last executing test programs: 12m34.699655194s ago: executing program 32 (id=81): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xb840c58f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x2800) splice(r0, 0x0, r4, 0x0, 0x39000, 0x0) 10m19.687099736s ago: executing program 0 (id=888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x141100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x98}}, 0x20050800) 10m17.858898506s ago: executing program 0 (id=892): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340), 0x8) 10m17.727722622s ago: executing program 0 (id=893): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 10m17.333593902s ago: executing program 0 (id=895): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) syz_open_procfs(0x0, 0x0) 10m17.031759027s ago: executing program 0 (id=896): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) 10m14.53379487s ago: executing program 0 (id=904): socket$vsock_stream(0x28, 0x1, 0x0) socket(0x10, 0x3, 0x4) epoll_create1(0x0) r0 = syz_io_uring_setup(0x1eb1, &(0x7f0000000480)={0x0, 0x100000, 0x1, 0x1, 0x24f}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x3, 0x2) r2 = eventfd2(0x3fe, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000001c0)=r2, 0x1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5}, 0x0, 0x0) io_uring_enter(r0, 0x8a4, 0x0, 0x1, 0x0, 0x0) 10m14.354655939s ago: executing program 33 (id=904): socket$vsock_stream(0x28, 0x1, 0x0) socket(0x10, 0x3, 0x4) epoll_create1(0x0) r0 = syz_io_uring_setup(0x1eb1, &(0x7f0000000480)={0x0, 0x100000, 0x1, 0x1, 0x24f}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x3, 0x2) r2 = eventfd2(0x3fe, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000001c0)=r2, 0x1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5}, 0x0, 0x0) io_uring_enter(r0, 0x8a4, 0x0, 0x1, 0x0, 0x0) 9m50.166882894s ago: executing program 6 (id=996): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ftruncate(0xffffffffffffffff, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000009, 0x204031, 0xffffffffffffffff, 0x42792000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 9m49.088135557s ago: executing program 3 (id=1005): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) 9m48.856673939s ago: executing program 3 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="000000952ba30000000000000000", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m47.675365087s ago: executing program 3 (id=1008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0x8000a}, 0x1c, 0x0}}], 0x1, 0x200880c0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 9m47.136500533s ago: executing program 6 (id=1010): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000a1) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 9m47.01743625s ago: executing program 6 (id=1011): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 9m46.831440079s ago: executing program 6 (id=1014): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m46.740614253s ago: executing program 3 (id=1025): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 9m46.652911868s ago: executing program 6 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9m46.475126526s ago: executing program 3 (id=1018): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="140300001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) 9m46.240987568s ago: executing program 3 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000) stat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x11000aa, 0x0, 0x1, 0x0, 0x0) 9m46.128538964s ago: executing program 34 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000) stat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x11000aa, 0x0, 0x1, 0x0, 0x0) 9m46.121679534s ago: executing program 6 (id=1022): syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "bbaf0ca56f00a7f1", "72b718d0f56f63d5d9982891945aa7bb", "ab251ada", "f733d855468cfec6"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0xffffff77) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) 9m46.060285257s ago: executing program 35 (id=1022): syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "bbaf0ca56f00a7f1", "72b718d0f56f63d5d9982891945aa7bb", "ab251ada", "f733d855468cfec6"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0xffffff77) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) 4m19.239919761s ago: executing program 7 (id=2345): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESHEX=r3], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 4m18.905011587s ago: executing program 7 (id=2347): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) pipe(0x0) unshare(0x20000400) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m18.802946603s ago: executing program 7 (id=2349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 4m17.917199526s ago: executing program 7 (id=2351): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b0, &(0x7f0000000340)="$eJzs3T9rc1UYAPDnpmly0SERnFy8oIPTy/t2dUmRFoqZlAzqIEUrSFOEFgr+wdTJ1cXR1UUQ3PwSLn4DwVVws9DClZt7b/7UGJPaVHz7+w3tycnznPOcm9uGDnnaitIXn/0SaZpEoxe9uEyiG42oXcSc3lcBAPyfXeZ5/J6X1slLIiLdXFkAwAaN3/+v1nj//2HjJQEAG/bmW2+/vtvv772RZWnsn3x5Pij+si++l8/vfhAfxjCO4nF04joinyjH+3mej5pZoRsvn4zOB0Xmybs/Vevv/hYRzepBd/x1Pv+gv/ckK83kj4o6nqn27xX770Qnnl+w/0F/b2dBfgxa8cpLM/U/ik78/F58FMN4f1xEmR+NiM+fZNlr+dd/fPpOUV6Rn4zOB+1x3FS+dY8vCwAAAAAAAAAAAAAAAAAAAAAAT7lHVe+cdoz79xRTVf+dreviwXZkte58f54yP6kXutEfaJTHN3V/nsdZluVV4DS/GS80J52BAAAAAAAAAAAAAAAAAAAA4EE7+/iT48Ph8Oj0TgZ1N4D6Y/23Xac3M/NiLA9uT/dqVMMlK8dWHZNELC2jOMTKNV9VbQ9ud+me+7uav/t+5XW+/eezV4PtFWL+5aC+u44Pk8XXsB31TFrfJD/OxrRixb1a8zPp5DXN17r9Wguf6qx+5OSiPPGz45nRkuBIlhX26q/lOtVMcvMUrfFVnc+qZrarmZn0+S3S1e/n4iflL5JJt47kDn8DAQAAAAAAAAAAAAAAAAAAtdlPEd+ULk9t5O2NlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA92r6///XGIyq5BWCW3F69h8fEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAfgzwAAAP//VYxbCg==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) creat(0x0, 0x268) r2 = socket(0x1, 0x5, 0x0) write$nbd(r2, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b520a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r4) 4m17.856971499s ago: executing program 2 (id=2352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340000003"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m17.567140584s ago: executing program 7 (id=2353): r0 = socket$alg(0x26, 0x5, 0x0) pwritev2(r0, &(0x7f0000006c00)=[{&(0x7f0000005b40)="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", 0xf00}, {&(0x7f0000006b40)="112fe0a0f90dc0c051e53e51af019fba5e0c13d328d090bd492b73c15e1402c3da2a0b8dcdaa7b141e8c3bd0054dbafaa1ed7bce9de48e2d57b3f44899956759323c0193ab7dbf4bcfb28ca97fdea6", 0x4f}, {&(0x7f0000006bc0)="88aa499d71b5655428176797a3561c596c3d954ec69c4c815a40e010ae0e242d680d302d", 0x24}], 0x3, 0x8, 0x3, 0x15) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/217, 0xd9}, {0x0}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)}], 0x7}, 0x6}, {{&(0x7f0000001540)=@x25, 0x80, &(0x7f0000001600)=[{&(0x7f00000015c0)=""/29, 0x1d}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001640)=""/199, 0xc7}, {&(0x7f0000001740)=""/75, 0x4b}, {&(0x7f00000017c0)=""/218, 0xda}, {&(0x7f00000018c0)=""/229, 0xe5}, {&(0x7f00000019c0)=""/137, 0x89}], 0x5, &(0x7f0000001b00)=""/186, 0xba}, 0x3ff}, {{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c40)=""/173, 0xad}, {&(0x7f0000001d00)=""/206, 0xce}, {&(0x7f0000001e00)=""/112, 0x70}, {&(0x7f0000001e80)=""/105, 0x69}], 0x4, &(0x7f0000001f40)=""/152, 0x98}, 0x8001}, {{&(0x7f0000002000)=@caif=@dbg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002080)=""/229, 0xe5}, {&(0x7f0000002180)=""/212, 0xd4}, {&(0x7f0000002280)}, {&(0x7f00000022c0)=""/80, 0x50}, {&(0x7f0000002340)=""/220, 0xdc}, {&(0x7f0000002440)=""/205, 0xcd}, {&(0x7f0000002540)=""/99, 0x63}, {&(0x7f00000025c0)=""/196, 0xc4}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x9, &(0x7f0000003780)=""/200, 0xc8}, 0xb}, {{&(0x7f0000003880)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/34, 0x22}, {&(0x7f0000003a00)=""/21, 0x15}, {&(0x7f0000003a40)=""/193, 0xc1}, {&(0x7f0000003b40)=""/190, 0xbe}, {&(0x7f0000003c00)=""/240, 0xf0}], 0x6, &(0x7f0000003d80)=""/169, 0xa9}, 0x2}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003e40)=""/191, 0xbf}, {&(0x7f0000003f00)=""/6, 0x6}, {&(0x7f0000003f40)=""/153, 0x99}, {&(0x7f0000004000)=""/96, 0x60}, {&(0x7f0000004080)=""/96, 0x60}, {&(0x7f0000004100)=""/19, 0x13}, {&(0x7f0000004140)=""/140, 0x8c}, {&(0x7f0000004200)=""/85, 0x55}, {&(0x7f0000004300)=""/25, 0x19}], 0x9, &(0x7f0000004400)=""/149, 0x95}, 0x9}], 0x7, 0x40000040, 0x0) r1 = io_uring_setup(0x330b, &(0x7f00000002c0)={0x0, 0xddb2, 0x1, 0x503fc, 0x8100014e}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30008040}, 0x40080d1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmmsg$inet(r0, &(0x7f0000002280)=[{{&(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000005a40)=[{&(0x7f0000004680)}, {&(0x7f0000005680)="9ee2061b772d81e47dd35cb7f7cebf4561500343ef80df13e938d25a52255e1247894ccc0a717e20fc33d7ca5297eb3294fa4f69ceac0060d2401ad423479da7c735ed95f6b697f7b0ae12b5ba2d0ca44278e3980810a75e065a24aa37f54e9bc5f1655a4c081024c9e0854bf0fb16cb36590f54634371d085d7878a270929f3bb3a1188c18c3c2e2046f69b09b746f24083770bf63a6c08be", 0x99}, {&(0x7f0000005740)="20c76e28ca5f44b76ac31741f99d3c543a55fcb9f95efe5cec4fe898d1fa8ada5a3ca0184c6ec41a51f816e0be1cf810ed9ce13b80a8fbefdf269e1ffe312369fe876092f0fe053356bc5d76e66eabeaeaa8c4cc2b2919cc34bf3626b74a3d1e67268869c20d0cd47b72d911fe93f90795b6f7b00b2da6ce8aea68fb456ce57f575993ce958b9bbfd4e5161c9f58e91b81d6c8ad3f5501d81e38ff71057ed3bcef", 0xa1}, {&(0x7f0000005800)="b53f4a9dfc999c9a5f1e2ae18a5af036c652e14cbf073a5bc724397cf13f3b14ade3bb00746fcd8b7cb7b74b575db05661bb8a484da07f40cbbd50135d67aee7bf692a8a4c6a38d6d799ccac95f6e5fee0a9eafdb7", 0x55}, {&(0x7f00000058c0)="5aee624a0f5b7bd7e11076dbfcc11af7046d411fa3abf6b2e789c4bbf28e0d712598049c92efe08289b49dd0ebee2812bcdc7d2a99c2d3392e2376b40ac6869cdaa303fee67e782f507164a11e089dd2f03ba711", 0x54}, {&(0x7f0000005940)="936e57b33ae921eaa83c29fd183b4ea551c3942eb9dc16897a283cf6523d8062303dda9713bff3f8c1538f3f589d649b135da89fe6cedc165e9fe6fd226c2c09694ad3560a1d543c46f161fe508d162bea1faa52abfae06a545c2bd293d65f81f46858a3ad4392e340937497b539dc09725a2d1d331840341bd1f4532144512ce7658d52e5a10e6ba629ba69efb47bf43f3d72debdfc2f5ebfe247daaa69cd670c4710f5c1de7336008dddc7c7584b42512691ab47200ae8571eb93319b5d372bcd17f4dcb1552bed4f1636b9e0bf2938e84e1149e152f2f25be945d1fed8b06c0", 0xe1}], 0x6, &(0x7f0000005ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x43f}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0xa, 0x0, 0x3, [0x401]}, @generic={0x44, 0x4, 'sE'}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf79}}], 0x58}}], 0x1, 0x8015) 4m17.519648596s ago: executing program 2 (id=2354): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008851}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffea}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xe1819d25e0ad84be}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0xa564, 0x9, 0x7ed, 0x1}, {0x1, 0x0, 0x7, 0x800, 0x1, 0x4}, 0x1, 0x0, 0x64a}}, @TCA_TBF_BURST={0x8, 0x6, 0x1}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x5dc}], 0x1}, 0x4) 4m17.043069659s ago: executing program 7 (id=2357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@delchain={0x3c, 0x66, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff2, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048849}, 0x20004804) 4m16.932960985s ago: executing program 2 (id=2358): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000b80)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYBLOB="a8cc8ef9f9253b216b1b0d18fac16bdd73a57826ac4b044ee988b7973d2250d39ebc1ecad595e5d7f9842d81192403ac80f2871fbf276d3aeb7f16ecb08a9161416f6512dbe50d75806bb46b66b14cc1e731effccd47569f9c206d778ae1220d73ee793b6ec3aa711dc84cc47dc497317105fdd4ccfec870ab06fd40c8ef081a1a7ba424a854bc50cd2cfedd", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYRESDEC], 0x21, 0x1508, &(0x7f0000001f80)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) 4m16.746942134s ago: executing program 36 (id=2357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@delchain={0x3c, 0x66, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff2, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048849}, 0x20004804) 4m16.731353675s ago: executing program 2 (id=2361): syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0x8, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4m15.61470212s ago: executing program 2 (id=2363): close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x50040, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000008"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4m15.251696538s ago: executing program 2 (id=2367): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010106, 0x4e20, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m0.214299981s ago: executing program 37 (id=2367): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010106, 0x4e20, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 16.757127065s ago: executing program 4 (id=3075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 15.659998679s ago: executing program 4 (id=3082): mknodat$null(0xffffffffffffffff, 0x0, 0x4c41, 0x103) r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003d00010325bd7000fcffffff010000009b"], 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x0, 0x4}, 'port1\x00', 0xf6, 0x11cfa, 0x100, 0x5, 0x1, 0x0, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 14.181246462s ago: executing program 5 (id=3084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x1ff, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 14.158540182s ago: executing program 4 (id=3085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000005}, 0x4000) 13.135152483s ago: executing program 4 (id=3086): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r0, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 12.837837978s ago: executing program 5 (id=3088): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000011c0)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x400, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x24000800) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 11.474855635s ago: executing program 5 (id=3092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0, 0x46}], 0x100000ad, 0x10dd3, 0x1ff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) 10.588878298s ago: executing program 9 (id=3095): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xc6e, &(0x7f0000000340)={0x0, 0x5, 0x400, 0x4, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 9.556815299s ago: executing program 5 (id=3097): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 8.768380908s ago: executing program 9 (id=3099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x1ff, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 8.242238694s ago: executing program 4 (id=3101): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40824) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$video(0x0, 0x100000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 8.220225856s ago: executing program 5 (id=3102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x2, 0x45f, 0x8, 0x1ff, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.143593739s ago: executing program 8 (id=3103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ffffb703000008000000b70400000000000085000000010000009559b4703cc9e322c15921f7a834ceb48776cdef70fe8c5f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_socket_connect_nvme_tcp() syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) 7.823014425s ago: executing program 1 (id=3104): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 7.802221496s ago: executing program 9 (id=3105): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 5.562244507s ago: executing program 1 (id=3106): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) write(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.540198187s ago: executing program 8 (id=3107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 4.284842899s ago: executing program 9 (id=3108): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) unshare(0x2c020400) accept4(r0, 0x0, 0x0, 0x800) 4.282348479s ago: executing program 8 (id=3109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 4.002493203s ago: executing program 4 (id=3110): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) 3.950106045s ago: executing program 9 (id=3111): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r0, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 3.075453399s ago: executing program 1 (id=3112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 2.876264258s ago: executing program 8 (id=3113): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}]}]}]}, 0x2c}}, 0x800) 2.180222603s ago: executing program 1 (id=3114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) unshare(0x24020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r6, 0x33}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8a626319f48ffc54553d60508b9", 0xe}], 0x1}, 0x404481c) 1.390690112s ago: executing program 8 (id=3115): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, r4, 0x301, 0x70bd26, 0x25dfdbfe, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 484.753476ms ago: executing program 1 (id=3116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x15, r7, 0x38}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d0", 0x1}], 0x1}, 0xc804) 484.324166ms ago: executing program 5 (id=3117): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") fanotify_init(0x0, 0x400) truncate(0x0, 0x7f0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000001c0)='./bus\x00', 0x77) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) 48.994368ms ago: executing program 9 (id=3118): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x7ff, 0x0, 0x81, 0x452, 0x6a0, 0xd4e0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x5, 0x2, 0x3], 0x0, 0x200}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.295419ms ago: executing program 8 (id=3119): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 0s ago: executing program 1 (id=3120): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) kernel console output (not intermixed with test programs): 678] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 298.692386][ T8825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1274'. [ 298.911858][ T8828] bond1: option mode: unable to set because the bond device has slaves [ 301.213098][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1283'. [ 301.655982][ T8879] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 303.383620][ T4187] Bluetooth: Wrong link type (-71) [ 303.393254][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1294'. [ 304.277078][ T8966] tipc: Enabled bearer , priority 10 [ 304.544380][ T8971] binder: 8970:8971 ioctl c0306201 200000000180 returned -14 [ 306.680959][ T7161] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 306.904401][ T9010] bond0: (slave syz_tun): Releasing backup interface [ 306.912766][ T9010] device syz_tun left promiscuous mode [ 306.935271][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.943082][ T7161] usb 8-1: Using ep0 maxpacket: 8 [ 306.954002][ T9010] device bridge_slave_0 left promiscuous mode [ 306.972299][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.992191][ T9010] device bridge_slave_1 left promiscuous mode [ 306.998553][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.033532][ T9010] bond0: (slave bond_slave_0): Releasing backup interface [ 307.048606][ T9010] device bond_slave_0 left promiscuous mode [ 307.061090][ T7161] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.090382][ T7161] usb 8-1: config 0 has no interfaces? [ 307.098688][ T7161] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.116070][ T7161] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.143830][ T7161] usb 8-1: config 0 descriptor?? [ 307.282818][ T9010] bond0: (slave bond_slave_1): Releasing backup interface [ 307.297373][ T9010] device bond_slave_1 left promiscuous mode [ 307.345528][ T9010] team0: Port device team_slave_0 removed [ 307.365363][ T9010] team0: Port device team_slave_1 removed [ 307.374825][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.389769][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.408767][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.417000][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.459426][ T4394] usb 8-1: USB disconnect, device number 2 [ 308.493321][ T9010] device gretap1 left promiscuous mode [ 308.542451][ T9010] bridge0: port 3(gretap1) entered disabled state [ 308.560539][ T9010] bond1: (slave macvlan2): Releasing backup interface [ 308.601134][ T9014] team0: Mode changed to "broadcast" [ 308.610331][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1318'. [ 308.835876][ T9047] loop7: detected capacity change from 0 to 1024 [ 308.928087][ T9047] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.999881][ T9047] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 48142 [ 309.076579][ T9047] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 48142 [ 312.441725][ T4187] Bluetooth: Wrong link type (-71) [ 312.628855][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 312.897591][ T9122] netlink: 'syz.8.1349': attribute type 1 has an invalid length. [ 313.049057][ T9130] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 313.082434][ T9135] netlink: 'syz.1.1351': attribute type 15 has an invalid length. [ 315.598327][ T9170] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.1362'. [ 317.203422][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.209824][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.330216][ T9202] loop7: detected capacity change from 0 to 512 [ 317.375372][ T9202] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 317.440382][ T9202] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 317.555621][ T9202] EXT4-fs (loop7): 1 orphan inode deleted [ 317.613664][ T9202] EXT4-fs (loop7): 1 truncate cleaned up [ 317.693295][ T9202] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x0000000000000006,stripe=0x0000000000000005,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 317.967521][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.975285][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.019058][ T9197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.065316][ T9197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.735535][ T9197] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.746869][ T9197] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.757050][ T9197] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.770242][ T9197] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.046433][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1369'. [ 322.659698][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1386'. [ 322.726229][ T9260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.989158][ T9274] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 323.034673][ T9274] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 323.755220][ T9288] bond2: (slave batadv_slave_1): Enslaving as a backup interface with a down link [ 324.083408][ T9302] netlink: 'syz.2.1395': attribute type 10 has an invalid length. [ 324.118450][ T9302] device syz_tun entered promiscuous mode [ 324.182917][ T9302] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 328.683324][ T9352] netlink: 1335 bytes leftover after parsing attributes in process `syz.7.1410'. [ 328.981695][ T9370] netlink: 'syz.7.1423': attribute type 4 has an invalid length. [ 329.862545][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 329.862562][ T26] audit: type=1326 audit(2000000440.514:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef88a16799 code=0x0 [ 332.404484][ T9437] netlink: 'syz.1.1432': attribute type 16 has an invalid length. [ 332.443484][ T9437] netlink: 'syz.1.1432': attribute type 17 has an invalid length. [ 332.465073][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 333.410234][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 333.478744][ T9448] sctp: [Deprecated]: syz.2.1435 (pid 9448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.478744][ T9448] Use struct sctp_sack_info instead [ 333.494687][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 333.523089][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 333.554878][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 333.583587][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 333.635616][ T9446] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 333.660990][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 333.698295][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 333.707861][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 333.722684][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 333.731821][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 333.743336][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 333.764148][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 334.032092][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.254236][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.607278][ T9437] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.650018][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 334.704315][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 334.739885][ T9466] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 334.773465][ T9437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.935749][ T9472] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1929321042/1929321044 [ 334.948960][ T9472] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1929321042/1929321043 [ 334.958499][ T13] lo speed is unknown, defaulting to 1000 [ 334.979665][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 334.981637][ T9472] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1929321042/1929321044 [ 335.000078][ T9472] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1929321042/1929321043 [ 336.790091][ T9494] sch_fq: defrate 53322 ignored. [ 338.036443][ T9517] tipc: Failed to remove unknown binding: 66,0,0/0:2002064942/2002064944 [ 338.109150][ T9517] tipc: Failed to remove unknown binding: 66,0,0/0:2002064942/2002064943 [ 338.164078][ T9517] tipc: Failed to remove unknown binding: 66,0,0/0:2002064942/2002064944 [ 338.213420][ T9517] tipc: Failed to remove unknown binding: 66,0,0/0:2002064942/2002064943 [ 339.413473][ T9552] sock: sock_set_timeout: `syz.2.1468' (pid 9552) tries to set negative timeout [ 339.814024][ T9560] loop7: detected capacity change from 0 to 40427 [ 340.013819][ T9560] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 340.021806][ T9560] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 340.053845][ T9560] F2FS-fs (loop7): invalid crc value [ 340.098428][ T9565] tipc: Failed to remove unknown binding: 66,0,0/4:1819272440/1819272442 [ 340.158738][ T9565] tipc: Failed to remove unknown binding: 66,0,0/4:1819272440/1819272441 [ 340.980288][ T9570] tipc: Failed to remove unknown binding: 66,0,0/4:1819272440/1819272442 [ 340.988868][ T9570] tipc: Failed to remove unknown binding: 66,0,0/4:1819272440/1819272441 [ 341.070140][ T9560] F2FS-fs (loop7): Found nat_bits in checkpoint [ 341.109610][ T9560] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 341.116821][ T9560] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 341.165380][ T9573] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 341.785089][ T9596] attempt to access beyond end of device [ 341.785089][ T9596] loop7: rw=2049, want=79880, limit=40427 [ 341.867459][ T9596] attempt to access beyond end of device [ 341.867459][ T9596] loop7: rw=2049, want=81920, limit=40427 [ 341.955212][ T9596] attempt to access beyond end of device [ 341.955212][ T9596] loop7: rw=2049, want=52136, limit=40427 [ 342.035910][ T26] audit: type=1326 audit(2000000452.685:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.5.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x0 [ 342.312736][ T144] attempt to access beyond end of device [ 342.312736][ T144] loop7: rw=1, want=77832, limit=40427 [ 342.730528][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1497'. [ 342.899077][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 344.522736][ T9680] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 344.555019][ T26] audit: type=1326 audit(2000000455.205:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.8.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa995581799 code=0x7ffc0000 [ 344.638303][ T26] audit: type=1326 audit(2000000455.205:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.8.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa995581799 code=0x7ffc0000 [ 344.666763][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1512'. [ 344.692435][ T9686] device ip6gre1 entered promiscuous mode [ 344.735168][ T26] audit: type=1326 audit(2000000455.235:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.8.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa995581799 code=0x7ffc0000 [ 344.760805][ T9686] netlink: 'syz.8.1512': attribute type 6 has an invalid length. [ 344.798823][ T9686] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1512'. [ 344.809528][ T26] audit: type=1326 audit(2000000455.235:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.8.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa995581799 code=0x7ffc0000 [ 344.922999][ T26] audit: type=1326 audit(2000000455.235:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.8.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa995581799 code=0x7ffc0000 [ 345.076564][ T26] audit: type=1326 audit(2000000455.235:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.8.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa995581799 code=0x7ffc0000 [ 346.060012][ T26] audit: type=1326 audit(2000000455.235:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.8.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa995581799 code=0x7ffc0000 [ 347.093846][ T26] audit: type=1326 audit(2000000455.235:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.8.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa995581799 code=0x7ffc0000 [ 347.097105][ T9727] loop8: detected capacity change from 0 to 1024 [ 347.185432][ T9727] hfsplus: invalid btree flag [ 347.192592][ T9727] hfsplus: failed to load extents file [ 347.427593][ T9727] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 348.621914][ T9753] device bridge1 entered promiscuous mode [ 350.664181][ T9782] loop7: detected capacity change from 0 to 1024 [ 350.745449][ T9782] hfsplus: invalid btree flag [ 350.768054][ T9782] hfsplus: failed to load extents file [ 350.818796][ T9782] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 350.845662][ T9786] overlayfs: failed to clone upperpath [ 350.918727][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 351.047142][ T9786] overlayfs: failed to clone upperpath [ 353.049099][ T9802] netlink: 'syz.2.1546': attribute type 15 has an invalid length. [ 358.320233][ T23] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 363.400587][ T9889] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1574'. [ 363.680224][ T9889] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1574'. [ 363.830068][ T9889] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1574'. [ 364.553207][ T9904] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1577'. [ 365.343410][ T9912] loop8: detected capacity change from 0 to 1024 [ 365.621224][ T9912] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 366.237106][ T9912] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 366.276984][ T9912] EXT4-fs error (device loop8): ext4_get_journal_inode:5185: inode #5: comm syz.8.1578: unexpected bad inode w/o EXT4_IGET_BAD [ 366.291434][ T9904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.328166][ T9904] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 366.338334][ T9912] EXT4-fs (loop8): no journal found [ 366.343588][ T9912] EXT4-fs (loop8): can't get journal size [ 366.369534][ T9904] bond0 (unregistering): Released all slaves [ 366.376487][ T9912] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 366.497820][ T9901] bond0 speed is unknown, defaulting to 1000 [ 366.526631][ T9901] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 366.750166][ T9936] netlink: 'syz.7.1581': attribute type 15 has an invalid length. [ 366.834299][ T9901] siw: device registration error -19 [ 367.852759][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1586'. [ 368.847641][ T9954] device syzkaller0 entered promiscuous mode [ 371.045138][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 371.067587][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 371.103019][ T26] audit: type=1804 audit(2000000481.746:132): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1593" name="file0" dev="hugetlbfs" ino=52898 res=1 errno=0 [ 371.145039][ T26] audit: type=1804 audit(2000000481.786:133): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1593" name="file0" dev="hugetlbfs" ino=52898 res=1 errno=0 [ 372.745656][ T9999] loop8: detected capacity change from 0 to 4096 [ 373.097634][T10002] device bridge6 entered promiscuous mode [ 373.125638][T10002] bond3: (slave bridge6): making interface the new active one [ 373.149165][T10002] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 373.236225][T10010] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 373.346350][T10012] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 373.372293][T10006] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 373.455631][T10006] bond0 (unregistering): Released all slaves [ 374.683351][ T26] audit: type=1804 audit(4147484133.331:134): pid=10029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1611" name="file0" dev="hugetlbfs" ino=52964 res=1 errno=0 [ 374.757172][ T26] audit: type=1804 audit(4147484133.331:135): pid=10029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1611" name="file0" dev="hugetlbfs" ino=52964 res=1 errno=0 [ 374.866483][ T26] audit: type=1804 audit(4147484133.511:136): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1614" name="bus" dev="ramfs" ino=52975 res=1 errno=0 [ 374.959567][ T26] audit: type=1804 audit(4147484133.541:137): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1614" name="bus" dev="ramfs" ino=52975 res=1 errno=0 [ 376.274626][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1618'. [ 376.465927][T10058] rdma_rxe: rxe_register_device failed with error -23 [ 376.475788][T10058] rdma_rxe: failed to add vxcan1 [ 377.242121][T10070] overlayfs: failed to clone upperpath [ 377.269311][T10071] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 377.302563][T10071] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 377.337307][T10071] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 378.962994][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.969471][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.764086][T10131] bond1: (slave ip6gretap1): making interface the new active one [ 381.993850][T10131] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 383.352433][T10134] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 383.419850][T10134] bond1 (unregistering): Released all slaves [ 385.270916][T10169] bridge0: port 1(syz_tun) entered blocking state [ 385.306811][T10169] bridge0: port 1(syz_tun) entered disabled state [ 385.347467][T10169] device syz_tun entered promiscuous mode [ 385.355791][T10173] device bridge0 entered promiscuous mode [ 387.739612][T10203] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 387.799479][T10199] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface [ 387.872204][T10199] bond2 (unregistering): Released all slaves [ 387.920177][T10210] xt_hashlimit: size too large, truncated to 1048576 [ 387.941904][T10210] xt_hashlimit: invalid rate [ 387.991144][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'. [ 388.001795][T10213] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 388.011117][T10213] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 388.468792][T10236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 388.507457][T10236] netlink: 'syz.2.1675': attribute type 7 has an invalid length. [ 388.534801][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 388.563070][T10236] device ip6gretap0 entered promiscuous mode [ 388.583305][T10236] device ip6gretap0 left promiscuous mode [ 388.648297][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1674'. [ 390.009732][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1678'. [ 390.026647][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1678'. [ 390.035668][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1678'. [ 390.093784][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 391.148117][T10264] netlink: 'syz.1.1683': attribute type 7 has an invalid length. [ 391.213160][T10267] device syzkaller0 entered promiscuous mode [ 391.259103][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1688'. [ 391.318695][T10272] netlink: 'syz.1.1688': attribute type 7 has an invalid length. [ 391.333230][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 391.353461][T10272] device ip6gretap0 entered promiscuous mode [ 391.360740][T10272] device syz_tun entered promiscuous mode [ 391.376693][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 391.429891][T10274] MPTCP: addr_signal error, add_addr=1, echo=0 [ 391.503755][T10277] MPTCP: addr_signal error, add_addr=1, echo=0 [ 392.828834][T10289] sctp: [Deprecated]: syz.2.1694 (pid 10289) Use of int in max_burst socket option. [ 392.828834][T10289] Use struct sctp_assoc_value instead [ 393.076528][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1697'. [ 393.171531][ T26] audit: type=1804 audit(4147484151.822:138): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1702" name="bus" dev="ramfs" ino=53561 res=1 errno=0 [ 393.263082][ T26] audit: type=1804 audit(4147484151.842:139): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1702" name="bus" dev="ramfs" ino=53561 res=1 errno=0 [ 397.393230][T10352] fuse: Bad value for 'fd' [ 398.566412][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1717'. [ 398.827876][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 399.262618][T10386] VFS: Mount too revealing [ 401.295611][ T26] audit: type=1326 audit(4147484159.942:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8ce7a799 code=0x7ffc0000 [ 401.367715][ T26] audit: type=1326 audit(4147484159.952:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8ce7a799 code=0x7ffc0000 [ 401.405583][T10418] loop8: detected capacity change from 0 to 1024 [ 401.442003][ T26] audit: type=1326 audit(4147484159.952:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8ce7a799 code=0x7ffc0000 [ 401.482431][T10418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.525907][ T26] audit: type=1326 audit(4147484159.952:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb8ce7a799 code=0x7ffc0000 [ 402.697422][ T26] audit: type=1326 audit(4147484159.952:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8ce7a799 code=0x7ffc0000 [ 402.722029][ T26] audit: type=1326 audit(4147484159.952:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8ce7a799 code=0x7ffc0000 [ 402.781289][ T26] audit: type=1326 audit(4147484159.952:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8ce7a799 code=0x7ffc0000 [ 402.931659][ T26] audit: type=1326 audit(4147484159.952:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb8ce7a42b code=0x7ffc0000 [ 403.005375][ T26] audit: type=1326 audit(4147484159.952:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb8ce7a42b code=0x7ffc0000 [ 403.051192][ T26] audit: type=1326 audit(4147484159.952:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb8ce7a42b code=0x7ffc0000 [ 405.796118][T10487] device syzkaller0 entered promiscuous mode [ 406.076821][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 406.294681][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 406.345862][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 406.345879][ T26] audit: type=1804 audit(4147484165.002:188): pid=10513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1760" name="bus" dev="ramfs" ino=53744 res=1 errno=0 [ 406.450869][ T26] audit: type=1804 audit(4147484165.032:189): pid=10513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1760" name="bus" dev="ramfs" ino=53744 res=1 errno=0 [ 406.558912][T10514] bridge7: port 1(veth15) entered blocking state [ 406.579841][T10514] bridge7: port 1(veth15) entered disabled state [ 406.608364][T10514] device veth15 entered promiscuous mode [ 406.616101][T10514] bridge7: port 1(veth15) entered blocking state [ 406.622695][T10514] bridge7: port 1(veth15) entered forwarding state [ 406.758609][T10509] bridge7: port 2(veth17) entered blocking state [ 406.805569][T10509] bridge7: port 2(veth17) entered disabled state [ 406.852958][T10509] device veth17 entered promiscuous mode [ 406.892358][T10509] bridge7: port 2(veth17) entered blocking state [ 406.898853][T10509] bridge7: port 2(veth17) entered forwarding state [ 406.975918][ T5052] bridge7: port 1(veth15) entered disabled state [ 407.000986][ T5052] bridge7: port 2(veth17) entered disabled state [ 407.515665][T10537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1764'. [ 409.866239][T10571] xt_policy: output policy not valid in PREROUTING and INPUT [ 411.294390][T10587] device syzkaller0 entered promiscuous mode [ 413.647501][T10604] overlayfs: failed to clone upperpath [ 413.820570][T10612] overlayfs: failed to clone upperpath [ 415.101300][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1793'. [ 416.286630][T10639] netlink: 'syz.8.1799': attribute type 1 has an invalid length. [ 416.338514][T10639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.028555][T10668] device ipip0 entered promiscuous mode [ 418.148884][T10676] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 418.392971][ T26] audit: type=1326 audit(4147484177.043:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10692 comm="syz.8.1816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa995581799 code=0x0 [ 419.336070][T10708] netlink: 'syz.2.1822': attribute type 21 has an invalid length. [ 419.361101][T10708] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.377410][T10708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.385687][T10708] IPv6: NLM_F_CREATE should be set when creating new route [ 419.393041][T10708] IPv6: NLM_F_CREATE should be set when creating new route [ 419.400348][T10708] IPv6: NLM_F_CREATE should be set when creating new route [ 419.423581][T10712] netlink: 'syz.2.1822': attribute type 21 has an invalid length. [ 419.431966][T10712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.639184][T10724] device vlan0 entered promiscuous mode [ 419.645295][T10724] device gretap0 entered promiscuous mode [ 421.351081][T10737] netlink: 165 bytes leftover after parsing attributes in process `syz.8.1829'. [ 421.363984][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1832'. [ 421.723512][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 424.379006][ T26] audit: type=1804 audit(4147484183.033:191): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1841" name="bus" dev="ramfs" ino=54200 res=1 errno=0 [ 424.410426][ T26] audit: type=1804 audit(4147484183.053:192): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1841" name="bus" dev="ramfs" ino=54200 res=1 errno=0 [ 426.593004][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1849'. [ 426.613288][T10800] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.622690][T10800] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.631736][T10800] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.640451][T10800] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.670929][T10802] netlink: 798 bytes leftover after parsing attributes in process `syz.1.1850'. [ 426.681204][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1849'. [ 429.818400][ T26] audit: type=1804 audit(4147484188.474:193): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1864" name="bus" dev="ramfs" ino=54262 res=1 errno=0 [ 431.201423][ T26] audit: type=1804 audit(4147484188.634:194): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1864" name="bus" dev="ramfs" ino=54262 res=1 errno=0 [ 434.512174][T10898] loop8: detected capacity change from 0 to 4096 [ 438.483868][T10951] overlayfs: failed to resolve './file0': -2 [ 440.070112][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.077789][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.539870][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.665709][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 442.874056][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1919'. [ 444.539607][T11071] fuse: Unknown parameter '4' [ 444.554883][T11071] sctp: [Deprecated]: syz.2.1930 (pid 11071) Use of int in max_burst socket option deprecated. [ 444.554883][T11071] Use struct sctp_assoc_value instead [ 447.067523][T11105] overlayfs: failed to clone upperpath [ 451.220633][T11154] overlayfs: failed to clone upperpath [ 451.347673][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1961'. [ 451.367948][T11162] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.376955][T11162] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.386014][T11162] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.395446][T11162] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.596439][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1961'. [ 451.629026][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1961'. [ 453.208259][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1961'. [ 457.170393][T11215] loop8: detected capacity change from 0 to 1024 [ 457.195281][T11213] syz.2.1974 (11213) used greatest stack depth: 18104 bytes left [ 457.257724][T11215] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 457.670738][T11215] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 460.192673][ T26] audit: type=1800 audit(4147484219.854:195): pid=11238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1980" name="bus" dev="ramfs" ino=56730 res=0 errno=0 [ 460.454741][T11263] netlink: 'syz.5.1987': attribute type 1 has an invalid length. [ 460.498495][T11263] netlink: 146340 bytes leftover after parsing attributes in process `syz.5.1987'. [ 461.249311][T11265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.256657][T11265] IPv6: NLM_F_CREATE should be set when creating new route [ 465.037600][T11293] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 466.547324][ T7166] lo speed is unknown, defaulting to 1000 [ 466.691728][T11308] device macsec0 entered promiscuous mode [ 466.708028][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2006'. [ 466.774651][T11308] device macsec0 left promiscuous mode [ 466.786166][T11311] rdma_rxe: rxe_register_device failed with error -23 [ 466.793920][T11311] rdma_rxe: failed to add vxcan1 [ 468.626892][T11318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.501125][T11338] loop7: detected capacity change from 0 to 1024 [ 469.638296][T11340] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2015'. [ 469.652038][T11338] EXT4-fs (loop7): Ignoring removed orlov option [ 469.681364][T11338] EXT4-fs (loop7): Ignoring removed bh option [ 469.722089][T11346] netlink: 'syz.1.2018': attribute type 4 has an invalid length. [ 469.735124][T11338] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 469.877409][ T26] audit: type=1800 audit(4147484229.534:196): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2014" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 469.935515][T11356] device batadv_slave_0 entered promiscuous mode [ 470.088523][T11338] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3885: comm syz.7.2014: Allocating blocks 497-513 which overlap fs metadata [ 470.114940][T11338] EXT4-fs (loop7): pa ffff8880478ef0e0: logic 256, phys. 385, len 8 [ 470.123958][T11338] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 470.520264][T11374] loop8: detected capacity change from 0 to 32768 [ 471.887228][T11374] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 471.915519][T11374] JBD2: Ignoring recovery information on journal [ 472.927621][T11374] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 472.952522][T11374] sctp: [Deprecated]: syz.8.2027 (pid 11374) Use of int in max_burst socket option. [ 472.952522][T11374] Use struct sctp_assoc_value instead [ 473.773316][ T7788] ocfs2: Unmounting device (7,8) on (node local) [ 473.950108][T11409] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.221563][ T4230] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 474.241074][T11409] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.089326][T11409] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.682199][T11409] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.633827][T11446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2048'. [ 478.155014][T11409] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.201253][ T4230] usb 8-1: config 0 has no interfaces? [ 478.288663][T11409] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.340601][T11456] lo speed is unknown, defaulting to 1000 [ 478.382535][T11409] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.394239][T11463] netlink: 'syz.8.2054': attribute type 1 has an invalid length. [ 478.479725][T11467] bond3: (slave veth3): Enslaving as an active interface with a down link [ 478.495496][T11409] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.644807][T11463] bond3: (slave dummy0): making interface the new active one [ 478.673433][T11463] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 478.731513][ T4230] usb 8-1: string descriptor 0 read error: -71 [ 478.737970][ T4230] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 478.762461][T11463] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2054'. [ 478.791972][ T4230] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 478.832969][ T4230] usb 8-1: config 0 descriptor?? [ 478.852949][T11463] bond3: (slave dummy0): Releasing active interface [ 478.867646][ T4230] usb 8-1: can't set config #0, error -71 [ 478.875580][T11471] loop7: detected capacity change from 0 to 2048 [ 478.896494][ T4230] usb 8-1: USB disconnect, device number 3 [ 479.114253][T11479] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.320111][T11492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2063'. [ 482.455013][T11514] netlink: 'syz.2.2070': attribute type 1 has an invalid length. [ 482.637465][T11525] loop8: detected capacity change from 0 to 164 [ 482.704140][T11516] bond8: (slave veth7): Enslaving as an active interface with a down link [ 482.726870][T11525] rock: directory entry would overflow storage [ 482.761056][T11525] rock: sig=0x66, size=4, remaining=3 [ 482.829148][T11527] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2070'. [ 484.394926][T11549] program syz.8.2079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.498406][T11553] program syz.8.2079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.807981][ T7158] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 485.262647][ T7158] usb 9-1: unable to get BOS descriptor or descriptor too short [ 485.491153][ T7158] usb 9-1: not running at top speed; connect to a high speed hub [ 485.641401][ T7158] usb 9-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 485.692681][ T7158] usb 9-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 487.122759][ T7158] usb 9-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=56.ea [ 487.210324][ T7158] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.269066][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2091'. [ 487.294469][ T7158] usb 9-1: Product: syz [ 487.321640][ T7158] usb 9-1: Manufacturer: syz [ 487.326384][ T7158] usb 9-1: SerialNumber: syz [ 487.496021][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2091'. [ 487.541405][ T7158] usb 9-1: can't set config #3, error -71 [ 487.571089][ T7158] usb 9-1: USB disconnect, device number 3 [ 487.598808][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 488.665563][T11608] loop8: detected capacity change from 0 to 1024 [ 489.859519][ T5056] hfsplus: b-tree write err: -5, ino 25 [ 489.881853][T11637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.913064][ T5056] hfsplus: b-tree write err: -5, ino 4 [ 489.950226][ T5056] hfsplus: b-tree write err: -5, ino 2 [ 492.436838][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.525522][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.558458][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.586430][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.614135][ T5042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.723699][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.746604][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.761782][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.159693][T11684] loop7: detected capacity change from 0 to 32768 [ 493.227777][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.626898][ T5042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.742853][T11684] XFS (loop7): Mounting V5 Filesystem [ 495.024960][T11684] XFS (loop7): Ending clean mount [ 495.041991][T11684] XFS (loop7): Quotacheck needed: Please wait. [ 495.125807][T11684] XFS (loop7): Quotacheck: Done. [ 497.276804][ T7774] XFS (loop7): Unmounting Filesystem [ 497.911350][ T4230] net_ratelimit: 4 callbacks suppressed [ 497.911371][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.397007][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.783965][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.792271][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.808368][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.395575][T11748] loop8: detected capacity change from 0 to 1764 [ 501.254948][ T2324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.451568][ T5048] tipc: Left network mode [ 501.508887][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.528490][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.747961][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.781446][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.001588][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.042538][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.053750][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2147'. [ 505.604900][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.664267][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.683182][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.134406][ T5048] device hsr_slave_0 left promiscuous mode [ 507.255403][ T5048] device hsr_slave_1 left promiscuous mode [ 507.441924][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.495136][T11832] program syz.7.2156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.557679][T11834] program syz.7.2156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.668647][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.856888][ T5048] device bridge_slave_1 left promiscuous mode [ 507.910034][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.910261][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.997965][ T5048] device bridge_slave_0 left promiscuous mode [ 508.007293][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.034184][T11839] tipc: Failed to remove unknown binding: 66,0,0/2886997162:955121544/955121546 [ 508.091997][T11839] tipc: Failed to remove unknown binding: 66,0,0/2886997162:955121544/955121545 [ 508.109025][T11839] tipc: Failed to remove unknown binding: 66,0,0/2886997162:955121544/955121546 [ 508.125547][T11839] tipc: Failed to remove unknown binding: 66,0,0/2886997162:955121544/955121545 [ 508.355804][T11857] sctp: [Deprecated]: syz.8.2165 (pid 11857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 508.355804][T11857] Use struct sctp_sack_info instead [ 508.640462][T11870] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 508.667636][T11870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.049311][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.089897][ T5048] team0 (unregistering): Port device team_slave_1 removed [ 509.414880][ T5048] team0 (unregistering): Port device team_slave_0 removed [ 509.773585][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.837826][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.119879][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.153966][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.227384][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.254449][ T5048] bond0 (unregistering): Released all slaves [ 511.269051][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2176'. [ 512.228776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.325607][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.584110][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.114731][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.397303][ T7] net_ratelimit: 1 callbacks suppressed [ 514.397323][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.663399][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.830733][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2191'. [ 516.201130][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.959489][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.011248][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.211587][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.395429][T11982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2198'. [ 518.553315][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 518.685069][T11982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2198'. [ 518.883120][T11993] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid [ 519.008207][T11982] device veth19 entered promiscuous mode [ 519.349875][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.578819][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.610245][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.266783][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2209'. [ 521.824958][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.955662][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2209'. [ 522.195894][T12045] 9pnet: Insufficient options for proto=fd [ 522.995572][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.061952][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.514420][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.867470][T12077] loop7: detected capacity change from 0 to 256 [ 524.965694][T12077] FAT-fs (loop7): Unrecognized mount option "smackfsroot=shortname=mixed" or missing value [ 526.125790][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2220'. [ 526.203089][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.485063][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.522860][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.245805][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.263702][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.528353][T12118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.537865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.549193][T12118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.566641][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.598393][T12116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.824825][ T26] audit: type=1800 audit(4147484545.484:197): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2232" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 530.114150][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2235'. [ 530.923623][T12151] device hsr_slave_0 left promiscuous mode [ 532.321540][ T4261] net_ratelimit: 3 callbacks suppressed [ 532.321560][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.381282][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.413999][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.357210][T12188] device syzkaller0 left promiscuous mode [ 534.491089][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.790035][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.461585][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.484048][T12217] gretap0: refused to change device tx_queue_len [ 537.482323][T12217] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 537.504600][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.402612][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.409156][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2258'. [ 538.465173][T12243] Invalid option length (57448) for dns_resolver key [ 538.863041][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.888867][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2258'. [ 541.090095][T12265] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 541.090095][T12265] The task syz.1.2259 (12265) triggered the difference, watch for misbehavior. [ 541.157129][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.165570][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.581109][ T3577] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 542.001653][ T3577] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.212461][ T3577] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 542.298204][ T3577] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 542.369899][ T3577] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.410822][ T3577] usb 8-1: config 0 descriptor?? [ 542.483678][ T3577] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 542.528712][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.575265][ T3577] dvb-usb: bulk message failed: -22 (3/0) [ 545.347888][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.552261][ T3577] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 545.563700][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.581590][ T3577] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 545.651447][ T3577] usb 8-1: media controller created [ 545.673533][ T3577] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.723476][ T3577] dvb-usb: bulk message failed: -22 (6/0) [ 545.760652][ T3577] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 545.823742][ T3577] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11 [ 545.878621][ T3577] dvb-usb: schedule remote query interval to 150 msecs. [ 545.951647][ T3577] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 545.998613][ T3577] usb 8-1: USB disconnect, device number 4 [ 546.137139][ T3577] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 546.411793][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.564415][T12339] loop8: detected capacity change from 0 to 128 [ 547.597125][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.692092][T12339] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 547.750429][T12346] lo speed is unknown, defaulting to 1000 [ 547.757707][T12339] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 548.050401][T12342] loop7: detected capacity change from 0 to 8192 [ 548.211388][T12339] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 548.221488][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.390343][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.398906][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.529822][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.545990][T12392] loop8: detected capacity change from 0 to 128 [ 550.853894][T12392] msdos filesystem being mounted at /221/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 551.616780][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.714859][ T5061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.738232][ T5061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.779523][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 552.631341][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.038873][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.543917][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.144885][T12465] bridge0: port 1(syz_tun) entered blocking state [ 555.151597][T12465] bridge0: port 1(syz_tun) entered forwarding state [ 555.166969][T12465] device bridge0 left promiscuous mode [ 555.177582][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 555.187544][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 555.289338][T12465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.847722][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.991076][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.119050][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.185022][ T7161] Bluetooth: hci0: command 0x0401 tx timeout [ 558.192213][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.202860][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.398840][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.654442][T12515] loop7: detected capacity change from 0 to 4096 [ 559.799102][T12525] device syz_tun left promiscuous mode [ 560.034077][T12525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.201295][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d5e1800: rx timeout, send abort [ 560.521972][ T154] bond0: (slave syz_tun): interface is now down [ 560.564826][ T154] bond0: now running without any active interface! [ 560.576030][ T4394] Bluetooth: hci0: command 0x0c1a tx timeout [ 560.593676][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.701432][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d5e0400: rx timeout, send abort [ 560.714661][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d5e1800: abort rx timeout. Force session deactivation [ 560.765496][T12522] lo speed is unknown, defaulting to 1000 [ 560.860127][T12515] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 561.209784][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d5e0400: abort rx timeout. Force session deactivation [ 561.742039][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.808331][T12545] overlayfs: failed to clone upperpath [ 562.033338][T12547] overlayfs: failed to clone upperpath [ 562.955536][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.961947][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.058481][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.067309][ T2324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.252882][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'. [ 563.575830][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2329'. [ 564.390285][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.013441][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.229337][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.673965][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.682482][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.699521][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.191179][T12618] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 571.213039][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.451270][ T7166] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 572.286933][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.376944][T12645] loop7: detected capacity change from 0 to 256 [ 572.457745][T12645] vfat filesystem being mounted at /214/bus supports timestamps until 2107-12-31 (0x10391447e) [ 572.471336][ T7166] usb 9-1: Using ep0 maxpacket: 8 [ 572.515767][T12649] Set syz1 is full, maxelem 768 reached [ 572.591537][ T7166] usb 9-1: config 0 has no interfaces? [ 572.597198][ T7166] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 572.681238][ T7166] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.703542][ T7774] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 572.732218][ T7166] usb 9-1: config 0 descriptor?? [ 572.774311][ T7774] FAT-fs (loop7): Filesystem has been set read-only [ 572.822302][ T7774] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 572.846795][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.369736][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.797362][T11756] usb 9-1: USB disconnect, device number 4 [ 574.005317][T12695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 574.013677][T12695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 574.304636][T12695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.801402][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.845433][T12705] netlink: zone id is out of range [ 574.883757][T12705] netlink: zone id is out of range [ 574.889104][T12705] netlink: zone id is out of range [ 574.945913][T12705] netlink: zone id is out of range [ 574.982321][T12705] netlink: zone id is out of range [ 575.032029][T12705] netlink: zone id is out of range [ 575.067988][T12705] netlink: zone id is out of range [ 575.180456][T12714] lo speed is unknown, defaulting to 1000 [ 575.241481][T12705] netlink: zone id is out of range [ 575.246726][T12705] netlink: zone id is out of range [ 576.461224][ T4233] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.585529][ T4233] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.785450][T12721] lo speed is unknown, defaulting to 1000 [ 577.917012][ T4233] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.071400][ T2324] Bluetooth: hci0: command 0x0409 tx timeout [ 578.493994][ T4233] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.676080][T12721] chnl_net:caif_netlink_parms(): no params data found [ 579.017599][T12775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 579.030782][T12775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 579.147678][T12775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 579.156384][T12775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 579.168101][T12775] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.674112][T12778] device ip6gre2 entered promiscuous mode [ 579.709818][ T4394] lo speed is unknown, defaulting to 1000 [ 579.888298][T12721] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.895701][T12721] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.904493][T12721] device bridge_slave_0 entered promiscuous mode [ 579.954204][T12721] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.005609][T12721] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.711262][T12721] device bridge_slave_1 entered promiscuous mode [ 583.717906][ T23] net_ratelimit: 33 callbacks suppressed [ 583.717926][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.723594][ T4394] Bluetooth: hci0: command 0x041b tx timeout [ 583.752445][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.880764][T12721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.936753][T12721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.089523][T12721] team0: Port device team_slave_0 added [ 584.121358][T12721] team0: Port device team_slave_1 added [ 584.181563][ T4233] bond1: (slave ip6gretap1): Releasing backup interface [ 584.267994][T12721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.289694][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.372269][T12721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.468840][T12721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.476482][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.557203][T12721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.730450][T12721] device hsr_slave_0 entered promiscuous mode [ 584.814652][T12721] device hsr_slave_1 entered promiscuous mode [ 584.858832][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.751185][ T4394] Bluetooth: hci0: command 0x040f tx timeout [ 585.935996][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.941330][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.001641][ T4394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.037846][T12832] loop8: detected capacity change from 0 to 1024 [ 587.613592][T12721] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 588.061463][T12721] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 588.307435][T12721] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 588.397339][ T2324] Bluetooth: hci0: command 0x0419 tx timeout [ 588.439522][ T2324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.491486][T12721] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 588.556671][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.697526][ T4233] device hsr_slave_0 left promiscuous mode [ 588.786424][ T4233] device hsr_slave_1 left promiscuous mode [ 588.794932][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.833069][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.892454][ T4233] device bridge_slave_1 left promiscuous mode [ 588.898754][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.967948][ T4233] device bridge_slave_0 left promiscuous mode [ 588.986686][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.065377][ T4233] bond1 (unregistering): Released all slaves [ 589.312694][ T4233] team0 (unregistering): Port device team_slave_1 removed [ 589.350138][ T4233] team0 (unregistering): Port device team_slave_0 removed [ 589.390156][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.422775][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.510182][ T2324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.639428][ T4233] bond0 (unregistering): Released all slaves [ 589.873613][T12721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.932725][T12721] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.939963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 589.962065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 589.985062][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.011638][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 590.021937][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 590.043956][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.051282][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.084784][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 590.137716][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 590.168516][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.175681][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.232721][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 590.281486][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 590.312523][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 590.373163][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 590.401674][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 590.429673][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 590.449633][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 590.497274][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 590.539827][T12721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.568069][ T2324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.584265][T12721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.623337][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 590.670000][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 590.705700][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 590.717546][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 590.745922][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 591.672848][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.732211][T12894] lo speed is unknown, defaulting to 1000 [ 593.184320][ T7158] Bluetooth: hci5: command 0x0409 tx timeout [ 593.184747][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.626333][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.669222][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.234063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 595.261236][ T7160] Bluetooth: hci5: command 0x041b tx timeout [ 595.300193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 595.353440][T12721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.719358][T12939] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2403'. [ 596.373292][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.415830][T12894] chnl_net:caif_netlink_parms(): no params data found [ 596.574601][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2401'. [ 597.351654][ T7160] Bluetooth: hci5: command 0x040f tx timeout [ 597.747314][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.826357][T12894] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.854868][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.950420][T12894] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.063941][T12894] device bridge_slave_0 entered promiscuous mode [ 598.101585][T12964] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.110418][T12964] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.119485][T12964] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.128628][T12964] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.873805][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.900853][T12964] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.910721][T12964] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.919844][T12964] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.928749][T12964] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.966038][T12894] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.981403][T12894] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.989810][T12894] device bridge_slave_1 entered promiscuous mode [ 599.011321][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.171623][T12894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.236522][T12894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.981528][ T7160] Bluetooth: hci5: command 0x0419 tx timeout [ 600.085936][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 600.103847][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.116310][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 600.197936][T12894] team0: Port device team_slave_0 added [ 600.225128][T12721] device veth0_vlan entered promiscuous mode [ 600.261818][T12721] device veth1_vlan entered promiscuous mode [ 600.306049][T12984] IPv6: NLM_F_CREATE should be specified when creating new route [ 600.326422][T12894] team0: Port device team_slave_1 added [ 600.412412][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 600.463783][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 600.508781][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 600.818892][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 600.866273][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.417581][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.456938][T12894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.481053][T12894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.559366][T12894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.681122][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 601.737122][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 601.765586][T12894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.835828][T12894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.451086][T12894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.521430][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.526517][T12721] device veth0_macvtap entered promiscuous mode [ 602.571213][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.592986][T13013] loop8: detected capacity change from 0 to 64 [ 602.602162][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.651966][T12721] device veth1_macvtap entered promiscuous mode [ 602.667707][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 602.717325][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 603.643224][ T26] audit: type=1800 audit(4147484619.304:198): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2417" name="file7" dev="loop8" ino=30 res=0 errno=0 [ 603.675652][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.684590][T12714] bond0: (slave syz_tun): Releasing backup interface [ 603.799364][T12894] device hsr_slave_0 entered promiscuous mode [ 603.877507][T12894] device hsr_slave_1 entered promiscuous mode [ 603.912252][T12894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.915895][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.940455][T12894] Cannot create hsr debugfs directory [ 603.963891][T12721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.987592][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 604.018418][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 604.085204][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.117812][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.150159][T12721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.199459][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 604.219116][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 604.229432][T13040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.239572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.259379][T13040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.268352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.320890][T12721] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.340256][T12721] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.349951][T12721] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.369073][T12721] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.742316][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.840378][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.921842][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.930006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 604.978718][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.960640][ T7] net_ratelimit: 8 callbacks suppressed [ 606.960662][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.075716][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2428'. [ 607.111139][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 607.172545][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.217074][T13075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.224480][T13075] IPv6: NLM_F_CREATE should be set when creating new route [ 608.588511][T13075] bridge0: port 1(syz_tun) entered disabled state [ 609.331552][T13075] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.340710][T13075] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.352216][T13075] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.362796][T13075] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.318398][T13106] MPTCP: addr_signal error, add_addr=1, echo=0 [ 611.730573][T13107] MPTCP: addr_signal error, rm_addr=1 [ 611.788612][T13075] device ip6gre1 left promiscuous mode [ 611.830747][T13075] device bridge1 left promiscuous mode [ 611.906026][T13075] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.915224][T13075] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.924521][T13075] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.933548][T13075] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.870092][T13126] overlayfs: failed to clone upperpath [ 615.290310][T13162] overlayfs: failed to clone upperpath [ 615.378803][T12894] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 615.381014][ T7] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 615.419539][T12894] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 615.441209][T12894] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 615.460082][T12894] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.071139][ T7] usb 10-1: Using ep0 maxpacket: 16 [ 616.199286][ T7] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.631064][ T7] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.716373][ T7] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 616.923313][ T7] usb 10-1: config 0 interface 0 has no altsetting 0 [ 616.930082][ T7] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 616.939800][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.950724][ T7] usb 10-1: config 0 descriptor?? [ 617.389312][T13181] loop8: detected capacity change from 0 to 128 [ 617.701821][T12894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.709623][T13181] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 617.776413][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.787412][T13181] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 617.792718][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.820655][ T7] hid (null): unknown global tag 0xd [ 617.850823][ T7] hid (null): invalid report_count -1507555480 [ 617.867024][T12894] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.881777][ T7] hid (null): report_id 0 is invalid [ 617.903526][ T7] hid (null): unknown global tag 0xc [ 617.927365][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 617.946466][ T7] hid (null): report_id 915 is invalid [ 617.947695][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.027080][ T5042] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.034217][ T5042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.109527][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.131224][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 618.174984][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.187024][ T7] usb 10-1: USB disconnect, device number 2 [ 618.205424][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.250157][ T5056] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.257418][ T5056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.322184][T13204] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 618.344725][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.510825][T12894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 618.573094][T12894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.621036][ T26] audit: type=1326 audit(4147484634.254:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13211 comm="syz.8.2466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa995581799 code=0x0 [ 618.746873][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.757997][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.773652][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 618.842555][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 620.456888][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.566931][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 620.784022][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.795714][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 620.804906][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.819880][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 620.828912][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.726256][T12894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.784958][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.814364][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 623.764261][ T26] audit: type=1326 audit(4147484639.424:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13259 comm="syz.8.2474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa995581799 code=0x0 [ 623.971857][T13270] netlink: 'syz.5.2476': attribute type 1 has an invalid length. [ 624.246724][T13278] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 624.794974][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.801345][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.955267][T13278] bond0: (slave vxcan3): Error -22 calling dev_set_mtu [ 625.188740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.216849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.410750][T12894] device veth0_vlan entered promiscuous mode [ 625.424309][T12894] device veth1_vlan entered promiscuous mode [ 625.439279][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 625.448965][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 625.467789][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 625.536100][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 626.472270][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.521707][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.784606][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.805882][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.296559][T13314] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2481'. [ 627.319665][T12894] device veth0_macvtap entered promiscuous mode [ 627.341308][T12894] device veth1_macvtap entered promiscuous mode [ 627.509032][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.724461][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.736213][T12894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.748287][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.759423][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.770861][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.783996][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.805405][T12894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.813520][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.142382][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.358685][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.760790][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 628.775276][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 628.807346][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.738686][T12894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.871379][T12894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.978872][T12894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.071882][T12894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.230175][ T5056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.257041][ T5056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.288170][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 630.308775][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2496'. [ 630.336146][T13365] netlink: 'syz.9.2497': attribute type 10 has an invalid length. [ 630.346043][T13362] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2496'. [ 630.385113][ T5056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.419800][ T5056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.440650][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 631.092009][T13383] wireguard: wg2: Could not create IPv4 socket [ 632.122319][T13391] overlayfs: failed to clone upperpath [ 632.356284][T13396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 632.363895][T13396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 633.181208][T13396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.328275][T13414] device ip6gre3 entered promiscuous mode [ 634.534794][T13437] xt_policy: neither incoming nor outgoing policy selected [ 636.493928][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2519'. [ 642.629802][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 642.989585][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'. [ 643.096705][T13560] xt_hashlimit: max too large, truncated to 1048576 [ 645.057621][T13589] loop8: detected capacity change from 0 to 16 [ 645.138327][T13589] erofs: (device loop8): mounted with root inode @ nid 36. [ 645.475436][T13606] gfs2: gfs2 mount does not exist [ 645.862728][ T26] audit: type=1326 audit(4147484661.524:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 646.219861][ T26] audit: type=1326 audit(4147484661.544:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 646.368731][T13612] loop4: detected capacity change from 0 to 256 [ 646.371272][ T26] audit: type=1326 audit(4147484661.544:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 646.489286][ T26] audit: type=1326 audit(4147484661.544:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 646.584519][ T26] audit: type=1326 audit(4147484661.554:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 646.618106][ T26] audit: type=1326 audit(4147484661.554:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 646.760826][T13625] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2552'. [ 646.870710][T13612] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 647.557019][ T26] audit: type=1326 audit(4147484661.554:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 647.613664][T13612] exfat filesystem being mounted at /10/file1 supports timestamps until 2107-12-31 (0x10391447f) [ 647.653624][ T26] audit: type=1326 audit(4147484661.554:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 647.941136][ T26] audit: type=1326 audit(4147484661.564:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 648.233375][ T26] audit: type=1326 audit(4147484661.564:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7fc00000 [ 649.446123][T11756] hid-generic 0004:0004:FFFF0001.0002: unknown main item tag 0x0 [ 649.578471][T11756] hid-generic 0004:0004:FFFF0001.0002: unknown main item tag 0x0 [ 649.623862][T11756] hid-generic 0004:0004:FFFF0001.0002: unknown main item tag 0x0 [ 649.693077][T11756] hid-generic 0004:0004:FFFF0001.0002: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 651.427782][T13665] fido_id[13665]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 651.621287][T13677] loop4: detected capacity change from 0 to 40427 [ 651.722282][T13677] F2FS-fs (loop4): invalid crc value [ 651.793433][T13677] F2FS-fs (loop4): Found nat_bits in checkpoint [ 652.092005][T13677] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 653.565098][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 653.565114][ T26] audit: type=1800 audit(4147484669.224:216): pid=13677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2567" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 653.840658][ T26] audit: type=1800 audit(4147484669.344:217): pid=13710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2567" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 654.610752][T13718] xt_connbytes: Forcing CT accounting to be enabled [ 654.618399][T13718] set match dimension is over the limit! [ 657.531757][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2578'. [ 657.553576][T13726] loop9: detected capacity change from 0 to 128 [ 657.597509][T12894] attempt to access beyond end of device [ 657.597509][T12894] loop4: rw=2049, want=45104, limit=40427 [ 657.692371][T13726] FAT-fs (loop9): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 658.891409][T13747] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.012418][T13747] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.268446][T13767] loop4: detected capacity change from 0 to 1024 [ 659.278902][T13747] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.308928][T13772] device team1 left promiscuous mode [ 661.327819][T13772] device team2 left promiscuous mode [ 661.339369][T13772] device bridge2 left promiscuous mode [ 661.348121][T13772] device bridge6 left promiscuous mode [ 661.389403][T13772] device veth19 left promiscuous mode [ 661.417820][T13076] lo speed is unknown, defaulting to 1000 [ 661.551496][T13807] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2593'. [ 661.577744][T13747] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.627004][T13811] IPv6: NLM_F_CREATE should be specified when creating new route [ 661.650821][T13807] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2593'. [ 661.762802][T13747] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.797137][T13747] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.812619][T13747] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.840596][T13747] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.225193][T13865] hugetlbfs: syz.1.2604 (13865): Using mlock ulimits for SHM_HUGETLB is deprecated [ 665.783572][T13904] syz.9.2613 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 665.818077][T13904] loop9: detected capacity change from 0 to 1024 [ 666.079182][T13904] EXT4-fs (loop9): Ignoring removed orlov option [ 666.659738][T13904] EXT4-fs (loop9): mounted filesystem without journal. Opts: orlov,usrjquota=,,errors=continue. Quota mode: none. [ 666.747134][ T26] audit: type=1800 audit(4147484682.404:218): pid=13904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2613" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 666.848860][T13904] Trying to write to read-only block-device loop9 [ 666.880311][T13915] syzkaller0: Caught tx_queue_len zero misconfig [ 666.902465][T13915] tipc: Started in network mode [ 666.907479][T13915] tipc: Node identity 7a4eb1ec7f0a, cluster identity 4711 [ 666.945255][T13904] Trying to write to read-only block-device loop9 [ 666.953877][T13915] tipc: Enabled bearer , priority 0 [ 666.984669][T13904] Trying to write to read-only block-device loop9 [ 667.004824][T13923] EXT4-fs error (device loop9): mb_free_blocks:1874: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 667.020358][T13904] Trying to write to read-only block-device loop9 [ 667.639992][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2625'. [ 667.714566][T13950] bond4: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 667.727124][ T5037] Trying to write to read-only block-device loop9 [ 667.736098][T12721] Trying to write to read-only block-device loop9 [ 667.758976][T12721] Trying to write to read-only block-device loop9 [ 667.771069][ T5037] Trying to write to read-only block-device loop9 [ 667.782235][T13950] bond4: (slave ip_vti0): Error -95 calling set_mac_address [ 667.799822][T12721] Trying to write to read-only block-device loop9 [ 667.808441][T12721] Trying to write to read-only block-device loop9 [ 667.824887][T13949] bond4 (unregistering): Released all slaves [ 669.373223][T11756] tipc: Node number set to 88388076 [ 670.509203][T13986] loop4: detected capacity change from 0 to 4096 [ 671.689418][ T26] audit: type=1326 audit(4147484687.344:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa995581799 code=0x7ffc0000 [ 671.846081][ T26] audit: type=1326 audit(4147484687.474:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 672.148550][ T26] audit: type=1326 audit(4147484687.474:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 673.196480][ T26] audit: type=1326 audit(4147484687.474:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 673.282389][ T26] audit: type=1326 audit(4147484687.474:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 673.308201][ T26] audit: type=1326 audit(4147484687.474:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 673.332044][ T26] audit: type=1326 audit(4147484687.474:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 673.355115][ T26] audit: type=1326 audit(4147484687.474:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 673.395141][ T26] audit: type=1326 audit(4147484687.484:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 673.473676][T14032] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2644'. [ 673.933508][ T26] audit: type=1326 audit(4147484687.484:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 674.149404][T14037] loop9: detected capacity change from 0 to 512 [ 674.241761][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2646'. [ 674.447363][ T26] audit: type=1326 audit(4147484687.484:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa99558142b code=0x7ffc0000 [ 674.484595][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'. [ 674.497170][T14037] device syz_tun entered promiscuous mode [ 674.524389][T14037] device macsec1 entered promiscuous mode [ 674.539089][T14037] device syz_tun left promiscuous mode [ 675.928265][T14067] netlink: 'syz.4.2653': attribute type 1 has an invalid length. [ 676.961347][T14067] device ipvlan2 entered promiscuous mode [ 677.231970][T14081] wlan0 speed is unknown, defaulting to 1000 [ 677.238146][T14081] wlan0 speed is unknown, defaulting to 1000 [ 677.410748][T14081] wlan0 speed is unknown, defaulting to 1000 [ 678.176194][T14081] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 678.305223][T14081] wlan0 speed is unknown, defaulting to 1000 [ 678.349632][T14081] wlan0 speed is unknown, defaulting to 1000 [ 678.385836][T14081] wlan0 speed is unknown, defaulting to 1000 [ 679.921266][T14081] wlan0 speed is unknown, defaulting to 1000 [ 680.025577][T14081] wlan0 speed is unknown, defaulting to 1000 [ 680.039336][T14120] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2664'. [ 680.055203][T14081] wlan0 speed is unknown, defaulting to 1000 [ 683.263875][T14162] blk_update_request: I/O error, dev loop11, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 683.276225][T14162] ADFS-fs (loop11): error: unable to read block 3, try 0 [ 684.383336][T14181] Cannot find add_set index 0 as target [ 685.824057][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.830657][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.137615][T14198] loop9: detected capacity change from 0 to 1024 [ 693.474659][T14281] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 693.690327][T14281] bond1: (slave gretap1): making interface the new active one [ 693.716316][T14281] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 696.896740][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2716'. [ 699.871004][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2721'. [ 700.906725][T14381] device syzkaller0 entered promiscuous mode [ 701.156129][T14387] device syzkaller0 entered promiscuous mode [ 702.883060][T14409] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2731'. [ 702.992926][T14412] netlink: 'syz.8.2733': attribute type 39 has an invalid length. [ 703.111332][T14422] netlink: 'syz.9.2736': attribute type 1 has an invalid length. [ 703.242408][T14424] bond1: (slave gretap1): making interface the new active one [ 703.271425][ T7166] Bluetooth: hci0: command 0x0406 tx timeout [ 703.308499][T14424] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 703.324576][T14422] device macvlan2 entered promiscuous mode [ 703.353797][T14422] device bond1 entered promiscuous mode [ 703.384895][T14422] device gretap1 entered promiscuous mode [ 703.403902][T14422] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 703.433713][T14422] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 703.521493][T14422] device bond1 left promiscuous mode [ 703.533742][T14422] device gretap1 left promiscuous mode [ 704.411055][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2741'. [ 706.002240][T14487] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2748'. [ 706.551325][T14477] orangefs_mount: mount request failed with -4 [ 707.024563][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'. [ 707.074311][T14491] bond2: option mode: unable to set because the bond device has slaves [ 707.167917][T14491] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 707.213583][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 707.213600][ T26] audit: type=1326 audit(4147484722.874:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 707.463333][ T26] audit: type=1326 audit(4147484722.874:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 707.596269][ T26] audit: type=1326 audit(4147484722.904:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 707.622728][ T26] audit: type=1326 audit(4147484722.904:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 707.673989][T14499] bond2: (slave veth21): Enslaving as a backup interface with a down link [ 707.768961][ T26] audit: type=1326 audit(4147484722.904:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 708.025829][T14497] netlink: 'syz.8.2753': attribute type 16 has an invalid length. [ 708.076696][T14497] netlink: 'syz.8.2753': attribute type 17 has an invalid length. [ 708.247995][ T26] audit: type=1326 audit(4147484722.904:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 708.313247][T14507] netlink: 'syz.4.2755': attribute type 39 has an invalid length. [ 708.381021][ T26] audit: type=1326 audit(4147484722.904:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 708.437340][ T26] audit: type=1326 audit(4147484722.904:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 708.471293][T14509] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2755'. [ 708.689226][ T26] audit: type=1326 audit(4147484722.904:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 709.685796][ T26] audit: type=1326 audit(4147484722.904:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.4.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dff5799 code=0x7ffc0000 [ 709.899653][T14530] overlayfs: failed to clone upperpath [ 709.993173][T14534] netlink: 'syz.5.2761': attribute type 10 has an invalid length. [ 713.061351][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2763'. [ 713.787650][T14562] netlink: 'syz.4.2765': attribute type 1 has an invalid length. [ 713.938381][T14566] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 714.436815][T14566] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 715.131209][T13076] Bluetooth: hci5: command 0x0406 tx timeout [ 715.165080][T14586] netlink: 'syz.5.2774': attribute type 39 has an invalid length. [ 715.631082][T14602] netlink: 'syz.4.2778': attribute type 10 has an invalid length. [ 715.694998][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2780'. [ 715.778452][T14608] netlink: 'syz.5.2781': attribute type 16 has an invalid length. [ 715.809548][T14608] netlink: 'syz.5.2781': attribute type 17 has an invalid length. [ 716.333990][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 716.555467][T14616] __sock_release: fasync list not empty! [ 716.578608][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 716.635710][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 716.699368][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 716.726445][T14608] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 717.424481][T14645] netlink: 'syz.9.2789': attribute type 39 has an invalid length. [ 717.519694][T14648] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2789'. [ 717.761515][T14658] netlink: 'syz.1.2791': attribute type 10 has an invalid length. [ 718.008442][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2793'. [ 720.337960][T14693] loop4: detected capacity change from 0 to 256 [ 721.477427][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 721.477447][ T26] audit: type=1326 audit(4147484736.215:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 721.532714][T14693] vfat filesystem being mounted at /54/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 721.668395][T14701] netlink: 'syz.1.2803': attribute type 1 has an invalid length. [ 721.709473][ T26] audit: type=1326 audit(4147484736.243:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 721.812616][ T26] audit: type=1326 audit(4147484736.243:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef88a1642b code=0x7ffc0000 [ 721.837784][ T26] audit: type=1326 audit(4147484736.243:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef88a1642b code=0x7ffc0000 [ 721.879189][ T26] audit: type=1326 audit(4147484736.243:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef88a1642b code=0x7ffc0000 [ 722.511360][ T26] audit: type=1326 audit(4147484736.243:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef88a1642b code=0x7ffc0000 [ 722.625112][ T26] audit: type=1326 audit(4147484736.243:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef88a1642b code=0x7ffc0000 [ 722.681504][ T26] audit: type=1326 audit(4147484736.243:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef88a1642b code=0x7ffc0000 [ 722.757355][ T26] audit: type=1326 audit(4147484736.243:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef88a1642b code=0x7ffc0000 [ 722.787269][T14703] bond4: (slave gretap2): making interface the new active one [ 722.823161][T14703] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 722.832168][ T26] audit: type=1326 audit(4147484736.243:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.5.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef88a1642b code=0x7ffc0000 [ 722.904706][T14715] tipc: Enabling of bearer rejected, failed to enable media [ 722.942872][T14728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.375364][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2813'. [ 725.530975][T14759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 725.569975][T14750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 725.693838][T14760] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 725.926987][T14769] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 725.936916][T14767] IPVS: stopping master sync thread 14769 ... [ 726.102180][T14780] loop9: detected capacity change from 0 to 256 [ 727.488445][T14809] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2822'. [ 728.478483][T14825] loop9: detected capacity change from 0 to 512 [ 728.825641][T14825] loop9: detected capacity change from 0 to 1024 [ 729.785223][T14858] loop4: detected capacity change from 0 to 512 [ 729.849354][T14858] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 729.874427][T14863] tipc: Started in network mode [ 729.879359][T14863] tipc: Node identity 7f000001, cluster identity 4711 [ 729.906441][T14863] tipc: Enabling of bearer rejected, failed to enable media [ 729.941745][T14863] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 729.966278][T14863] tipc: Enabled bearer , priority 10 [ 730.637461][T14858] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 730.925659][T14858] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.059686][T14858] EXT4-fs error (device loop4): ext4_dx_csum_verify:502: inode #2: comm syz.4.2831: dir seems corrupt? Run e2fsck -D. [ 731.170176][T14858] EXT4-fs (loop4): Remounting filesystem read-only [ 731.226075][T14858] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.2831: Directory index failed checksum [ 731.240813][ T4261] tipc: Node number set to 2130706433 [ 731.248431][T14880] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 731.282760][T14880] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 731.510899][T14883] xt_hashlimit: max too large, truncated to 1048576 [ 733.352227][T14858] EXT4-fs (loop4): Remounting filesystem read-only [ 733.402134][T14880] EXT4-fs error (device loop4): ext4_resize_begin:61: comm syz.4.2831: resize_inode disabled but reserved GDT blocks non-zero [ 733.498841][T14880] EXT4-fs (loop4): Remounting filesystem read-only [ 733.821300][T14906] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2840'. [ 740.719974][T14996] xt_policy: neither incoming nor outgoing policy selected [ 741.853856][T15015] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2869'. [ 742.051178][ T7166] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 747.220224][T15034] 9pnet_virtio: no channels available for device syz [ 750.282651][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.289090][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.830952][T15055] xt_policy: neither incoming nor outgoing policy selected [ 750.850785][T15059] futex_wake_op: syz.8.2880 tries to shift op by 144; fix this program [ 751.382852][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 751.895676][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.907654][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.918075][ T7] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 751.927257][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.955993][ T7] usb 5-1: config 0 descriptor?? [ 752.686736][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 752.693163][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 752.716963][ T7] usb 5-1: USB disconnect, device number 2 [ 753.268414][T15152] loop9: detected capacity change from 0 to 4096 [ 753.873382][T15161] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2883'. [ 758.326422][T15209] device batadv_slave_1 entered promiscuous mode [ 758.341082][T15208] device batadv_slave_1 left promiscuous mode [ 759.741547][T15228] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 761.116029][T15239] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 763.375402][T15259] device batadv_slave_1 entered promiscuous mode [ 763.704197][T15258] device batadv_slave_1 left promiscuous mode [ 764.953884][T15283] overlayfs: failed to clone lowerpath [ 766.378620][T15306] 9pnet_virtio: no channels available for device syz [ 771.930758][T15371] syz.4.2939 (15371): drop_caches: 2 [ 772.116560][T15379] VFS: Mount too revealing [ 772.635674][T15380] loop4: detected capacity change from 0 to 131072 [ 772.708311][T15380] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 772.716811][T15380] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 772.756881][T15380] F2FS-fs (loop4): invalid crc value [ 773.029887][T15380] F2FS-fs (loop4): Found nat_bits in checkpoint [ 773.587741][T15380] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 773.594954][T15380] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 773.829215][T15406] netlink: 'syz.1.2949': attribute type 1 has an invalid length. [ 773.984282][T15406] device bond5 entered promiscuous mode [ 774.055284][T15406] 8021q: adding VLAN 0 to HW filter on device bond5 [ 774.114999][T15414] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 774.171292][T15414] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 774.206186][T15414] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 774.329452][T15414] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 774.406269][T15414] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 776.428871][T15445] VFS: Mount too revealing [ 782.927237][T15531] loop4: detected capacity change from 0 to 764 [ 782.980313][T15531] rock: directory entry would overflow storage [ 783.005175][T15531] rock: sig=0x4654, size=5, remaining=4 [ 783.388853][T15544] ipt_CLUSTERIP: Please specify destination IP [ 786.980205][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 786.980223][ T26] audit: type=1326 audit(4147485053.483:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 787.150514][ T26] audit: type=1326 audit(4147485053.521:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 788.487193][T12751] Bluetooth: hci5: command 0x0405 tx timeout [ 788.582000][ T26] audit: type=1326 audit(4147485053.558:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 788.771911][ T26] audit: type=1326 audit(4147485053.558:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 788.894942][ T26] audit: type=1326 audit(4147485053.558:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 788.993054][ T26] audit: type=1326 audit(4147485053.568:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 789.242189][ T26] audit: type=1326 audit(4147485053.568:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 789.468652][ T26] audit: type=1326 audit(4147485053.568:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 789.868515][ T26] audit: type=1326 audit(4147485053.568:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 789.893727][ T26] audit: type=1326 audit(4147485053.568:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.1.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f8cbd799 code=0x7ffc0000 [ 797.386581][T15735] netlink: 'syz.8.3033': attribute type 1 has an invalid length. [ 797.493661][T15737] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 797.566997][T15737] bond5: (slave vxcan1): Error -22 calling dev_set_mtu [ 797.576976][T15731] loop4: detected capacity change from 0 to 32768 [ 797.756813][T15731] XFS (loop4): Mounting V5 Filesystem [ 797.864620][T15731] XFS (loop4): Ending clean mount [ 797.878202][T15731] XFS (loop4): Quotacheck needed: Please wait. [ 797.960621][T15731] XFS (loop4): Quotacheck: Done. [ 798.939841][T15775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3038'. [ 799.000901][T12894] XFS (loop4): Unmounting Filesystem [ 804.344291][T15867] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 807.649591][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 807.649610][ T26] audit: type=1326 audit(4147485071.200:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 807.755500][ T26] audit: type=1326 audit(4147485071.200:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 807.796625][ T26] audit: type=1326 audit(4147485071.321:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 807.819252][ T26] audit: type=1326 audit(4147485071.321:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 807.857363][ T26] audit: type=1326 audit(4147485071.321:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 808.222091][ T26] audit: type=1326 audit(4147485071.452:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 808.709850][ T26] audit: type=1326 audit(4147485071.452:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 808.769270][ T26] audit: type=1326 audit(4147485071.452:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 810.099316][T15913] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3066'. [ 810.374535][ T26] audit: type=1326 audit(4147485071.602:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 810.401645][ C0] Unknown status report in ack skb [ 810.418070][T15913] netlink: 'syz.4.3066': attribute type 12 has an invalid length. [ 810.456441][ T26] audit: type=1326 audit(4147485071.602:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15870 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef88a16799 code=0x7ffc0000 [ 814.866653][T15967] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3078'. [ 814.881301][T15967] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.890248][T15967] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.898996][T15967] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.907711][T15967] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.921807][T15967] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.930872][T15967] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.939802][T15967] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.949031][T15967] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.711429][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.718219][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.533135][T16017] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3088'. [ 822.805089][T16081] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 829.072894][T16144] tipc: Enabling of bearer rejected, failed to enable media [ 830.491975][ C0] ------------[ cut here ]------------ [ 830.497640][ C0] WARNING: CPU: 0 PID: 16172 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 830.508255][ C0] Modules linked in: [ 830.512197][ C0] CPU: 0 PID: 16172 Comm: syz.8.3119 Not tainted syzkaller #0 [ 830.520011][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.530307][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 830.536709][ C0] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d 4b 2a f8 0f 0b e9 03 ef ff ff e8 01 4b 2a f8 <0f> 0b e9 76 f2 ff ff e8 a5 92 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 830.557357][ C0] RSP: 0000:ffffc900033ef840 EFLAGS: 00010246 [ 830.563548][ C0] RAX: ffffffff894ed60f RBX: ffff888028742268 RCX: ffff8880264ebb80 [ 830.571585][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 830.579698][ C0] RBP: ffffc900033efa68 R08: ffff8880264ebb80 R09: 0000000000000003 [ 830.587876][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888060fa6200 [ 830.595989][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200067df18 [ 830.604232][ C0] FS: 0000555571bbc500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 830.613227][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.619845][ C0] CR2: 0000001b32822ff8 CR3: 0000000073fb0000 CR4: 00000000003506f0 [ 830.627965][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 830.636331][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 830.644445][ C0] Call Trace: [ 830.647745][ C0] [ 830.650701][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 830.656823][ C0] ? verify_lock_unused+0x140/0x140 [ 830.662047][ C0] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 830.667936][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 830.673423][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 830.678938][ C0] __iterate_interfaces+0x243/0x500 [ 830.684181][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 830.690576][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 830.696874][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 830.704181][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 830.709428][ C0] ? hw_scan_work+0xed0/0xed0 [ 830.714147][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 830.719416][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 830.724561][ C0] hrtimer_run_softirq+0x176/0x240 [ 830.729716][ C0] handle_softirqs+0x339/0x830 [ 830.734596][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 830.739672][ C0] ? do_softirq+0x210/0x210 [ 830.744298][ C0] __irq_exit_rcu+0x13b/0x230 [ 830.749008][ C0] ? irq_exit_rcu+0x20/0x20 [ 830.753556][ C0] irq_exit_rcu+0x5/0x20 [ 830.757905][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 830.763672][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 830.769688][ C0] RIP: 0033:0x7fa995451c40 [ 830.774242][ C0] Code: 0f 7e c1 66 48 0f 7e ca 48 39 c2 73 65 48 39 f0 0f 82 2a 01 00 00 48 39 f2 72 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 [ 830.793927][ C0] RSP: 002b:00007ffe2c39e760 EFLAGS: 00000283 [ 830.800032][ C0] RAX: 00007fa9952ef428 RBX: 00007fa9952da428 RCX: ffffffff81ae1e2c [ 830.808171][ C0] RDX: ffffffff81ae3d6a RSI: 00007fa9952ef428 RDI: 00007fa9952df6c8 [ 830.816208][ C0] RBP: 00007fa9952b7508 R08: 00007fa9957e5000 R09: 00007fa9957fb038 [ 830.824331][ C0] R10: 0000000000000003 R11: 0000000000000005 R12: 00007fa995307890 [ 830.832557][ C0] R13: 000000000000001d R14: 000000000000a071 R15: 0000000000000003 [ 830.840923][ C0] ? count_memcg_event_mm+0x21c/0x370 [ 830.846518][ C0] ? finish_fault+0x1ea/0x8d0 [ 830.851235][ C0] [ 830.854272][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 830.861566][ C0] CPU: 0 PID: 16172 Comm: syz.8.3119 Not tainted syzkaller #0 [ 830.869041][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.879106][ C0] Call Trace: [ 830.882399][ C0] [ 830.885343][ C0] dump_stack_lvl+0x188/0x250 [ 830.890052][ C0] ? show_regs_print_info+0x20/0x20 [ 830.895285][ C0] ? load_image+0x400/0x400 [ 830.899915][ C0] panic+0x2e5/0x810 [ 830.903847][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 830.908607][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 830.914465][ C0] __warn+0x248/0x2b0 [ 830.918471][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 830.924227][ C0] report_bug+0x1b7/0x2e0 [ 830.928669][ C0] handle_bug+0x3a/0x70 [ 830.932848][ C0] exc_invalid_op+0x16/0x40 [ 830.937373][ C0] asm_exc_invalid_op+0x16/0x20 [ 830.942236][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 830.948635][ C0] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d 4b 2a f8 0f 0b e9 03 ef ff ff e8 01 4b 2a f8 <0f> 0b e9 76 f2 ff ff e8 a5 92 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 830.968708][ C0] RSP: 0000:ffffc900033ef840 EFLAGS: 00010246 [ 830.974805][ C0] RAX: ffffffff894ed60f RBX: ffff888028742268 RCX: ffff8880264ebb80 [ 830.982806][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 830.990830][ C0] RBP: ffffc900033efa68 R08: ffff8880264ebb80 R09: 0000000000000003 [ 830.998923][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888060fa6200 [ 831.006923][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200067df18 [ 831.015013][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 831.020883][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 831.026932][ C0] ? verify_lock_unused+0x140/0x140 [ 831.032332][ C0] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 831.038308][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 831.043906][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 831.049673][ C0] __iterate_interfaces+0x243/0x500 [ 831.054924][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 831.061318][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 831.067712][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 831.074897][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 831.080156][ C0] ? hw_scan_work+0xed0/0xed0 [ 831.084867][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 831.090115][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 831.095353][ C0] hrtimer_run_softirq+0x176/0x240 [ 831.100502][ C0] handle_softirqs+0x339/0x830 [ 831.105296][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 831.110178][ C0] ? do_softirq+0x210/0x210 [ 831.114723][ C0] __irq_exit_rcu+0x13b/0x230 [ 831.119431][ C0] ? irq_exit_rcu+0x20/0x20 [ 831.123967][ C0] irq_exit_rcu+0x5/0x20 [ 831.128334][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 831.134107][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 831.140121][ C0] RIP: 0033:0x7fa995451c40 [ 831.144561][ C0] Code: 0f 7e c1 66 48 0f 7e ca 48 39 c2 73 65 48 39 f0 0f 82 2a 01 00 00 48 39 f2 72 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 [ 831.164432][ C0] RSP: 002b:00007ffe2c39e760 EFLAGS: 00000283 [ 831.170545][ C0] RAX: 00007fa9952ef428 RBX: 00007fa9952da428 RCX: ffffffff81ae1e2c [ 831.178548][ C0] RDX: ffffffff81ae3d6a RSI: 00007fa9952ef428 RDI: 00007fa9952df6c8 [ 831.186668][ C0] RBP: 00007fa9952b7508 R08: 00007fa9957e5000 R09: 00007fa9957fb038 [ 831.194677][ C0] R10: 0000000000000003 R11: 0000000000000005 R12: 00007fa995307890 [ 831.202764][ C0] R13: 000000000000001d R14: 000000000000a071 R15: 0000000000000003 [ 831.210864][ C0] ? count_memcg_event_mm+0x21c/0x370 [ 831.216354][ C0] ? finish_fault+0x1ea/0x8d0 [ 831.221243][ C0] [ 831.224869][ C0] Kernel Offset: disabled [ 831.229668][ C0] Rebooting in 86400 seconds..