last executing test programs: 2m22.69234318s ago: executing program 2 (id=531): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sysfs$1(0x1, &(0x7f0000000380)='\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x3, 0x1, 0x89, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m16.373026372s ago: executing program 2 (id=537): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r5, 0x0, 0x0, 0x8040, 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x78) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.888854861s ago: executing program 2 (id=541): socket(0x10, 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = semget$private(0x0, 0x4000000009, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x2, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x9}, {0x6, 0x8, 0x3, 0xffffffff}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r6, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5, 0x8}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) 2m4.683352113s ago: executing program 2 (id=564): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) creat(0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) r5 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010) io_setup(0x202, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 2m2.361673644s ago: executing program 2 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4800, 0x0, 0x2, 0x6}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r5 = dup(r4) shutdown(r5, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x8000000, 0x4, 0x440, 0xffffffff, 0xd0, 0x2a0, 0xd0, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'team_slave_0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) getpgrp(0xffffffffffffffff) 2m0.367458774s ago: executing program 2 (id=573): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) rename(0x0, &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x408) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r4, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4000800) 1m42.186874605s ago: executing program 32 (id=573): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) rename(0x0, &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x408) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r4, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4000800) 43.049307578s ago: executing program 1 (id=694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@delchain={0x24, 0x65, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xd, 0x4}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000200)=0x8, 0x4) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080004"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r6) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002dc0)="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", 0xdfe}, {&(0x7f0000003dc0)}], 0x2}}], 0x1, 0x4000000) 40.374692548s ago: executing program 1 (id=698): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000004c0)=""/55, 0x37) getdents64(r7, &(0x7f0000000200)=""/185, 0xb9) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) 38.165839275s ago: executing program 1 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x10002, 0x0, 0x0, 0x9}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0104"], &(0x7f0000008b40)=""/8, 0x3f, 0x8, 0x1, 0x3}, 0x28) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$hidraw(r3, &(0x7f0000000300)=""/186, 0xba) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r7, r7, 0x0, 0xe3aa6ea) 36.312093467s ago: executing program 1 (id=705): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x20c02) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt(r2, 0x1, 0x1, &(0x7f0000000780)=""/4096, &(0x7f0000001780)=0x1000) syz_emit_ethernet(0x72, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @tipc={{0xe, 0x4, 0x1, 0x2e, 0x64, 0x68, 0x0, 0xe, 0x6, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x8f, 0x3, 0x3, [{@empty, 0xffffff80}, {@broadcast, 0x16}, {@multicast2, 0x2000}, {@remote, 0x2}]}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x1, 0xb, 0x3, 0x2, 0x0, 0x0, 0x2, 0x3, 0x4, 0x1, 0x9c, 0xa000, 0x0, 0x4e23, 0x4e24}, 0x2, 0x4}, 0x3, 0x3}, 0x4}}}}}}}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000"], 0x10c}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.892712967s ago: executing program 1 (id=714): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getpgid(r2) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 25.490521542s ago: executing program 1 (id=715): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000860008000000f50000ff00000000000000000000000000000000ff0200000020000000000000000000018600907800"/70], 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) 13.545035174s ago: executing program 3 (id=730): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000008100)='/sys/kernel/oops_count', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '\x00\x00\x00'}, 0x19, 0xfffffffffffffff9) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000200)={0x3, 0x2, 0x1, 0x3}) read$FUSE(r1, &(0x7f000000a3c0)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xce, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x82, 0x17, 0x2, 0x401, 0x0, 0x9, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000500)=""/166, 0xa6) 11.406683954s ago: executing program 3 (id=732): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009359f20787e8e84b284ef252db1e13c60519ba7494d11513928473d097ba442b391cb0d589a8a3ffcde48a3256ff49f123723c87a1f6650cc944bbeb436f928adddba784ccaca39b6f7418b48ab5a9b53a70cc00b202042cdb5eea47da3fe2340bca2e0781fe4a6a12b47e219cc270c34d6f5a4f766b1a1b9c1b0e9e8242a6d4b7dfbe99485ac88c7c7c0331e34dd243ed3bf62bda6708239613aeddd2efcc0010c4d849b6fa5349c58cdebe599691f4aa7ad019ddbd1657872fe09653ecce3a6d73b0c494ff5ef77c2bf2d04fec69e9"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000500)={[{@discard}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_eq}, {@euid_lt}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000400), 0x0, 0x60040804) r7 = socket(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8840) openat$pfkey(0xffffffffffffff9c, 0x0, 0x4082, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) 10.119650185s ago: executing program 3 (id=733): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10) 9.825390049s ago: executing program 4 (id=734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) userfaultfd(0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000"/20, @ANYRES32=0x0, @ANYBLOB="100804000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) sendmmsg$inet6(r2, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)='@SQ', 0x3}], 0x1}}], 0x1, 0x4000091) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x50}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x53, &(0x7f0000000200)=""/83, 0x41100, 0x14, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x2, 0x4, 0x7, 0x8}, {0x5, 0x3, 0x9, 0x2}, {0x3, 0x4, 0xb, 0xc}, {0x3, 0x5, 0x1, 0x2}, {0x5, 0x5, 0x5, 0xc}], 0x10, 0x717e}, 0x94) sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 9.113530264s ago: executing program 0 (id=735): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 8.834943411s ago: executing program 33 (id=715): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000860008000000f50000ff00000000000000000000000000000000ff0200000020000000000000000000018600907800"/70], 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) 8.792813626s ago: executing program 4 (id=737): r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}}, 0x20000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x802) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, 0x0, 0x0) write(r7, &(0x7f0000000140), 0x0) 7.993888107s ago: executing program 0 (id=738): execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) 6.907091452s ago: executing program 4 (id=739): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='mnt/encrypted_dir\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bond_slave_0\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) 6.845235292s ago: executing program 0 (id=740): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r2, 0x1, 0x2e, 0x0, 0x0) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) listen(r3, 0xc) fsopen(0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x60242) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bond0\x00'}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580), 0x80802, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0xc0044d0b, 0xfffffffffffffffe) 5.788267285s ago: executing program 4 (id=741): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x5, 0x401, 0x1, 0x2, 0xf0, 0x3, 0x7, 0x8, 0x0, 0x0, 0x0, 0xffff8001, 0xd0c, 0xa8, 0x8, 0x20, {0x3e34, 0x7}, 0x83}}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)={0x2c}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) poll(0x0, 0x0, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xe5}], 0x1, 0x40000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.78724791s ago: executing program 4 (id=742): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a7eba1ba0fa8f0e}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x14, r2, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) timer_create(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, @in6={0xa, 0x4e23, 0x7, @private1, 0x8}], 0x38) close(r0) 4.777087394s ago: executing program 3 (id=743): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x31, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x69, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0x40000000000000e, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x5ed4f89a, 0x1000000081, 0x100000004, 0x0, 0x81, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86b}}) 3.672362683s ago: executing program 0 (id=744): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xf0}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x34325852, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0x19c}, {0xfffffffc, 0x80001}]}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0xabd, &(0x7f0000000e00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000300)={0x0, 0x8, 0xf228}) 2.400410665s ago: executing program 0 (id=745): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0xffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000000580)=""/102392, 0x18ff8) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) signalfd4(r1, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000240)={0x52, 0x1, 0x1, {0x1, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000000)=0xcf7, 0x4) 1.300172838s ago: executing program 4 (id=746): geteuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d708941c8eb50"]) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) gettid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5414, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x7, 0x0, 0x7, 0x4, 0x6, 0xffffffff, 0x1, 0x200, 0x3, 0x40000003, 0x89, 0x4000002, 0xf27, 0xffff, 0x7, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) r5 = dup(r2) write$cgroup_subtree(r5, &(0x7f00000005c0)=ANY=[], 0x32600) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 1.201046612s ago: executing program 0 (id=747): socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[], 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000100)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 904.725877ms ago: executing program 3 (id=748): execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) 0s ago: executing program 3 (id=749): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xce, 0x0, &(0x7f00000004c0)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x5}) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000ba000000", @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) socket$kcm(0x11, 0x2, 0x0) unshare(0x22020600) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 87.225427][ T5810] cgroup: Unknown subsys name 'net' [ 87.338632][ T5810] cgroup: Unknown subsys name 'cpuset' [ 87.347643][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.063840][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.432053][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.435205][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.444927][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.454168][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.462397][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.469990][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.478906][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.488254][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.497092][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.505258][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.515865][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.523629][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.532117][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.539817][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.540461][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.548661][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.562429][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.563879][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.577700][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.587446][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.596429][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.603962][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.619932][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.641876][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.650975][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.976491][ T793] cfg80211: failed to load regulatory.db [ 92.321489][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 92.397924][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 92.517431][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 92.622217][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.631277][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.639309][ T5822] bridge_slave_0: entered allmulticast mode [ 92.647308][ T5822] bridge_slave_0: entered promiscuous mode [ 92.675817][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 92.701109][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.708322][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.715579][ T5822] bridge_slave_1: entered allmulticast mode [ 92.722898][ T5822] bridge_slave_1: entered promiscuous mode [ 92.736614][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 92.884975][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.892240][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.899588][ T5823] bridge_slave_0: entered allmulticast mode [ 92.907655][ T5823] bridge_slave_0: entered promiscuous mode [ 92.926082][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.960866][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.968227][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.975746][ T5823] bridge_slave_1: entered allmulticast mode [ 92.983083][ T5823] bridge_slave_1: entered promiscuous mode [ 93.006095][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.119240][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.126642][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.133799][ T5831] bridge_slave_0: entered allmulticast mode [ 93.141363][ T5831] bridge_slave_0: entered promiscuous mode [ 93.151280][ T5822] team0: Port device team_slave_0 added [ 93.166624][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.173838][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.181267][ T5830] bridge_slave_0: entered allmulticast mode [ 93.188816][ T5830] bridge_slave_0: entered promiscuous mode [ 93.200287][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.210021][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.217669][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.225139][ T5831] bridge_slave_1: entered allmulticast mode [ 93.232431][ T5831] bridge_slave_1: entered promiscuous mode [ 93.241288][ T5822] team0: Port device team_slave_1 added [ 93.260296][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.267527][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.275760][ T5830] bridge_slave_1: entered allmulticast mode [ 93.283501][ T5830] bridge_slave_1: entered promiscuous mode [ 93.293294][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.384848][ T5823] team0: Port device team_slave_0 added [ 93.407009][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.430303][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.437582][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.445062][ T5839] bridge_slave_0: entered allmulticast mode [ 93.452435][ T5839] bridge_slave_0: entered promiscuous mode [ 93.475500][ T5823] team0: Port device team_slave_1 added [ 93.484186][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.499522][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.506594][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.532552][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.544847][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.552101][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.559391][ T5839] bridge_slave_1: entered allmulticast mode [ 93.566789][ T5839] bridge_slave_1: entered promiscuous mode [ 93.575360][ T5832] Bluetooth: hci0: command tx timeout [ 93.577999][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.615991][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.622966][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.649128][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.659901][ T5832] Bluetooth: hci2: command tx timeout [ 93.659909][ T5826] Bluetooth: hci4: command tx timeout [ 93.665676][ T5826] Bluetooth: hci1: command tx timeout [ 93.690488][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.728953][ T5831] team0: Port device team_slave_0 added [ 93.734661][ T5832] Bluetooth: hci3: command tx timeout [ 93.740447][ T5831] team0: Port device team_slave_1 added [ 93.772322][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.779447][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.805485][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.818674][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.825720][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.852037][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.878995][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.937741][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.949249][ T5830] team0: Port device team_slave_0 added [ 93.958339][ T5830] team0: Port device team_slave_1 added [ 93.979473][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.986654][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.012952][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.070395][ T5822] hsr_slave_0: entered promiscuous mode [ 94.077372][ T5822] hsr_slave_1: entered promiscuous mode [ 94.084782][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.091785][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.118053][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.175092][ T5823] hsr_slave_0: entered promiscuous mode [ 94.181839][ T5823] hsr_slave_1: entered promiscuous mode [ 94.188360][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 94.194181][ T5823] Cannot create hsr debugfs directory [ 94.209703][ T5839] team0: Port device team_slave_0 added [ 94.216945][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.223926][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.250002][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.262837][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.269909][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.296060][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.321363][ T5839] team0: Port device team_slave_1 added [ 94.467795][ T5831] hsr_slave_0: entered promiscuous mode [ 94.474421][ T5831] hsr_slave_1: entered promiscuous mode [ 94.482141][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 94.487967][ T5831] Cannot create hsr debugfs directory [ 94.507329][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.514304][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.544932][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.596501][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.603487][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.630354][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.647795][ T5830] hsr_slave_0: entered promiscuous mode [ 94.654282][ T5830] hsr_slave_1: entered promiscuous mode [ 94.660865][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 94.667205][ T5830] Cannot create hsr debugfs directory [ 94.826587][ T5839] hsr_slave_0: entered promiscuous mode [ 94.833180][ T5839] hsr_slave_1: entered promiscuous mode [ 94.839757][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 94.845603][ T5839] Cannot create hsr debugfs directory [ 95.218410][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.231620][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.254237][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.282815][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.355555][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.381693][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.394024][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.406226][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.490991][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.503298][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.528392][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.553384][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.647734][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.657457][ T5832] Bluetooth: hci0: command tx timeout [ 95.668439][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.679639][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.691467][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.734969][ T5826] Bluetooth: hci1: command tx timeout [ 95.734976][ T5845] Bluetooth: hci4: command tx timeout [ 95.746853][ T5832] Bluetooth: hci2: command tx timeout [ 95.787147][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.817727][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.825069][ T5832] Bluetooth: hci3: command tx timeout [ 95.842527][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.863181][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.870307][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.884409][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.950771][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.997570][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.004919][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.018325][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.039977][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.047192][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.082938][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.090114][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.100762][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.107964][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.130216][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.211419][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.271153][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.292657][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.322435][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.329651][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.340553][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.347752][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.368287][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.375519][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.387291][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.394542][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.468116][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.551778][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.636092][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.643322][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.668291][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.675511][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.840298][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.943019][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.039905][ T5822] veth0_vlan: entered promiscuous mode [ 97.108024][ T5822] veth1_vlan: entered promiscuous mode [ 97.279130][ T5822] veth0_macvtap: entered promiscuous mode [ 97.317420][ T5822] veth1_macvtap: entered promiscuous mode [ 97.348180][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.423932][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.449278][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.490814][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.508942][ T3535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.562588][ T3535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.587203][ T5831] veth0_vlan: entered promiscuous mode [ 97.606091][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.618765][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.634117][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.723215][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.733528][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.754582][ T5832] Bluetooth: hci0: command tx timeout [ 97.761723][ T5831] veth1_vlan: entered promiscuous mode [ 97.815843][ T5832] Bluetooth: hci4: command tx timeout [ 97.816139][ T5826] Bluetooth: hci2: command tx timeout [ 97.821860][ T5845] Bluetooth: hci1: command tx timeout [ 97.857601][ T5823] veth0_vlan: entered promiscuous mode [ 97.875075][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.883564][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.891739][ T5823] veth1_vlan: entered promiscuous mode [ 97.902210][ T5830] veth0_vlan: entered promiscuous mode [ 97.908387][ T5845] Bluetooth: hci3: command tx timeout [ 97.923500][ T5839] veth0_vlan: entered promiscuous mode [ 97.943473][ T5830] veth1_vlan: entered promiscuous mode [ 97.989255][ T5839] veth1_vlan: entered promiscuous mode [ 98.002101][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.014090][ T5831] veth0_macvtap: entered promiscuous mode [ 98.031911][ T5831] veth1_macvtap: entered promiscuous mode [ 98.147910][ T5830] veth0_macvtap: entered promiscuous mode [ 98.157027][ T5823] veth0_macvtap: entered promiscuous mode [ 98.181433][ T5830] veth1_macvtap: entered promiscuous mode [ 98.190650][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.211865][ T5823] veth1_macvtap: entered promiscuous mode [ 98.223278][ T5839] veth0_macvtap: entered promiscuous mode [ 98.239667][ T5839] veth1_macvtap: entered promiscuous mode [ 98.253310][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.344432][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.353961][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.477970][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.575469][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.624664][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.679916][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.691393][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.710804][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.742937][ T3535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.753643][ T3535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.780613][ T3535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.790973][ T3535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.817607][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.835234][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.908142][ T3535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.942428][ T3535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.066079][ T3535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.084631][ T3535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.125998][ T3535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.138930][ T3535] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.174824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.346573][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.364569][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.417804][ T3535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.426883][ T3535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.472683][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.481698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.503675][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.597307][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.628219][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.657771][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.679927][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.822605][ T5845] Bluetooth: hci0: command tx timeout [ 99.841219][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.866895][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.899565][ T5845] Bluetooth: hci1: command tx timeout [ 99.905342][ T5832] Bluetooth: hci4: command tx timeout [ 99.910786][ T5832] Bluetooth: hci2: command tx timeout [ 99.930139][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.937977][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.938022][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.984719][ T5826] Bluetooth: hci3: command tx timeout [ 100.026564][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.100878][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.153867][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.859809][ T5960] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.865137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.044979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.053325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.101001][ T5962] Bluetooth: MGMT ver 1.23 [ 102.154302][ T5966] syzkaller0: entered promiscuous mode [ 102.165469][ T5966] syzkaller0: entered allmulticast mode [ 102.274803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 103.180552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.190247][ T30] audit: type=1326 audit(1762874121.609:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 103.274777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.298809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.320585][ T30] audit: type=1326 audit(1762874121.609:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 103.343632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.390364][ T5976] tipc: Started in network mode [ 103.402997][ T5976] tipc: Node identity 6, cluster identity 4711 [ 103.422906][ T5976] tipc: Node number set to 6 [ 103.458786][ T30] audit: type=1326 audit(1762874121.609:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 103.614589][ T30] audit: type=1326 audit(1762874121.609:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 103.707566][ T30] audit: type=1326 audit(1762874121.659:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 103.783954][ T30] audit: type=1326 audit(1762874121.659:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 103.918814][ T5987] netlink: 'syz.1.14': attribute type 11 has an invalid length. [ 103.949066][ T30] audit: type=1326 audit(1762874121.659:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 104.667722][ T30] audit: type=1326 audit(1762874121.659:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 104.805407][ T30] audit: type=1326 audit(1762874121.659:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 104.904062][ T30] audit: type=1326 audit(1762874121.669:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e6038f6c9 code=0x7ffc0000 [ 105.554274][ T6000] syzkaller0: entered promiscuous mode [ 105.563361][ T6000] syzkaller0: entered allmulticast mode [ 105.585914][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.627238][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.790894][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 105.930218][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 106.131138][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.400154][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.713773][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.770105][ T43] usb 4-1: Product: syz [ 106.781428][ T43] usb 4-1: Manufacturer: syz [ 107.002389][ T43] usb 4-1: SerialNumber: syz [ 107.770889][ T43] usb 4-1: config 0 descriptor?? [ 108.018939][ T43] usb 4-1: can't set config #0, error -71 [ 108.706053][ T43] usb 4-1: USB disconnect, device number 2 [ 120.786428][ T6104] loop3: detected capacity change from 0 to 512 [ 120.933043][ T6104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.990350][ T6104] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.051102][ T6104] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 121.140281][ T6104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.154218][ T6099] loop0: detected capacity change from 0 to 32768 [ 121.166760][ T6099] btrfs: Unknown parameter 'check_int_print_mask' [ 122.602240][ T6122] netlink: 'syz.2.49': attribute type 12 has an invalid length. [ 124.955030][ T6147] syz_tun: entered allmulticast mode [ 125.453744][ T6147] dvmrp1: entered allmulticast mode [ 125.530876][ T6145] syz_tun: left allmulticast mode [ 125.695492][ T6157] tipc: Started in network mode [ 125.700514][ T6157] tipc: Node identity 2a47219c762e, cluster identity 4711 [ 125.720082][ T6157] tipc: Enabled bearer , priority 0 [ 125.784947][ T6155] syzkaller0: entered promiscuous mode [ 125.790472][ T6155] syzkaller0: entered allmulticast mode [ 126.505561][ T6155] tipc: Resetting bearer [ 126.755069][ T6153] tipc: Resetting bearer [ 126.774664][ T10] tipc: Node number set to 1550393756 [ 128.004638][ T6153] tipc: Disabling bearer [ 129.637924][ T6197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.650722][ T5945] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.418300][ T5945] usb 2-1: Using ep0 maxpacket: 8 [ 130.431997][ T5945] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.458276][ T5945] usb 2-1: config 179 has no interface number 0 [ 130.465135][ T5945] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 130.527058][ T5945] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 130.549147][ T5945] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.560631][ T5945] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 130.611730][ T5945] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.635351][ T5945] usb 2-1: config 179 interface 65 has no altsetting 0 [ 130.643469][ T5945] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 130.653954][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.011089][ T6214] netlink: 44 bytes leftover after parsing attributes in process `syz.3.73'. [ 131.927705][ T5945] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 132.014928][ T6194] loop1: detected capacity change from 0 to 256 [ 132.022201][ T6194] exfat: Unknown parameter '' [ 132.214820][ T5945] usb 2-1: USB disconnect, device number 2 [ 133.399840][ T6215] syz.2.74 (6215): drop_caches: 2 [ 133.899258][ T6231] Zero length message leads to an empty skb [ 136.045243][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 136.298363][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.334535][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.342588][ T10] usb 1-1: Product: syz [ 136.375812][ T10] usb 1-1: Manufacturer: syz [ 136.380472][ T10] usb 1-1: SerialNumber: syz [ 136.416946][ T10] usb 1-1: config 0 descriptor?? [ 136.580396][ T6260] netlink: 'syz.4.89': attribute type 2 has an invalid length. [ 136.687676][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.734707][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 138.095798][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.559990][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 138.844551][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.044090][ T10] usb 1-1: USB disconnect, device number 2 [ 139.190064][ T6276] tipc: Enabling of bearer rejected, failed to enable media [ 141.370007][ T6294] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.384096][ T6295] loop0: detected capacity change from 0 to 512 [ 141.405605][ T6295] ext4: Bad value for 'barrier' [ 143.146527][ T6308] netlink: 'syz.0.97': attribute type 29 has an invalid length. [ 143.278548][ T6308] netlink: 'syz.0.97': attribute type 29 has an invalid length. [ 143.677878][ T6315] loop1: detected capacity change from 0 to 128 [ 144.115588][ T6315] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 144.715576][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 144.715595][ T30] audit: type=1800 audit(1762874163.129:21): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="bus" dev="loop1" ino=1048605 res=0 errno=0 [ 144.752578][ T6315] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 144.774609][ T6315] FAT-fs (loop1): Filesystem has been set read-only [ 146.011770][ T6315] loop1: detected capacity change from 128 to 0 [ 146.031899][ C0] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.042388][ T6332] FAT-fs (loop1): bread failed in fat_clusters_flush [ 151.608451][ T6367] loop0: detected capacity change from 0 to 64 [ 155.412996][ T6386] loop2: detected capacity change from 0 to 32768 [ 155.503555][ T6386] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.393146][ T6386] XFS (loop2): Ending clean mount [ 156.405293][ T6386] XFS (loop2): Quotacheck needed: Please wait. [ 156.588095][ T6386] XFS (loop2): Quotacheck: Done. [ 157.644988][ T5831] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.826258][ T6448] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.612996][ T30] audit: type=1326 audit(1762874181.029:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 162.842738][ T30] audit: type=1326 audit(1762874181.029:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 162.865821][ T30] audit: type=1326 audit(1762874181.029:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 162.953527][ T30] audit: type=1326 audit(1762874181.029:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 163.531488][ T6458] mkiss: ax0: crc mode is auto. [ 163.846412][ T30] audit: type=1326 audit(1762874181.059:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 164.324512][ T30] audit: type=1326 audit(1762874181.059:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 164.459207][ T6470] capability: warning: `syz.4.142' uses deprecated v2 capabilities in a way that may be insecure [ 164.899452][ T30] audit: type=1326 audit(1762874181.059:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 164.925182][ T30] audit: type=1326 audit(1762874181.059:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 164.954260][ T30] audit: type=1326 audit(1762874181.059:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 165.906833][ T30] audit: type=1326 audit(1762874181.109:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa6fcf8f6c9 code=0x7ffc0000 [ 166.672449][ T6476] team0: Port device vxlan0 added [ 167.039494][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.254254][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.311398][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.334608][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 167.364922][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.545214][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 167.560832][ T43] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 167.580986][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.615128][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.653596][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.688700][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.727898][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.786235][ T43] usbtmc 3-1:16.0: bulk endpoints not found [ 169.888486][ T6519] loop0: detected capacity change from 0 to 164 [ 171.721179][ T10] usb 3-1: USB disconnect, device number 2 [ 171.754670][ T6524] rock: directory entry would overflow storage [ 171.761178][ T6524] rock: sig=0x4f50, size=4, remaining=3 [ 171.786242][ T6524] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 176.265259][ T6575] netlink: 'syz.1.167': attribute type 33 has an invalid length. [ 176.447561][ T6575] netlink: 51 bytes leftover after parsing attributes in process `syz.1.167'. [ 178.877215][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 178.919912][ T6612] tipc: Enabled bearer , priority 0 [ 180.080727][ T6617] syzkaller0: entered promiscuous mode [ 180.091075][ T6617] syzkaller0: entered allmulticast mode [ 180.208511][ T6619] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 180.230838][ T6622] tipc: Resetting bearer [ 180.254735][ T6611] tipc: Resetting bearer [ 180.322135][ T6611] tipc: Disabling bearer [ 180.461526][ T6624] syzkaller0: entered promiscuous mode [ 180.467212][ T6624] syzkaller0: entered allmulticast mode [ 185.263128][ T6663] @: renamed from veth0_vlan (while UP) [ 186.510087][ T6680] loop2: detected capacity change from 0 to 128 [ 186.537456][ T6679] tipc: Enabling of bearer rejected, failed to enable media [ 186.567574][ T6680] ======================================================= [ 186.567574][ T6680] WARNING: The mand mount option has been deprecated and [ 186.567574][ T6680] and is ignored by this kernel. Remove the mand [ 186.567574][ T6680] option from the mount to silence this warning. [ 186.567574][ T6680] ======================================================= [ 187.347352][ T6680] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 188.159866][ T6680] hpfs: filesystem error: improperly stopped [ 188.210065][ T6680] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 188.344616][ T6680] hpfs: You really don't want any checks? You are crazy... [ 188.424940][ T6680] hpfs: hpfs_map_sector(): read error [ 188.430379][ T6680] hpfs: code page support is disabled [ 189.553056][ T6680] hpfs: hpfs_map_4sectors(): unaligned read [ 189.565816][ T6680] hpfs: hpfs_map_4sectors(): unaligned read [ 189.645436][ T6680] hpfs: filesystem error: unable to find root dir [ 194.522475][ T6764] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6764] [ 199.634982][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.641355][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.605514][ T10] IPVS: starting estimator thread 0... [ 201.046128][ T6817] IPVS: using max 27 ests per chain, 64800 per kthread [ 202.690334][ T5826] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 203.535609][ T6840] netlink: 176 bytes leftover after parsing attributes in process `syz.3.221'. [ 206.604224][ T6870] bridge0: port 3(gretap0) entered blocking state [ 206.616986][ T6870] bridge0: port 3(gretap0) entered disabled state [ 206.629995][ T6870] gretap0: entered allmulticast mode [ 206.645539][ T6870] gretap0: entered promiscuous mode [ 206.661941][ T6870] bridge0: port 3(gretap0) entered blocking state [ 206.668891][ T6870] bridge0: port 3(gretap0) entered forwarding state [ 208.923434][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 209.950987][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 211.214911][ T6887] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 211.256996][ T6888] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 211.561275][ T6888] bond1 (unregistering): Released all slaves [ 212.599624][ T6898] tipc: Enabled bearer , priority 0 [ 212.806197][ T6898] syzkaller0: entered promiscuous mode [ 212.812012][ T6898] syzkaller0: entered allmulticast mode [ 214.619092][ T6906] tipc: Resetting bearer [ 215.054621][ T6897] tipc: Resetting bearer [ 215.135036][ T6897] tipc: Disabling bearer [ 215.487101][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 215.498250][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 215.498281][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.498296][ T52] Workqueue: hci4 hci_rx_work [ 215.498339][ T52] Call Trace: [ 215.498348][ T52] [ 215.498358][ T52] dump_stack_lvl+0x189/0x250 [ 215.498418][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.498454][ T52] ? __pfx__printk+0x10/0x10 [ 215.498488][ T52] ? kernfs_path_from_node+0x250/0x290 [ 215.498516][ T52] ? kernfs_path_from_node+0x2f/0x290 [ 215.498549][ T52] sysfs_create_dir_ns+0x259/0x280 [ 215.498580][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 215.498610][ T52] ? do_raw_spin_unlock+0x122/0x240 [ 215.498640][ T52] kobject_add_internal+0x59f/0xb70 [ 215.498677][ T52] kobject_add+0x155/0x220 [ 215.498708][ T52] ? __pfx_kobject_add+0x10/0x10 [ 215.498731][ T52] ? _raw_spin_unlock+0x28/0x50 [ 215.498764][ T52] ? get_device_parent+0x366/0x3a0 [ 215.498793][ T52] device_add+0x408/0xb80 [ 215.498821][ T52] hci_conn_add_sysfs+0xd5/0x210 [ 215.498858][ T52] le_conn_complete_evt+0xf26/0x14d0 [ 215.498903][ T52] ? hci_event_packet+0x4ab/0x1260 [ 215.498928][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 215.498961][ T52] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 215.498982][ T52] ? __asan_memcpy+0x40/0x70 [ 215.499024][ T52] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.499045][ T52] ? skb_pull_data+0xfb/0x200 [ 215.499074][ T52] hci_le_conn_complete_evt+0x187/0x480 [ 215.499120][ T52] hci_event_packet+0x78f/0x1260 [ 215.499148][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 215.499182][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 215.499211][ T52] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.499251][ T52] ? hci_send_to_monitor+0xe2/0x590 [ 215.499288][ T52] hci_rx_work+0x45d/0xfc0 [ 215.499328][ T52] ? process_one_work+0x868/0x15e0 [ 215.499357][ T52] process_one_work+0x93a/0x15e0 [ 215.499385][ T52] ? __lock_acquire+0xab9/0xd20 [ 215.499439][ T52] ? __pfx_process_one_work+0x10/0x10 [ 215.499479][ T52] ? assign_work+0x3a1/0x410 [ 215.499515][ T52] worker_thread+0x9b0/0xee0 [ 215.499578][ T52] kthread+0x711/0x8a0 [ 215.499604][ T52] ? __pfx_worker_thread+0x10/0x10 [ 215.499634][ T52] ? __pfx_kthread+0x10/0x10 [ 215.499658][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.499691][ T52] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.499724][ T52] ? __pfx_kthread+0x10/0x10 [ 215.499747][ T52] ret_from_fork+0x599/0xb30 [ 215.499779][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 215.499821][ T52] ? __switch_to_asm+0x39/0x70 [ 215.499850][ T52] ? __switch_to_asm+0x33/0x70 [ 215.499871][ T52] ? __pfx_kthread+0x10/0x10 [ 215.499894][ T52] ret_from_fork_asm+0x1a/0x30 [ 215.499939][ T52] [ 215.500089][ T52] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 215.791233][ T52] Bluetooth: hci4: failed to register connection device [ 217.077094][ T6933] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 217.085701][ T6933] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 217.094240][ T6933] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 217.326641][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 217.333296][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 217.339611][ T5145] Bluetooth: hci0: command 0x0406 tx timeout [ 217.346660][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 217.359241][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 219.415042][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 222.740213][ T6976] netlink: 104 bytes leftover after parsing attributes in process `syz.1.259'. [ 224.389012][ T6986] vet0_virt: renamed from dummy0 (while UP) [ 224.491553][ T6989] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 224.499464][ T6989] netlink: 17 bytes leftover after parsing attributes in process `syz.0.261'. [ 231.471735][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 231.600349][ T7022] team_slave_0: entered promiscuous mode [ 231.606326][ T7022] team_slave_1: entered promiscuous mode [ 231.613415][ T7022] macvtap1: entered promiscuous mode [ 231.619359][ T7022] team0: entered promiscuous mode [ 231.640294][ T7022] macvtap1: entered allmulticast mode [ 231.814650][ T7022] team0: entered allmulticast mode [ 231.855870][ T7022] team_slave_0: entered allmulticast mode [ 231.862085][ T7022] team_slave_1: entered allmulticast mode [ 231.876790][ T7022] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 231.965032][ T7030] team0: left allmulticast mode [ 231.999757][ T7030] team_slave_0: left allmulticast mode [ 232.030163][ T7030] team_slave_1: left allmulticast mode [ 232.053581][ T7030] team0: left promiscuous mode [ 232.061977][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 232.061995][ T30] audit: type=1326 audit(1762874250.479:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 232.099628][ T7030] team_slave_0: left promiscuous mode [ 232.105393][ T7030] team_slave_1: left promiscuous mode [ 232.150329][ T30] audit: type=1326 audit(1762874250.479:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 232.229277][ T30] audit: type=1326 audit(1762874250.489:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 232.298295][ T30] audit: type=1326 audit(1762874250.489:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 232.399017][ T30] audit: type=1326 audit(1762874250.489:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 232.567621][ T7047] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 233.340404][ T30] audit: type=1326 audit(1762874250.489:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 233.418163][ T30] audit: type=1326 audit(1762874250.489:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 233.951825][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'. [ 233.962250][ T7049] netlink: 60 bytes leftover after parsing attributes in process `syz.4.279'. [ 233.971365][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'. [ 233.981383][ T7049] netlink: 60 bytes leftover after parsing attributes in process `syz.4.279'. [ 233.990305][ T7049] netlink: 104 bytes leftover after parsing attributes in process `syz.4.279'. [ 234.075606][ T30] audit: type=1326 audit(1762874250.489:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 234.328168][ T30] audit: type=1326 audit(1762874250.489:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 234.350967][ T30] audit: type=1326 audit(1762874250.489:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301758f6c9 code=0x7ffc0000 [ 235.642445][ T7073] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 235.649631][ T7073] overlayfs: failed to set xattr on upper [ 235.655484][ T7073] overlayfs: ...falling back to redirect_dir=nofollow. [ 235.662352][ T7073] overlayfs: ...falling back to index=off. [ 235.668196][ T7073] overlayfs: ...falling back to uuid=null. [ 235.937446][ T7079] loop2: detected capacity change from 0 to 8 [ 235.980619][ T7079] SQUASHFS error: Failed to read block 0x62: -5 [ 236.190841][ T7081] 9p: Bad value for 'rfdno' [ 236.206356][ T7079] squashfs image failed sanity check [ 237.205130][ T7091] netlink: zone id is out of range [ 237.210306][ T7091] netlink: zone id is out of range [ 237.215581][ T7091] netlink: zone id is out of range [ 237.220693][ T7091] netlink: zone id is out of range [ 237.225943][ T7091] netlink: zone id is out of range [ 237.231046][ T7091] netlink: zone id is out of range [ 237.236443][ T7091] netlink: zone id is out of range [ 237.242655][ T7091] netlink: zone id is out of range [ 237.247831][ T7091] netlink: zone id is out of range [ 237.252957][ T7091] netlink: zone id is out of range [ 239.488745][ T7104] Illegal XDP return value 1839469056 on prog (id 63) dev N/A, expect packet loss! [ 239.523125][ T7109] warning: `syz.3.298' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 240.787798][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 240.788101][ T30] audit: type=1326 audit(1762874259.199:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.2.300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f301758f6c9 code=0x0 [ 241.074459][ T30] audit: type=1326 audit(1762874259.489:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.3.303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e6038f6c9 code=0x0 [ 241.303464][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 241.322904][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 242.937583][ T6072] wlan1: Trigger new scan to find an IBSS to join [ 243.114355][ T7140] tipc: Enabling of bearer rejected, failed to enable media [ 244.872148][ T7170] netlink: 'syz.4.316': attribute type 4 has an invalid length. [ 247.016158][ T5973] wlan1: Trigger new scan to find an IBSS to join [ 247.455973][ T5829] Bluetooth: Fragment is too long (len 14, expected 2) [ 247.469624][ T7193] fuse: Bad value for 'fd' [ 249.330829][ T3535] wlan1: Creating new IBSS network, BSSID 82:25:51:2d:e2:42 [ 249.420655][ T7205] tipc: Enabled bearer , priority 0 [ 249.455926][ T7205] syzkaller0: entered promiscuous mode [ 249.471701][ T7205] syzkaller0: entered allmulticast mode [ 249.560504][ T7205] tipc: Resetting bearer [ 249.584523][ T7203] tipc: Resetting bearer [ 249.612978][ T7203] tipc: Disabling bearer [ 249.645715][ T7188] process 'syz.4.319' launched '/dev/fd/3' with NULL argv: empty string added [ 252.268782][ T30] audit: type=1326 audit(1762874270.679:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 252.984501][ T30] audit: type=1326 audit(1762874270.679:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 253.046607][ T30] audit: type=1326 audit(1762874270.679:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 254.217160][ T30] audit: type=1326 audit(1762874270.679:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 254.738882][ T30] audit: type=1326 audit(1762874270.679:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 254.765046][ T30] audit: type=1326 audit(1762874270.679:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 254.844666][ T30] audit: type=1326 audit(1762874270.679:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 254.909608][ T30] audit: type=1326 audit(1762874270.679:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 255.114810][ T30] audit: type=1326 audit(1762874270.679:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 255.144553][ T30] audit: type=1326 audit(1762874270.679:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 256.470251][ T7261] tipc: Enabling of bearer rejected, failed to enable media [ 258.284709][ T7275] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 258.839674][ T7285] veth3: entered promiscuous mode [ 258.852104][ T7285] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 259.652878][ T7278] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 259.710175][ T7281] tipc: Enabling of bearer rejected, failed to enable media [ 259.770876][ T6071] net_ratelimit: 28 callbacks suppressed [ 259.770898][ T6071] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 259.791941][ T7279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.916175][ T6071] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 260.965134][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.971586][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.427655][ T7313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.967239][ T7316] overlayfs: failed to clone upperpath [ 266.638947][ T7357] IPv6: Can't replace route, no match found [ 267.078960][ T7359] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.724579][ T7377] netlink: 'syz.0.366': attribute type 7 has an invalid length. [ 271.549478][ T7392] loop0: detected capacity change from 0 to 8 [ 273.438538][ T7403] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 273.445549][ T7403] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 275.186228][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 275.186273][ T30] audit: type=1326 audit(1762874293.599:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 276.243768][ T30] audit: type=1326 audit(1762874293.599:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 276.334463][ T30] audit: type=1326 audit(1762874293.599:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 276.413628][ T7424] loop2: detected capacity change from 0 to 512 [ 276.444552][ T30] audit: type=1326 audit(1762874293.599:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 276.525558][ T30] audit: type=1326 audit(1762874293.599:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 276.542941][ T7424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.549628][ T30] audit: type=1326 audit(1762874293.609:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 276.594553][ T30] audit: type=1326 audit(1762874293.669:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 276.617300][ T30] audit: type=1326 audit(1762874293.669:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 276.686483][ T7424] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.835892][ T30] audit: type=1326 audit(1762874293.719:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 276.858730][ T30] audit: type=1326 audit(1762874293.719:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 277.011110][ T7431] overlayfs: failed to resolve './file0': -2 [ 279.339539][ T6731] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 279.365961][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.384'. [ 280.284792][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.302584][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 280.521637][ T7456] syz.3.389 uses obsolete (PF_INET,SOCK_PACKET) [ 286.536360][ T7517] capability: warning: `syz.4.401' uses 32-bit capabilities (legacy support in use) [ 288.114594][ T7524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.828310][ T7541] loop2: detected capacity change from 0 to 256 [ 289.904309][ T7541] FAT-fs (loop2): Directory bread(block 64) failed [ 289.931030][ T7541] FAT-fs (loop2): Directory bread(block 65) failed [ 289.937688][ T7541] FAT-fs (loop2): Directory bread(block 66) failed [ 289.983668][ T7541] FAT-fs (loop2): Directory bread(block 67) failed [ 290.015291][ T7541] FAT-fs (loop2): Directory bread(block 68) failed [ 290.102764][ T7541] FAT-fs (loop2): Directory bread(block 69) failed [ 290.110256][ T7541] FAT-fs (loop2): Directory bread(block 70) failed [ 290.124143][ T7541] FAT-fs (loop2): Directory bread(block 71) failed [ 290.146152][ T7541] FAT-fs (loop2): Directory bread(block 72) failed [ 290.152877][ T7541] FAT-fs (loop2): Directory bread(block 73) failed [ 294.420476][ T7575] openvswitch: netlink: Flow key attr not present in new flow. [ 296.542075][ T7591] loop2: detected capacity change from 0 to 32768 [ 296.569052][ T7591] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.422 (7591) [ 296.623504][ T5906] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 296.640802][ T7591] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 296.651298][ T7591] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 296.873139][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 296.964015][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.995297][ T5906] usb 1-1: Product: syz [ 297.137898][ T7591] BTRFS info (device loop2): enabling ssd optimizations [ 297.145190][ T7591] BTRFS info (device loop2): turning on async discard [ 297.152139][ T7591] BTRFS info (device loop2): enabling free space tree [ 297.304778][ T5906] usb 1-1: Manufacturer: syz [ 297.574559][ T5906] usb 1-1: SerialNumber: syz [ 297.583320][ T5906] usb 1-1: config 0 descriptor?? [ 298.065631][ T5906] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 299.812653][ T7625] tipc: Enabling of bearer rejected, failed to enable media [ 299.849758][ T5906] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 300.668213][ T5906] usb 1-1: USB disconnect, device number 3 [ 301.020056][ T5831] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.015356][ T7650] loop0: detected capacity change from 0 to 2048 [ 303.568069][ T7650] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 303.851445][ T7650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.554700][ T7667] mmap: syz.4.438 (7667) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 307.268396][ T7679] loop0: detected capacity change from 0 to 512 [ 307.319891][ T7679] ext4: Unknown parameter 'nouser_xattr' [ 308.510535][ T7694] infiniband syz2: set active [ 308.515461][ T7694] infiniband syz2: added veth1_to_team [ 308.525285][ T7694] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 308.528223][ T7694] infiniband syz2: Couldn't open port 1 [ 308.561059][ T7694] RDS/IB: syz2: added [ 308.565457][ T7694] smc: adding ib device syz2 with port count 1 [ 308.571768][ T7694] smc: ib device syz2 port 1 has no pnetid [ 313.830118][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.512309][ T7806] loop2: detected capacity change from 0 to 512 [ 324.747652][ T7806] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.472: inode has both inline data and extents flags [ 325.076449][ T7806] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.472: couldn't read orphan inode 15 (err -117) [ 325.091042][ T7816] netlink: 'syz.0.474': attribute type 2 has an invalid length. [ 325.776459][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.790567][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.912164][ T7806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.396395][ T7828] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 326.831233][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.131648][ T7835] loop2: detected capacity change from 0 to 128 [ 328.139475][ T7835] vfat: Unknown parameter 'C9:*&' [ 331.589718][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 331.702290][ T7868] sctp: [Deprecated]: syz.1.488 (pid 7868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.702290][ T7868] Use struct sctp_sack_info instead [ 332.837464][ T7876] overlayfs: failed to clone upperpath [ 333.203758][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'. [ 339.512295][ T7933] loop0: detected capacity change from 0 to 2048 [ 339.670719][ T7933] EXT4-fs: inline encryption not supported [ 340.770167][ T7933] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.859769][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 341.909332][ T7949] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.507: bg 0: block 120: padding at end of block bitmap is not set [ 342.286080][ T7949] EXT4-fs (loop0): Remounting filesystem read-only [ 342.293114][ T7949] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 343.019526][ T5822] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 345.573684][ T5906] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 346.349023][ T5906] usb 1-1: device descriptor read/64, error -71 [ 346.883290][ T5906] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 348.012420][ T5906] usb 1-1: device descriptor read/64, error -71 [ 348.070600][ T7994] netlink: 5 bytes leftover after parsing attributes in process `syz.3.521'. [ 348.079664][ T7994] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 348.646291][ T5906] usb usb1-port1: attempt power cycle [ 350.729895][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.387624][ T8042] No such timeout policy "syz1" [ 363.726858][ T8076] loop0: detected capacity change from 0 to 4096 [ 364.119485][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 364.119504][ T30] audit: type=1326 audit(1762874376.419:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8080 comm="syz.2.541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f301758f6c9 code=0x0 [ 367.743973][ T8129] netlink: 'syz.0.552': attribute type 5 has an invalid length. [ 368.754641][ T8133] macsec1: entered allmulticast mode [ 368.760250][ T8133] macvlan1: entered allmulticast mode [ 368.765810][ T8133] veth1_vlan: entered allmulticast mode [ 376.229104][ T8190] ip6t_REJECT: ECHOREPLY is not supported [ 376.815143][ T30] audit: type=1326 audit(1762874388.086:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 377.029232][ T30] audit: type=1326 audit(1762874388.086:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 377.249326][ T30] audit: type=1326 audit(1762874388.095:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 377.726421][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 377.751532][ T30] audit: type=1326 audit(1762874388.095:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 377.941048][ T30] audit: type=1326 audit(1762874388.095:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 377.964518][ T30] audit: type=1326 audit(1762874388.095:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 377.989162][ T30] audit: type=1326 audit(1762874388.095:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 378.160966][ T30] audit: type=1326 audit(1762874388.095:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac278f6c9 code=0x7ffc0000 [ 378.198258][ T8207] 9p: Bad value for 'wfdno' [ 383.469580][ T8240] overlayfs: failed to clone upperpath [ 386.248724][ T6074] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 388.200640][ T8274] xt_TCPMSS: Only works on TCP SYN packets [ 392.594835][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.601200][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.417733][ T8330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.662188][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.674452][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.683002][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.925575][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.933548][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.941541][ T8349] loop0: detected capacity change from 0 to 1024 [ 400.835053][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.372438][ T5841] Bluetooth: hci5: command tx timeout [ 401.703975][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.703588][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.696573][ T5841] Bluetooth: hci5: command tx timeout [ 403.828515][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.492586][ T8392] bond1: entered promiscuous mode [ 405.608581][ T6074] gretap0: left allmulticast mode [ 405.745534][ T6074] gretap0: left promiscuous mode [ 405.919743][ T6074] bridge0: port 3(gretap0) entered disabled state [ 405.953062][ T5841] Bluetooth: hci5: command tx timeout [ 406.376184][ T6074] bridge_slave_1: left allmulticast mode [ 406.412368][ T6074] bridge_slave_1: left promiscuous mode [ 406.585758][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.407079][ T6074] bridge_slave_0: left allmulticast mode [ 407.412838][ T6074] bridge_slave_0: left promiscuous mode [ 407.480544][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.255227][ T5841] Bluetooth: hci5: command tx timeout [ 410.552884][ T6074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.184518][ T6074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.230095][ T6074] bond0 (unregistering): Released all slaves [ 411.394573][ T8435] veth0_to_team: entered promiscuous mode [ 411.909884][ T6074] tipc: Left network mode [ 416.426034][ T8337] chnl_net:caif_netlink_parms(): no params data found [ 416.845483][ T8503] loop0: detected capacity change from 0 to 16 [ 417.034578][ T8503] erofs (device loop0): too large lz4 pclusterblks 16832 [ 420.454326][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.500407][ T8528] batadv_slave_0: entered promiscuous mode [ 421.511184][ T6721] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 421.533891][ T30] audit: type=1804 audit(1762874429.418:200): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.638" name="/newroot/108/file0" dev="tmpfs" ino=577 res=1 errno=0 [ 421.583862][ T6074] hsr_slave_0: left promiscuous mode [ 421.607198][ T6074] hsr_slave_1: left promiscuous mode [ 421.629034][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.645034][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.673408][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.691841][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.763888][ T6074] veth1_macvtap: left promiscuous mode [ 421.776743][ T6074] veth0_macvtap: left promiscuous mode [ 421.794448][ T6074] veth1_vlan: left promiscuous mode [ 421.806895][ T6074] veth0_vlan: left promiscuous mode [ 422.436693][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 427.191199][ T8587] overlayfs: failed to clone lowerpath [ 427.803678][ T8588] overlayfs: failed to clone lowerpath [ 427.924060][ T8589] overlayfs: failed to clone upperpath [ 428.086594][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 432.562071][ T8614] 9pnet_fd: p9_fd_create_tcp (8614): problem connecting socket to 127.0.0.1 [ 432.886392][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.660'. [ 433.017730][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 433.081901][ T30] audit: type=1326 audit(1762874440.060:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 433.818382][ T30] audit: type=1326 audit(1762874440.060:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 433.894263][ T30] audit: type=1326 audit(1762874440.069:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 433.948384][ T30] audit: type=1326 audit(1762874440.069:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 434.000528][ T30] audit: type=1326 audit(1762874440.069:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 434.267486][ T30] audit: type=1326 audit(1762874440.069:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 434.290615][ T30] audit: type=1326 audit(1762874440.097:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 434.313889][ T30] audit: type=1326 audit(1762874440.097:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 434.336443][ T30] audit: type=1326 audit(1762874440.235:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 434.360211][ T30] audit: type=1326 audit(1762874440.577:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 435.079612][ T6074] team0 (unregistering): Port device team_slave_1 removed [ 435.152641][ T6072] smc: removing ib device syz2 [ 435.187221][ T6074] team0 (unregistering): Port device team_slave_0 removed [ 436.672445][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.682069][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.690300][ T8337] bridge_slave_0: entered allmulticast mode [ 436.698414][ T8337] bridge_slave_0: entered promiscuous mode [ 436.709204][ T5951] syz2: Port: 1 Link DOWN [ 436.735875][ T8641] netlink: 'syz.1.662': attribute type 12 has an invalid length. [ 436.743980][ T8641] netlink: 'syz.1.662': attribute type 29 has an invalid length. [ 436.752294][ T8641] netlink: 148 bytes leftover after parsing attributes in process `syz.1.662'. [ 436.854836][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.862754][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.101207][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.116435][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.176456][ T8643] veth1_vlan: left allmulticast mode [ 438.040530][ T8643] macvlan1: left allmulticast mode [ 438.192394][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.226378][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.514425][ T8337] bridge_slave_1: entered allmulticast mode [ 438.928361][ T8337] bridge_slave_1: entered promiscuous mode [ 439.122980][ T8657] overlayfs: failed to clone upperpath [ 440.044519][ T5973] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.097817][ T5973] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.667142][ T8337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.687163][ T6731] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.034985][ T5973] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.629894][ T8337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.368239][ T8690] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 444.381961][ T8690] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 444.392725][ T8690] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 444.528607][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 444.528626][ T30] audit: type=1800 audit(1762874450.490:230): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.674" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 444.923004][ T8337] team0: Port device team_slave_0 added [ 445.746969][ T8337] team0: Port device team_slave_1 added [ 450.466674][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.490580][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.737373][ T8337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.765361][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.772369][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.399343][ T8337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.524389][ T8768] loop0: detected capacity change from 0 to 2048 [ 453.849874][ T8768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 453.893614][ T8768] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 454.224881][ T8337] hsr_slave_0: entered promiscuous mode [ 454.389288][ T8337] hsr_slave_1: entered promiscuous mode [ 454.396554][ T8768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 454.406834][ T8337] debugfs: 'hsr0' already exists in 'hsr' [ 454.428665][ T8337] Cannot create hsr debugfs directory [ 454.856092][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 454.973533][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.981147][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.259620][ T8798] libceph: resolve '0..' (ret=-3): failed [ 456.191807][ T8337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 456.276505][ T8337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 456.408884][ T8337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 456.491116][ T8337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.084653][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.657109][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.663512][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.762389][ T8337] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.777813][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.785196][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.810740][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.818050][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.803742][ T30] audit: type=1326 audit(1762874465.996:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 462.122428][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.908562][ T30] audit: type=1326 audit(1762874465.996:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 462.921004][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 463.010280][ T30] audit: type=1326 audit(1762874466.005:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 463.055604][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 463.092902][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 463.339089][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.386884][ T30] audit: type=1326 audit(1762874466.005:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 465.531223][ T30] audit: type=1326 audit(1762874466.005:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 465.553527][ T30] audit: type=1326 audit(1762874466.024:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f722e58df10 code=0x7ffc0000 [ 466.843935][ T5841] Bluetooth: hci3: command tx timeout [ 466.985656][ T30] audit: type=1326 audit(1762874466.024:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 467.045402][ T30] audit: type=1326 audit(1762874466.033:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e58f6c9 code=0x7ffc0000 [ 467.890795][ T8873] chnl_net:caif_netlink_parms(): no params data found [ 469.065746][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 469.129725][ T5841] Bluetooth: hci3: command tx timeout [ 469.903658][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.919984][ T8953] netlink: 'syz.3.713': attribute type 4 has an invalid length. [ 469.942525][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.949794][ T8873] bridge_slave_0: entered allmulticast mode [ 470.060772][ T8954] netlink: 'syz.3.713': attribute type 10 has an invalid length. [ 470.068551][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.713'. [ 470.083673][ T8873] bridge_slave_0: entered promiscuous mode [ 470.140384][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.152870][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.172371][ T8873] bridge_slave_1: entered allmulticast mode [ 471.334644][ T8873] bridge_slave_1: entered promiscuous mode [ 471.392443][ T5841] Bluetooth: hci3: command tx timeout [ 471.455545][ T8954] team0: entered promiscuous mode [ 471.565749][ T8954] team_slave_0: entered promiscuous mode [ 471.585279][ T8954] team_slave_1: entered promiscuous mode [ 471.609629][ T8954] team0: entered allmulticast mode [ 471.614780][ T8954] team_slave_0: entered allmulticast mode [ 471.642717][ T8954] team_slave_1: entered allmulticast mode [ 471.697970][ T8954] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.705239][ T8954] bridge0: port 3(team0) entered blocking state [ 471.755769][ T8954] bridge0: port 3(team0) entered disabled state [ 471.788685][ T8954] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 472.064620][ T8961] loop0: detected capacity change from 0 to 256 [ 472.191621][ T8961] FAT-fs (loop0): Directory bread(block 64) failed [ 472.198585][ T8961] FAT-fs (loop0): Directory bread(block 65) failed [ 472.220551][ T8961] FAT-fs (loop0): Directory bread(block 66) failed [ 472.247676][ T8961] FAT-fs (loop0): Directory bread(block 67) failed [ 472.272883][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.301772][ T8961] FAT-fs (loop0): Directory bread(block 68) failed [ 472.463904][ T8961] FAT-fs (loop0): Directory bread(block 69) failed [ 472.470997][ T8961] FAT-fs (loop0): Directory bread(block 70) failed [ 472.478435][ T8961] FAT-fs (loop0): Directory bread(block 71) failed [ 472.485126][ T8961] FAT-fs (loop0): Directory bread(block 72) failed [ 472.605095][ T8961] FAT-fs (loop0): Directory bread(block 73) failed [ 472.893081][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.717787][ T5841] Bluetooth: hci3: command tx timeout [ 474.925909][ T8873] team0: Port device team_slave_0 added [ 475.546657][ T8873] team0: Port device team_slave_1 added [ 475.568724][ T8977] netlink: 36 bytes leftover after parsing attributes in process `syz.4.719'. [ 476.055760][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.106454][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.459337][ T8873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.484104][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.491417][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.519098][ T8873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.029035][ T8873] hsr_slave_0: entered promiscuous mode [ 480.040536][ T8873] hsr_slave_1: entered promiscuous mode [ 480.055596][ T8873] debugfs: 'hsr0' already exists in 'hsr' [ 480.077362][ T8873] Cannot create hsr debugfs directory [ 481.705743][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 485.613404][ T5961] bridge_slave_1: left allmulticast mode [ 485.620780][ T5961] bridge_slave_1: left promiscuous mode [ 485.628927][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.849159][ T5961] bridge_slave_0: left allmulticast mode [ 485.947881][ T5961] bridge_slave_0: left promiscuous mode [ 485.974705][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.541806][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.562994][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.576873][ T5961] bond0 (unregistering): Released all slaves [ 487.749222][ T5961] hsr_slave_0: left promiscuous mode [ 487.758410][ T5961] hsr_slave_1: left promiscuous mode [ 487.765812][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.790714][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.541613][ T9077] gfs2: error -5 reading superblock [ 489.432122][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 489.567427][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 489.591650][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 489.629583][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 490.145738][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 492.367009][ T5841] Bluetooth: hci5: command tx timeout [ 492.376543][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 492.435585][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 493.982793][ T9120] loop0: detected capacity change from 0 to 2048 [ 494.356056][ T9121] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.592541][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.600033][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.620352][ T5841] Bluetooth: hci5: command tx timeout [ 495.395751][ T9106] batadv_slave_0: left promiscuous mode [ 495.419096][ T9106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.868719][ T1142] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.895749][ T1142] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.923423][ T3535] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.940351][ T3535] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.009332][ T9142] tmpfs: Bad value for 'mpol' [ 496.038358][ T9142] futex_wake_op: syz.4.746 tries to shift op by 144; fix this program [ 496.109477][ T3535] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.191310][ T3535] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.396806][ C0] hrtimer: interrupt took 35546 ns [ 496.511140][ T3535] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.549350][ T3535] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.879251][ T5841] Bluetooth: hci5: command tx timeout [ 497.041333][ T9007] ------------[ cut here ]------------ [ 497.047181][ T9007] WARNING: ./include/linux/ns_common.h:255 at put_mnt_ns+0x152/0x190, CPU#0: syz.1.715/9007 [ 497.057354][ T9007] Modules linked in: [ 497.061345][ T9007] CPU: 0 UID: 0 PID: 9007 Comm: syz.1.715 Not tainted syzkaller #0 PREEMPT(full) [ 497.070628][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.080744][ T9007] RIP: 0010:put_mnt_ns+0x152/0x190 [ 497.085901][ T9007] Code: 79 00 00 bf 01 00 00 00 89 ee e8 c9 c0 7d ff 85 ed 7e 1f e8 80 bc 7d ff 5b 41 5e 41 5f 5d e9 55 ab 18 09 cc e8 6f bc 7d ff 90 <0f> 0b 90 e9 33 ff ff ff e8 61 bc 7d ff 4c 89 f7 be 03 00 00 00 5b [ 497.105870][ T9007] RSP: 0018:ffffc90002fa7a68 EFLAGS: 00010293 [ 497.112256][ T9007] RAX: ffffffff82436311 RBX: ffff888021716400 RCX: ffff88802f2adb80 [ 497.120305][ T9007] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 497.128448][ T9007] RBP: 00000000ffffffff R08: ffff8880217164bb R09: 1ffff110042e2c97 [ 497.136927][ T9007] R10: dffffc0000000000 R11: ffffed10042e2c98 R12: dffffc0000000000 [ 497.145326][ T9007] R13: 0000000000000000 R14: ffff8880217164b8 R15: dffffc0000000000 [ 497.153340][ T9007] FS: 0000000000000000(0000) GS:ffff888125ecc000(0000) knlGS:0000000000000000 [ 497.162614][ T9007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.169745][ T9007] CR2: 00007f9e611156c0 CR3: 00000000115fc000 CR4: 00000000003526f0 [ 497.178320][ T9007] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 497.186336][ T9007] DR3: 00000000e08ed60e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 497.194968][ T9007] Call Trace: [ 497.198782][ T9007] [ 497.201751][ T9007] free_nsproxy+0x46/0x560 [ 497.206211][ T9007] do_exit+0x6b8/0x2300 [ 497.210997][ T9007] ? do_raw_spin_lock+0x121/0x290 [ 497.216955][ T9007] ? __pfx_do_exit+0x10/0x10 [ 497.222724][ T9007] do_group_exit+0x21c/0x2d0 [ 497.227871][ T9007] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.234019][ T9007] get_signal+0x1285/0x1340 [ 497.238599][ T9007] arch_do_signal_or_restart+0x9a/0x7a0 [ 497.244708][ T9007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 497.251429][ T9007] ? exit_to_user_mode_loop+0x55/0x4f0 [ 497.257520][ T9007] exit_to_user_mode_loop+0x87/0x4f0 [ 497.262865][ T9007] ? rcu_is_watching+0x15/0xb0 [ 497.268243][ T9007] do_syscall_64+0x2e9/0xfa0 [ 497.272874][ T9007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.279325][ T9007] ? clear_bhb_loop+0x60/0xb0 [ 497.284152][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.290132][ T9007] RIP: 0033:0x7fa6fcf8f6c9 [ 497.294569][ T9007] Code: Unable to access opcode bytes at 0x7fa6fcf8f69f. [ 497.301648][ T9007] RSP: 002b:00007fa6fad91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 497.310155][ T9007] RAX: fffffffffffffffc RBX: 00007fa6fd1e6270 RCX: 00007fa6fcf8f6c9 [ 497.318191][ T9007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 497.326402][ T9007] RBP: 00007fa6fd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.334571][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.342691][ T9007] R13: 00007fa6fd1e6308 R14: 00007fa6fd1e6270 R15: 00007ffc873d6cd8 [ 497.350749][ T9007] [ 497.353833][ T9007] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 497.361120][ T9007] CPU: 0 UID: 0 PID: 9007 Comm: syz.1.715 Not tainted syzkaller #0 PREEMPT(full) [ 497.370340][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.380401][ T9007] Call Trace: [ 497.383685][ T9007] [ 497.386619][ T9007] dump_stack_lvl+0x99/0x250 [ 497.391231][ T9007] ? __asan_memcpy+0x40/0x70 [ 497.395842][ T9007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.401058][ T9007] ? __pfx__printk+0x10/0x10 [ 497.405671][ T9007] vpanic+0x237/0x6d0 [ 497.409655][ T9007] ? __pfx_vpanic+0x10/0x10 [ 497.414164][ T9007] ? is_bpf_text_address+0x292/0x2b0 [ 497.419458][ T9007] ? is_bpf_text_address+0x26/0x2b0 [ 497.424676][ T9007] panic+0xb9/0xc0 [ 497.428402][ T9007] ? __pfx_panic+0x10/0x10 [ 497.432839][ T9007] __warn+0x318/0x4d0 [ 497.436830][ T9007] ? put_mnt_ns+0x152/0x190 [ 497.441364][ T9007] ? put_mnt_ns+0x152/0x190 [ 497.445879][ T9007] report_bug+0x2be/0x4f0 [ 497.450228][ T9007] ? put_mnt_ns+0x152/0x190 [ 497.454745][ T9007] ? put_mnt_ns+0x152/0x190 [ 497.459261][ T9007] ? put_mnt_ns+0x154/0x190 [ 497.463778][ T9007] handle_bug+0x84/0x160 [ 497.468028][ T9007] exc_invalid_op+0x1a/0x50 [ 497.472553][ T9007] asm_exc_invalid_op+0x1a/0x20 [ 497.477414][ T9007] RIP: 0010:put_mnt_ns+0x152/0x190 [ 497.482540][ T9007] Code: 79 00 00 bf 01 00 00 00 89 ee e8 c9 c0 7d ff 85 ed 7e 1f e8 80 bc 7d ff 5b 41 5e 41 5f 5d e9 55 ab 18 09 cc e8 6f bc 7d ff 90 <0f> 0b 90 e9 33 ff ff ff e8 61 bc 7d ff 4c 89 f7 be 03 00 00 00 5b [ 497.502149][ T9007] RSP: 0018:ffffc90002fa7a68 EFLAGS: 00010293 [ 497.508229][ T9007] RAX: ffffffff82436311 RBX: ffff888021716400 RCX: ffff88802f2adb80 [ 497.516217][ T9007] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 497.524195][ T9007] RBP: 00000000ffffffff R08: ffff8880217164bb R09: 1ffff110042e2c97 [ 497.532173][ T9007] R10: dffffc0000000000 R11: ffffed10042e2c98 R12: dffffc0000000000 [ 497.540153][ T9007] R13: 0000000000000000 R14: ffff8880217164b8 R15: dffffc0000000000 [ 497.548138][ T9007] ? put_mnt_ns+0x151/0x190 [ 497.552676][ T9007] ? put_mnt_ns+0x151/0x190 [ 497.557192][ T9007] free_nsproxy+0x46/0x560 [ 497.561625][ T9007] do_exit+0x6b8/0x2300 [ 497.565792][ T9007] ? do_raw_spin_lock+0x121/0x290 [ 497.570859][ T9007] ? __pfx_do_exit+0x10/0x10 [ 497.575468][ T9007] do_group_exit+0x21c/0x2d0 [ 497.580070][ T9007] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.585292][ T9007] get_signal+0x1285/0x1340 [ 497.589837][ T9007] arch_do_signal_or_restart+0x9a/0x7a0 [ 497.595395][ T9007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 497.601565][ T9007] ? exit_to_user_mode_loop+0x55/0x4f0 [ 497.607037][ T9007] exit_to_user_mode_loop+0x87/0x4f0 [ 497.612337][ T9007] ? rcu_is_watching+0x15/0xb0 [ 497.617122][ T9007] do_syscall_64+0x2e9/0xfa0 [ 497.621716][ T9007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.627785][ T9007] ? clear_bhb_loop+0x60/0xb0 [ 497.632470][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.638376][ T9007] RIP: 0033:0x7fa6fcf8f6c9 [ 497.642797][ T9007] Code: Unable to access opcode bytes at 0x7fa6fcf8f69f. [ 497.649814][ T9007] RSP: 002b:00007fa6fad91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 497.658234][ T9007] RAX: fffffffffffffffc RBX: 00007fa6fd1e6270 RCX: 00007fa6fcf8f6c9 [ 497.666212][ T9007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 497.674192][ T9007] RBP: 00007fa6fd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.682165][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.690150][ T9007] R13: 00007fa6fd1e6308 R14: 00007fa6fd1e6270 R15: 00007ffc873d6cd8 [ 497.698232][ T9007] [ 497.701598][ T9007] Kernel Offset: disabled [ 497.705928][ T9007] Rebooting in 86400 seconds..