ 1656.700737][ T6896] debugfs: 'hsr0' already exists in 'hsr' [ 1656.706524][ T6896] Cannot create hsr debugfs directory [ 1657.087564][ T7086] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10619'. [ 1657.369635][ T7093] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10619'. [ 1659.219929][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1661.128098][ T7100] syz.7.10621 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1664.392099][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1668.435503][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.461098][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1672.555592][ T7204] xt_nat: multiple ranges no longer supported [ 1674.502371][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1678.212657][ T6896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1678.267233][ T6896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1678.779757][ T6896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1678.883592][ T6896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1678.932790][ T6896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1679.032199][ T6896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1679.294568][ T6896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1679.827078][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1680.864097][ T6896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1682.577388][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.631039][ T7310] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.10674'. [ 1683.193034][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1683.439155][T19743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.452568][T19743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1683.687512][T19728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.694946][T19728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.964730][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1685.510306][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10675'. [ 1687.964558][ T7371] netlink: 'syz.4.10688': attribute type 8 has an invalid length. [ 1689.206265][ T7380] bridge0: port 3(syz_tun) entered blocking state [ 1689.289346][ T7380] bridge0: port 3(syz_tun) entered disabled state [ 1689.340920][ T7380] syz_tun: entered allmulticast mode [ 1689.390704][ T7380] syz_tun: entered promiscuous mode [ 1689.432566][ T7380] bridge0: port 3(syz_tun) entered blocking state [ 1689.439185][ T7380] bridge0: port 3(syz_tun) entered listening state [ 1690.022905][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1695.098167][ T6828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1695.195097][ T6828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1695.216760][ T6828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1695.229308][ T6828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1695.238268][ T6828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1695.939368][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1698.091962][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1698.091986][ T30] audit: type=1326 audit(275910887.408:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.8.10710" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b7d99cdd9 code=0x0 [ 1698.180524][T24920] Bluetooth: hci1: command tx timeout [ 1699.954434][ T7491] sctp: [Deprecated]: syz.4.10709 (pid 7491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1699.954434][ T7491] Use struct sctp_sack_info instead [ 1700.344910][ T6828] Bluetooth: hci1: command tx timeout [ 1700.982887][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1702.826313][ T6828] Bluetooth: hci1: command tx timeout [ 1704.980207][ T6828] Bluetooth: hci1: command tx timeout [ 1706.174632][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1709.424631][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10729'. [ 1712.089867][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1715.332114][ T30] audit: type=1326 audit(275910904.688:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.7.10734" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841299cdd9 code=0x0 [ 1716.140317][ T6828] Bluetooth: Wrong link type (-57) [ 1717.141425][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1717.351322][T28890] EXT4-fs error (device loop9): kmmpd:182: comm kmmpd-loop9: Error writing to MMP block [ 1717.393227][T28890] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1717.524828][T28890] EXT4-fs (loop9): I/O error while writing superblock [ 1719.610459][ T7661] fuse: fd is not a fuse device [ 1719.619901][ C0] bridge0: port 3(syz_tun) entered learning state [ 1720.116865][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.264278][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.349172][ T7426] bridge_slave_0: entered allmulticast mode [ 1720.626395][ T7426] bridge_slave_0: entered promiscuous mode [ 1720.732723][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.798731][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.855895][ T7426] bridge_slave_1: entered allmulticast mode [ 1721.155572][ T7426] bridge_slave_1: entered promiscuous mode [ 1722.251862][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1722.369927][ T7693] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[32586] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[7693] [ 1723.285225][T19737] bridge_slave_1: left allmulticast mode [ 1723.306991][T19737] bridge_slave_1: left promiscuous mode [ 1723.320758][T19737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.333687][T19737] bridge_slave_0: left allmulticast mode [ 1723.353050][T19737] bridge_slave_0: left promiscuous mode [ 1723.373385][T19737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.300545][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1727.596771][T19737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1727.722609][T19737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1727.810389][T19737] bond0 (unregistering): Released all slaves [ 1728.696653][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.740914][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.798208][ T7730] lo: Caught tx_queue_len zero misconfig [ 1730.001111][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.252930][T19737] hsr_slave_0: left promiscuous mode [ 1731.314576][T19737] hsr_slave_1: left promiscuous mode [ 1731.367266][T19737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1731.456175][T19737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1732.471080][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1737.540037][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1739.299482][ T7773] orangefs_mount: mount request failed with -4 [ 1740.458276][ T7792] siw: device registration error -23 [ 1742.425985][T19737] team0 (unregistering): Port device team_slave_1 removed [ 1742.607131][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1742.818741][T19737] team0 (unregistering): Port device team_slave_0 removed [ 1742.929286][ T7821] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.10792'. [ 1743.797668][ T7426] team0: Port device team_slave_0 added [ 1744.054470][ T7426] team0: Port device team_slave_1 added [ 1745.063971][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1745.095354][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1745.219961][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1745.234662][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1745.294555][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1745.328935][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1745.405442][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.655718][ T7426] hsr_slave_0: entered promiscuous mode [ 1746.708017][ T7426] hsr_slave_1: entered promiscuous mode [ 1746.787278][ T7426] debugfs: 'hsr0' already exists in 'hsr' [ 1747.124771][ T7426] Cannot create hsr debugfs directory [ 1747.621662][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1749.699883][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 1749.706530][ C0] bridge0: topology change detected, propagating [ 1750.354274][ T7887] netlink: 'syz.9.10809': attribute type 3 has an invalid length. [ 1752.670457][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1753.773353][T24920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1753.803097][T24920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1753.812963][T24920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1753.834004][T24920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1753.851866][T24920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1756.080826][T24920] Bluetooth: hci0: command tx timeout [ 1756.230970][ T7952] netlink: 'syz.9.10820': attribute type 14 has an invalid length. [ 1756.777944][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10820'. [ 1757.991194][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1758.848481][T24920] Bluetooth: hci0: command tx timeout [ 1760.899822][T24920] Bluetooth: hci0: command tx timeout [ 1762.981544][T24920] Bluetooth: hci0: command tx timeout [ 1763.060776][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1767.751707][ T7574] bridge_slave_1: left allmulticast mode [ 1767.769880][ T7574] bridge_slave_1: left promiscuous mode [ 1767.803588][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.878911][ T7574] bridge_slave_0: left allmulticast mode [ 1767.897766][ T7574] bridge_slave_0: left promiscuous mode [ 1767.918625][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.102265][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1768.498268][ T7574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1768.597247][ T7574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1768.651894][ T7574] bond0 (unregistering): Released all slaves [ 1769.517289][ T8078] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.10846'. [ 1772.327138][ T7574] hsr_slave_0: left promiscuous mode [ 1772.355152][ T7574] hsr_slave_1: left promiscuous mode [ 1772.370545][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10851'. [ 1772.406656][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1772.630174][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1773.142555][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1773.518122][ T7574] team0 (unregistering): Port device team_slave_1 removed [ 1773.794278][ T7574] team0 (unregistering): Port device team_slave_0 removed [ 1773.903323][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10856'. [ 1778.293447][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1778.313745][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.525878][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.595662][ T7924] bridge_slave_0: entered allmulticast mode [ 1778.652582][ T7924] bridge_slave_0: entered promiscuous mode [ 1778.687283][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.760041][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.792990][ T7924] bridge_slave_1: entered allmulticast mode [ 1778.831508][ T7924] bridge_slave_1: entered promiscuous mode [ 1779.303569][ T7924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.583454][ T7924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1781.087151][ T7924] team0: Port device team_slave_0 added [ 1781.142759][ T7924] team0: Port device team_slave_1 added [ 1781.418837][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1781.488250][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.579631][ T7924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.628367][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.657164][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.762784][ T7924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.300825][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1786.506074][ T7924] hsr_slave_0: entered promiscuous mode [ 1786.583678][ T7924] hsr_slave_1: entered promiscuous mode [ 1786.637398][ T7924] debugfs: 'hsr0' already exists in 'hsr' [ 1786.688383][ T7924] Cannot create hsr debugfs directory [ 1788.709800][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1789.326963][ T8205] netlink: 277 bytes leftover after parsing attributes in process `syz.4.10872'. [ 1791.424834][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10877'. [ 1791.880772][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.195301][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1796.689801][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1797.051524][ T9] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1797.063374][ T9] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1797.127164][ T7924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1797.165275][ T7924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1797.179800][ T7924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1797.851077][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1797.895890][ T9] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1797.910566][ T7924] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1797.931347][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.962514][ T9] usb 10-1: Product: syz [ 1797.971433][ T7924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1797.986092][ T9] usb 10-1: Manufacturer: syz [ 1798.000592][ T9] usb 10-1: SerialNumber: syz [ 1798.019333][ T8254] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1798.033218][ T8254] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1798.444720][ T7924] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1799.017362][ T7924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1799.228461][ T7924] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1799.231878][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1799.527790][ T9] rtl8150 10-1:1.0: couldn't reset the device [ 1799.534958][ T9] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 1799.556270][ T9] usb 10-1: USB disconnect, device number 24 [ 1805.193392][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1807.863962][ T7924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1808.833675][ T7924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.908340][T28890] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1811.252128][T19739] ------------[ cut here ]------------ [ 1811.260398][T19739] time_after(jiffies, timeout) [ 1811.260419][T19739] WARNING: io_uring/io_uring.c:2352 at io_ring_exit_work+0x4c1/0x980, CPU#1: kworker/u8:14/19739 [ 1811.278481][T19739] Modules linked in: [ 1811.283737][T19739] CPU: 1 UID: 0 PID: 19739 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1811.297716][T19739] Tainted: [L]=SOFTLOCKUP [ 1811.302064][T19739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1811.314711][T19739] Workqueue: iou_exit io_ring_exit_work [ 1811.320304][T19739] RIP: 0010:io_ring_exit_work+0x4c1/0x980 [ 1811.327895][T19739] Code: c6 05 15 7c ef 0e 01 48 c7 c7 00 4b 27 8c be 25 00 00 00 48 c7 c2 20 46 27 8c e8 9a ec 76 00 e9 7e fe ff ff e8 30 b0 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 1811.350550][T19739] RSP: 0018:ffffc900088f7940 EFLAGS: 00010293 [ 1811.356657][T19739] RAX: ffffffff812afc00 RBX: 0000000100024dcb RCX: ffff888047008000 [ 1811.366735][T19739] RDX: 0000000000000000 RSI: ffffffffffffffeb RDI: 0000000000000000 [ 1811.374742][T19739] RBP: ffffc900088f7ad0 R08: ffffc900088f78c7 R09: 1ffff9200111ef18 [ 1811.385480][T19739] R10: dffffc0000000000 R11: fffff5200111ef19 R12: dffffc0000000000 [ 1811.393493][T19739] R13: 0000000100024db6 R14: 0000000000002000 R15: ffff88802dc04000 [ 1811.404034][T19739] FS: 0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 1811.412989][T19739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1811.421871][T19739] CR2: 0000001b3101fff8 CR3: 00000000372b9000 CR4: 0000000000350ef0 [ 1811.429880][T19739] Call Trace: [ 1811.434811][T19739] [ 1811.438243][T19739] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1811.443781][T19739] ? lock_acquire+0x221/0x350 [ 1811.450081][T19739] ? process_scheduled_works+0xa70/0x1860 [ 1811.455839][T19739] ? process_scheduled_works+0xa70/0x1860 [ 1811.463229][T19739] process_scheduled_works+0xb5d/0x1860 [ 1811.468827][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.476109][T19739] ? __pfx_process_scheduled_works+0x10/0x10 [ 1811.482117][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.490247][T19739] ? assign_work+0x3d5/0x5e0 [ 1811.495140][T19739] worker_thread+0xa53/0xfc0 [ 1811.501071][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.506759][T19739] kthread+0x388/0x470 [ 1811.512342][T19739] ? __pfx_worker_thread+0x10/0x10 [ 1811.518244][T19739] ? __pfx_kthread+0x10/0x10 [ 1811.523512][T19739] ret_from_fork+0x514/0xb70 [ 1811.528120][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.535260][T19739] ? __pfx_ret_from_fork+0x10/0x10 [ 1811.540411][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.548420][T19739] ? __switch_to+0xc79/0x1410 [ 1811.553207][T19739] ? __pfx_kthread+0x10/0x10 [ 1811.559628][T19739] ret_from_fork_asm+0x1a/0x30 [ 1811.565762][T19739] [ 1811.569467][T19739] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1811.576768][T19739] CPU: 1 UID: 0 PID: 19739 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1811.587990][T19739] Tainted: [L]=SOFTLOCKUP [ 1811.592325][T19739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1811.602401][T19739] Workqueue: iou_exit io_ring_exit_work [ 1811.607991][T19739] Call Trace: [ 1811.611286][T19739] [ 1811.614226][T19739] vpanic+0x56c/0xa60 [ 1811.618231][T19739] ? __pfx__printk+0x10/0x10 [ 1811.622854][T19739] ? __pfx_vpanic+0x10/0x10 [ 1811.627385][T19739] ? is_bpf_text_address+0x292/0x2b0 [ 1811.632691][T19739] ? is_bpf_text_address+0x26/0x2b0 [ 1811.637925][T19739] panic+0xc5/0xd0 [ 1811.641669][T19739] ? __pfx_panic+0x10/0x10 [ 1811.646115][T19739] ? ret_from_fork_asm+0x1a/0x30 [ 1811.651184][T19739] __warn+0x315/0x4c0 [ 1811.655189][T19739] ? io_ring_exit_work+0x4c1/0x980 [ 1811.660322][T19739] ? io_ring_exit_work+0x4c1/0x980 [ 1811.665452][T19739] __report_bug+0x29a/0x540 [ 1811.669976][T19739] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1811.675902][T19739] ? io_ring_exit_work+0x4c1/0x980 [ 1811.681038][T19739] ? __pfx___report_bug+0x10/0x10 [ 1811.686078][T19739] ? lockdep_hardirqs_on+0x7a/0x110 [ 1811.691297][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.696943][T19739] ? irqentry_exit+0x218/0x730 [ 1811.701732][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.707379][T19739] ? trace_irq_disable+0x3b/0x140 [ 1811.712440][T19739] ? io_ring_exit_work+0x4c3/0x980 [ 1811.717583][T19739] ? io_ring_exit_work+0x4c1/0x980 [ 1811.722716][T19739] report_bug+0x16a/0x220 [ 1811.727062][T19739] ? io_ring_exit_work+0x4c1/0x980 [ 1811.732186][T19739] ? io_ring_exit_work+0x4c3/0x980 [ 1811.737317][T19739] handle_bug+0x9c/0x200 [ 1811.741586][T19739] exc_invalid_op+0x1a/0x50 [ 1811.746110][T19739] asm_exc_invalid_op+0x1a/0x20 [ 1811.750978][T19739] RIP: 0010:io_ring_exit_work+0x4c1/0x980 [ 1811.756717][T19739] Code: c6 05 15 7c ef 0e 01 48 c7 c7 00 4b 27 8c be 25 00 00 00 48 c7 c2 20 46 27 8c e8 9a ec 76 00 e9 7e fe ff ff e8 30 b0 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 1811.776344][T19739] RSP: 0018:ffffc900088f7940 EFLAGS: 00010293 [ 1811.782435][T19739] RAX: ffffffff812afc00 RBX: 0000000100024dcb RCX: ffff888047008000 [ 1811.790423][T19739] RDX: 0000000000000000 RSI: ffffffffffffffeb RDI: 0000000000000000 [ 1811.798410][T19739] RBP: ffffc900088f7ad0 R08: ffffc900088f78c7 R09: 1ffff9200111ef18 [ 1811.806564][T19739] R10: dffffc0000000000 R11: fffff5200111ef19 R12: dffffc0000000000 [ 1811.814550][T19739] R13: 0000000100024db6 R14: 0000000000002000 R15: ffff88802dc04000 [ 1811.822543][T19739] ? io_ring_exit_work+0x4c0/0x980 [ 1811.827709][T19739] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1811.833212][T19739] ? lock_acquire+0x221/0x350 [ 1811.837909][T19739] ? process_scheduled_works+0xa70/0x1860 [ 1811.843647][T19739] ? process_scheduled_works+0xa70/0x1860 [ 1811.849380][T19739] process_scheduled_works+0xb5d/0x1860 [ 1811.854944][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.860637][T19739] ? __pfx_process_scheduled_works+0x10/0x10 [ 1811.866649][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.872329][T19739] ? assign_work+0x3d5/0x5e0 [ 1811.876974][T19739] worker_thread+0xa53/0xfc0 [ 1811.881608][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.887274][T19739] kthread+0x388/0x470 [ 1811.891372][T19739] ? __pfx_worker_thread+0x10/0x10 [ 1811.896498][T19739] ? __pfx_kthread+0x10/0x10 [ 1811.901116][T19739] ret_from_fork+0x514/0xb70 [ 1811.905723][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.911373][T19739] ? __pfx_ret_from_fork+0x10/0x10 [ 1811.916504][T19739] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1811.922155][T19739] ? __switch_to+0xc79/0x1410 [ 1811.926863][T19739] ? __pfx_kthread+0x10/0x10 [ 1811.931477][T19739] ret_from_fork_asm+0x1a/0x30 [ 1811.936277][T19739] [ 1811.939397][T19739] Kernel Offset: disabled [ 1811.943707][T19739] Rebooting in 86400 seconds..