last executing test programs: 8.912493388s ago: executing program 3 (id=2149): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "4461aa", 0x50, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, {[@hopopts={0xff}, @fragment={0xae, 0x0, 0x81, 0x0, 0x0, 0x4, 0x68}, @srh={0x2c, 0x4, 0x4, 0x2, 0x2, 0x20, 0x2, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x8, 0x0, 0x4e21, 0x4e24}}}}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a300000000008000340000000011400000011"], 0x64}}, 0x4000000) 8.902063788s ago: executing program 1 (id=2150): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc8882, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c007f0023dda54f8cddd673e21386c2ce2fdf1e070d8668fbb4585a7bc2a9e3c65fe2f5c4c8ea5e27b49aeaa7084fbedaa938a8b6fa649a8ecbfe1bef520ae06ea46a7fa8fb92c6b56214ae58d5f3b7e926943c83db4134a6eed87169fa0d23037ff3a5af0c7db0abfd43a24e115a12036c70609a813dab8d914334600a000000000000ae00"/143, @ANYRES16=0x0, @ANYBLOB="00032cbd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) utimes(&(0x7f00000053c0)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0xfc, 0x4, 0x0, "37bb54f0"}, 0x0, 0x1, {}, 0x1ff}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) 8.788938711s ago: executing program 0 (id=2151): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000001040)={0x1000200001ee0000, 0x1}) ftruncate(r3, 0x1) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x1, 0x8, 0x0, 0x67, 0x1, 0x7, 0x33, 0x8, @private=0xa010101, @remote, {[@end]}}}}}}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c00)) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r5, 0x0, 0x0) 7.766035594s ago: executing program 0 (id=2153): timer_create(0x0, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f00000001c0)=[{r1}, {r1}], 0x2, 0x9) close(0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x140) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000884}, 0x80) getrlimit(0xb, &(0x7f0000000180)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) 7.53799506s ago: executing program 3 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) fsopen(&(0x7f00000040c0)='bpf\x00', 0x0) open(&(0x7f0000004180)='./file0\x00', 0xd0a80, 0x108) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) syz_pidfd_open(r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) io_pgetevents(0x0, 0xb, 0x4, &(0x7f0000000440)=[{}, {}, {}, {}], &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={0x0}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) futex(0x0, 0x8, 0x2, 0x0, 0x0, 0x1) 7.123322269s ago: executing program 1 (id=2156): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQhiooTWxhEA1BjcmhkTX6tLEv8CdG6OuTExc6d6QEGUDGhdj7p17ZWbaoUNtZwrzPMnQc+acO+ecnnvuPfecDgH0rOHsnyRia0T8EhE7atHGDMO1H9eunJ3688rZqSSq1Vd/T/J8V6+cnSqzlsdtKSIjaUT6QVIU0mhu4cyJyUpl5nQRH5s/+fbY3MKZJ46fnDw2c2zm1MShQwcPjD/91MSTa9LOrF1X95yb3bv7xdcvvjR15OJb33+V1XdrkV7fjlUZXPrWcNbwP6q55rSH4///qbiNZltdOOnvYkW4KX0RkXXXQDb+q9Xq+bq0HfHC+yscvmWdqweso+zetGmZ94v74mK1peSGqcCtIIlu1wDojvJ+nz3/lq8OTj+67vKztQegrN3XilctpT/SIs9A0/PtWhqOiCOLf32WveLG6xB961QFAKDHfDT16eF4fLn5Xxr31OXbXuyhDEXEHRFxZ0TcFRE7I+LuiDzvvRGxq51C6zYImreGls5/0kurb93KsvnfM8XeVuP8r5z9xVBfEduWt38gOXq8MrO/+J2MxMCmLD5+gzK+ef6nj1ul1c//sldWfjkXLOpxqb9pgW56cn4yn5SugcvvRezpj7+r1WpT+5MoeymJiN0RsefmPnp7GTj+6Jd7W2Vauf1LPu66Ndhnqn4R8Uit/xejqf2lZOn+5OC26/uTY/+Lysz+sfKsWOqHHy+80qr89tu/PrL+39x4/hcpny8UgaE36/dr56LFzuXWlmVc+PXDls+Uqz3/B5PX8utRue367uT8/OnxiMHkcB5veH/i+rFlvMyftX9kX5ZStr88Ms2vcVH0/30Rsbd4CLs/Ih4o6v5gRDwUEftatj7iu+dap22E/p+u6/8kms//XedqP8v+X7jpQN+Jb79uVX57/X8wD40U7+TXvxW0W8HV/+YAAADg1pHmKzdJOvpvOE1HR2t/2LszNqeV2bn5x47OvnNqurbCMxQDabnStaNuPXQ8WSw+sRafKNaKy/QDxbrxJ32Rx0enZivTXW479LotLcZ/5jd/cQK3v+X20SaW+UIbcPtpHv9pY/T8y52sDNBRvq8NvWuF8Z92qh5A57n/Q+9abvyfb4rbC4Dbk/s/9C7jH3qX8Q+9q2n898XP3aoJ0EGr+Dq/gMDcwplIN0Q12gq0//9BrHfgjY1RjTYC3b4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArI1/AgAA//8f8uwu") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/125, 0x7d, 0x1, 0x0}, &(0x7f0000000480)=0x40) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x6, 0xc38, &(0x7f0000001140)="$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") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003bf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, 0x0) 7.0795528s ago: executing program 2 (id=2157): r0 = syz_io_uring_setup(0xefd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_ublk_add_dev(r0, r1, 0x0, r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r3, 0xc, 0x4) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) socket$kcm(0xa, 0x2, 0x3a) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000051) 6.122875242s ago: executing program 3 (id=2158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)}}], 0x2, 0x0) 5.263287681s ago: executing program 0 (id=2159): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) 5.167108313s ago: executing program 1 (id=2160): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/125, 0x7d, 0x1, 0x0}, &(0x7f0000000480)=0x40) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x6, 0xc38, &(0x7f0000001140)="$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") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003bf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, 0x0) 5.160415313s ago: executing program 3 (id=2161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x501042, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_open_dev$MSR(&(0x7f0000000200), 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(r2, &(0x7f0000000140)='gid_map\x00') syz_io_uring_setup(0x2520, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x191) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unlinkat(0xffffffffffffffff, 0x0, 0x200) 4.194523715s ago: executing program 3 (id=2162): setpriority(0x0, 0x1, 0xa7a8) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) r2 = add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r2) clock_gettime(0x0, 0x0) 3.727703386s ago: executing program 0 (id=2163): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "4461aa", 0x50, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, {[@hopopts={0xff}, @fragment={0xae, 0x0, 0x81, 0x0, 0x0, 0x4, 0x68}, @srh={0x2c, 0x4, 0x4, 0x2, 0x2, 0x20, 0x2, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x8, 0x0, 0x4e21, 0x4e24}}}}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a300000000008000340000000011400000011"], 0x64}}, 0x4000000) 2.21866326s ago: executing program 2 (id=2164): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x25) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/224, 0xe0, 0x2) read$FUSE(r5, &(0x7f0000012ec0)={0x2020, 0x0, 0x0, 0x0}, 0x2052) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r7, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r10}) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1) 2.066322143s ago: executing program 0 (id=2165): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc8882, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c007f0023dda54f8cddd673e21386c2ce2fdf1e070d8668fbb4585a7bc2a9e3c65fe2f5c4c8ea5e27b49aeaa7084fbedaa938a8b6fa649a8ecbfe1bef520ae06ea46a7fa8fb92c6b56214ae58d5f3b7e926943c83db4134a6eed87169fa0d23037ff3a5af0c7db0abfd43a24e115a12036c70609a813dab8d914334600a000000000000ae00"/143, @ANYRES16=0x0, @ANYBLOB="00032cbd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) utimes(&(0x7f00000053c0)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x28502, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0xfc, 0x4, 0x0, "37bb54f0"}, 0x0, 0x1, {}, 0x1ff}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) 2.065838284s ago: executing program 1 (id=2166): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\r\x00\x00\x00, \x00', @ANYRES64], 0x20) 1.949128256s ago: executing program 2 (id=2167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x200000000000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000540)={0x0, r4, r7, 0x0, 0x0, 0x0, &(0x7f0000000500)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) unshare(0x60400) r10 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000080)={0x9, {0x40, 0x80003, 0x8d0, 0x300}}) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$RTC_IRQP_SET(r11, 0x4008700c, 0x4001c59) syz_emit_ethernet(0x106f, &(0x7f0000000a00)=ANY=[], 0x0) 1.927244827s ago: executing program 1 (id=2168): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQhiooTWxhEA1BjcmhkTX6tLEv8CdG6OuTExc6d6QEGUDGhdj7p17ZWbaoUNtZwrzPMnQc+acO+ecnnvuPfecDgH0rOHsnyRia0T8EhE7atHGDMO1H9eunJ3688rZqSSq1Vd/T/J8V6+cnSqzlsdtKSIjaUT6QVIU0mhu4cyJyUpl5nQRH5s/+fbY3MKZJ46fnDw2c2zm1MShQwcPjD/91MSTa9LOrF1X95yb3bv7xdcvvjR15OJb33+V1XdrkV7fjlUZXPrWcNbwP6q55rSH4///qbiNZltdOOnvYkW4KX0RkXXXQDb+q9Xq+bq0HfHC+yscvmWdqweso+zetGmZ94v74mK1peSGqcCtIIlu1wDojvJ+nz3/lq8OTj+67vKztQegrN3XilctpT/SIs9A0/PtWhqOiCOLf32WveLG6xB961QFAKDHfDT16eF4fLn5Xxr31OXbXuyhDEXEHRFxZ0TcFRE7I+LuiDzvvRGxq51C6zYImreGls5/0kurb93KsvnfM8XeVuP8r5z9xVBfEduWt38gOXq8MrO/+J2MxMCmLD5+gzK+ef6nj1ul1c//sldWfjkXLOpxqb9pgW56cn4yn5SugcvvRezpj7+r1WpT+5MoeymJiN0RsefmPnp7GTj+6Jd7W2Vauf1LPu66Ndhnqn4R8Uit/xejqf2lZOn+5OC26/uTY/+Lysz+sfKsWOqHHy+80qr89tu/PrL+39x4/hcpny8UgaE36/dr56LFzuXWlmVc+PXDls+Uqz3/B5PX8utRue367uT8/OnxiMHkcB5veH/i+rFlvMyftX9kX5ZStr88Ms2vcVH0/30Rsbd4CLs/Ih4o6v5gRDwUEftatj7iu+dap22E/p+u6/8kms//XedqP8v+X7jpQN+Jb79uVX57/X8wD40U7+TXvxW0W8HV/+YAAADg1pHmKzdJOvpvOE1HR2t/2LszNqeV2bn5x47OvnNqurbCMxQDabnStaNuPXQ8WSw+sRafKNaKy/QDxbrxJ32Rx0enZivTXW479LotLcZ/5jd/cQK3v+X20SaW+UIbcPtpHv9pY/T8y52sDNBRvq8NvWuF8Z92qh5A57n/Q+9abvyfb4rbC4Dbk/s/9C7jH3qX8Q+9q2n898XP3aoJ0EGr+Dq/gMDcwplIN0Q12gq0//9BrHfgjY1RjTYC3b4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArI1/AgAA//8f8uwu") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/125, 0x7d, 0x1, 0x0}, &(0x7f0000000480)=0x40) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="6c617374626c6f67ac9f9bea2c94743030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa000033bd97bb000000003b3c6cbb36a8edf44a84b545c800a7934aabb10cb81cb0b504f9add39b31"], 0x6, 0xc38, &(0x7f0000001140)="$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") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003bf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r3, 0x0, 0x0) 1.816873299s ago: executing program 2 (id=2169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)}}], 0x2, 0x0) 849.093662ms ago: executing program 0 (id=2170): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x6, 0xc38, &(0x7f0000001140)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mIhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBfDIYzOxbcUmRtiyKEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8fPHkqfSwWwEAPEiXR79+8rT7PwA8Vq74/38AAAAAAAAAAAAAANjvUhTxZKSYu7yWxqv3HfVL7b6bt8aGhrevdihVNQ9U5cuf+qnTZ85+5YXBc9281J75kPr32+fj1dErFxsfnI+Yn1pYmJpsjM20J2Ynp+56D1X9l2ZvzN1j/a2OVyegceO1m5PXri00Tj9/ZtPHtwbe63/i6MCFwWdPPNMtOzY0PDy6UaTeW752zw3p2GmGx8Eo4kSkeO4HP0+tiChi9+ei/mDHfqtDVSeOV50YGxquOjLdbs0slh+OdE9EEdHoqdTsnqPtxyJqfQ+0DztrRiyVzS8bfLzs3uhca751dXqqMdKaX2wvtmdnRlKntWV/GlHEuRSxHBGr/Xfuri+KqEWK7x1ZS1cj4kD3PHy5mhi8czuKPezjXSjb2eiLWC4egTHbx/qjiFcixS/ePhYT+TpTXWu+FPFKmT+KeLPMFyNS+cU4G/HuNt8jHk21KOIvy/G/sJYmq+tB97py6RuNr81cm+0p272ufMz7wx1Xiod0fzi0JR+MfX5tqkcRreqKv5bu/Tc7AAAAAAAAAAAAAAAAANxvh6KIz0WKl//jT6p5xVHNSz9yYfAPB361d8740x+xn7Ls8xGxVNzdnNyDeWLgSBpJ6SHPJX6c1aOIP83z/77zsBsDAAAAAAAAAAAAAAAAAADwWCviZ5Hi/DvH0nL0rinenrneuNK6Ot1ZFba79m93zfT19fX1RupkM+d4zqWcyzlXcq7mjCLXz9nMOZ5zKedyzpWcqznjQK6fs5lzPOdSzuWcKzlXc0Yt18/ZzDmecynncs6VnKs5Y5+s3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ElSRBEfRIrvfmstRYqIZsR4dHKl/2G3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo9acifhgpGn/UvL2tFhGp+rfjWPnL2WgeLPPT0Rws88VoXszZqrLW/M5DaD+705eK+Gmk6K+/dXvA8/j3dd7d/hrEm9/eePf5WicPdD8ceK//iaNHLgwO/8bTO71O2zXg+KX2zM1bjbGh4eHRns21fPRP92wbyMct7k/XiYiF1994rTU9PTV/7y/Kr8Auqj9CL1LtcempF9WLqO2LZjycvvMYKO//70aK333nP7s3/M79vx6/0nl3+w4f7//Zxv3//NYd3eX9v7a1Xr7/l/f07e7/T/ZsO59/N9JXi6gv3pjrOxpRX3j9jRPtG63rU9enZs6ePPnVwcGvnjnZdzCifq09PdXz6r6cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9dO11IiIW9V8rYELg8+eeOZAHKjmW22at/3q6JWLjZdmb8zNTy0sTE02xmbaE7OTU3d7uHo13WtsaHhPOvORDu1x+w/VX5qde32+ff2PF7f9/HD94tWFxfnWxPYfx6EoIpq9W45XDR4bGq4aPd1uzVRVR7adTP/x9aUi/itSTJxtpC/mbXn+/9YZ/pvm/y9t2svBPZv//6mebeUxUyri/UjxO3/1dHyxaufhuOOc5XJ/FymOn/tCLhcHy3LdNnSeK9CZGViW/b9I8U8fbC7bnQ/55EbZUx/n3D4KyvE/Eil++Bffj9/M2zY//2H78T+8dUd7NP5P9Ww7vOl5BbvuOnn8T0SKF598K34rb/uw5390n71xLBe+/XyOPRr/z/RsG8jH/e3703UAAAAAAAAAAIBHWl8q4u8jxY+Ha+mFvO1u/v7f5NYd7dHf//psz7bJ+7Ne0Ue+2PVJBQAAAIB9oi8V8bNIcX3xrdtzqDfP/+6Z//l7G/M/h9KWT6s/5/u16rkB9/PP/3oN5OOO777bAAAAAAAAAAAAAAAAAAAAsK+kVMQLeT318Wo+/+SO66mvRIqX/+e5XC4dLct114EfqH6tX56dOXFxenp2orXYujo91Rida01MlXWfihRrf/uFXLeo1lfvrjffWeN9Yy32+Ugx/A/dsp212Ltrkz+1UfZUWfZTkeK//3Fz2e461p/ZKHu6LPs3keKb/7J92aMbZc+UZb8fKX7yzUa37OGybPf5qJ/dKPv8xGyxB6MCAAAAAAAAAAAAAAAAAADA46YvFfHnkeJ/byzfnsuf1//v63lbefPbPev9b3GrWud/oFr/f6fX97L+f/VcgaWdjgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9MKYp4I1LMXV5LK/3l+476pfbMzVtjQ8PbVzuUqpoHqvLlT/3U6TNnv/LC4Llufnj9++1z8erolYuNl2ZvzM1PLSxMTTbGZtoTs5NTd72H3dbf6nh1Aho3Xrs5ee3aQuP082c2fXxr4L3+J44OXBh89sQz3bJjQ8PDoz1lan33fPQ7pB22H4wi/jpSPPeDn6cf90cUsftz8RHfnb12qOrE8aoTY0PDVUem262ZxfLDke6JKCIaPZWa3XP0AMZiV5oRS2XzywYfL7s3Oteab12dnmqMtOYX24vt2ZmR1Glt2Z9GFHEuRSxHxGr/nbvriyJeixTfO7KW/rU/4kD3PHz58ujXT57euR3FHvbxLpTtbPRFLBePwJjtY/1RxD9Hil+8fSz+rT+iFp2f+FLEK2X+KOLN6Ix3Kr8YZyPe3eZ7xKOpFkX8fzn+F9bS2/3l9aB7Xbn0jcbXZq7N9pTtXlce+fvDg7TPr031KOIn1RV/Lf27/64BAAAAAAAAAAAAAAAA9pEifj1SnH/nWKrmB9+eU9yeud640ro63ZnW1537150zvb6+vt5InWzmHM+5lHM550rO1ZxR5Po5m2XW19fH8/ulnMs5V3Ku5owDuX7OZs7xnEs5l3Ou5FzNGbVcP2cz53jOpZzLVZfX11fy+9WcsU/m7gEAAAAAAAAAAAAAAAAAAJ8sRfVPiu9+ay2t93fWlx6PTq5YD/QT75cBAAD//wIc9mA=") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003bf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, 0x0) 837.774201ms ago: executing program 2 (id=2171): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) 649.185936ms ago: executing program 1 (id=2172): r0 = syz_io_uring_setup(0xefd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_ublk_add_dev(r0, r1, 0x0, r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r3, 0xc, 0x4) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) socket$kcm(0xa, 0x2, 0x3a) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000051) 15.5471ms ago: executing program 2 (id=2173): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "4461aa", 0x50, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, {[@hopopts={0xff}, @fragment={0xae, 0x0, 0x81, 0x0, 0x0, 0x4, 0x68}, @srh={0x2c, 0x4, 0x4, 0x2, 0x2, 0x20, 0x2, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x8, 0x0, 0x4e21, 0x4e24}}}}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a300000000008000340000000011400000011"], 0x64}}, 0x4000000) 0s ago: executing program 3 (id=2174): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) epoll_create(0x21) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = io_uring_setup(0x89d, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x20000000000000c1, 0x0, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 84320319.607:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.2.380" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 298.875502][ T27] audit: type=1326 audit(1784320319.617:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.2.380" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 299.043039][ T27] audit: type=1326 audit(1784320319.617:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.2.380" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 299.549178][ T27] audit: type=1326 audit(1784320319.617:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.2.380" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 299.895645][ T27] audit: type=1326 audit(1784320319.617:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.2.380" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 299.972975][ T27] audit: type=1326 audit(1784320319.617:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.2.380" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 301.169229][ T7449] xt_l2tp: unknown flags: 17 [ 302.301774][ T7462] loop0: detected capacity change from 0 to 2048 [ 302.352281][ T7462] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 302.408746][ T7462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.447832][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 305.325176][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 305.587344][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 307.894777][ T7504] loop1: detected capacity change from 0 to 32768 [ 307.907999][ T7504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.402 (7504) [ 307.928832][ T7504] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 307.939008][ T7504] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 307.947728][ T7504] BTRFS info (device loop1): setting nodatacow, compression disabled [ 307.955850][ T7504] BTRFS info (device loop1): max_inline at 0 [ 307.961856][ T7504] BTRFS info (device loop1): using free space tree [ 308.180271][ T7509] xt_l2tp: unknown flags: 17 [ 308.346123][ T7504] BTRFS info (device loop1): auto enabling async discard [ 309.026101][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 309.934064][ T7538] misc userio: Invalid payload size [ 310.029947][ T7538] netlink: 120 bytes leftover after parsing attributes in process `syz.3.406'. [ 311.182025][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 312.662602][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 312.736533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 313.950250][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 314.002482][ T7573] loop1: detected capacity change from 0 to 128 [ 314.673487][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 314.673546][ T27] audit: type=1326 audit(1784320337.067:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 315.266614][ T27] audit: type=1326 audit(1784320337.067:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 315.367668][ T27] audit: type=1326 audit(1784320337.077:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 315.454920][ T27] audit: type=1326 audit(1784320337.077:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 315.531700][ T27] audit: type=1326 audit(1784320337.077:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 315.564135][ T27] audit: type=1326 audit(1784320337.077:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 315.597707][ T27] audit: type=1326 audit(1784320337.077:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 315.630448][ T27] audit: type=1326 audit(1784320337.077:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 315.669463][ T27] audit: type=1326 audit(1784320337.077:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 315.846189][ T27] audit: type=1326 audit(1784320337.077:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.1.416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 317.376900][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.383264][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.607891][ T7619] Cannot find del_set index 0 as target [ 320.629266][ T5089] Bluetooth: hci2: command 0x206a tx timeout [ 321.239648][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 321.449446][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 322.976522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 330.678794][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 330.808734][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 335.688238][ T7741] ì: renamed from bond_slave_0 (while UP) [ 336.095952][ C0] sched: RT throttling activated [ 336.287452][ T7742] loop0: detected capacity change from 0 to 2048 [ 336.478372][ T7742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.490988][ T7742] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.303009][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.402082][ T5778] Bluetooth: hci3: Malformed LE Event: 0x1b [ 339.803648][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 340.227875][ T7779] loop1: detected capacity change from 0 to 2048 [ 340.247463][ T7779] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 340.279790][ T7779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.668742][ T7788] tipc: Enabling of bearer rejected, already enabled [ 341.690075][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 341.739565][ T7790] loop0: detected capacity change from 0 to 512 [ 341.746291][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 341.768073][ T7790] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.796856][ T7790] EXT4-fs (loop0): 1 truncate cleaned up [ 341.805833][ T7790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.835434][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.475'. [ 342.050619][ T7799] ì: renamed from bond_slave_0 (while UP) [ 343.154917][ T7807] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.468: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 343.681270][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 343.950232][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.778114][ T7829] misc userio: Invalid payload size [ 346.860277][ T7837] netlink: 120 bytes leftover after parsing attributes in process `syz.1.473'. [ 347.519998][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 349.408319][ T7857] tmpfs: Bad value for 'mpol' [ 350.389205][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 353.586614][ T7890] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7890] [ 359.243663][ T7918] sctp: failed to load transform for md5: -2 [ 359.873444][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 360.997559][ T5778] Bluetooth: hci0: Malformed LE Event: 0x1b [ 363.238816][ T7947] warning: `syz.2.503' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 363.973469][ T7956] loop3: detected capacity change from 0 to 64 [ 364.902964][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 364.903043][ T27] audit: type=1800 audit(1784320387.417:148): pid=7956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.506" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 366.130644][ T5782] hfs: node 4:3 still has 1 user(s)! [ 366.219119][ T7976] netlink: 'syz.0.501': attribute type 24 has an invalid length. [ 367.319432][ T5778] Bluetooth: hci0: Malformed LE Event: 0x1b [ 368.172192][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 368.823649][ T7995] xt_TPROXY: Can be used only with -p tcp or -p udp [ 374.590669][ T5778] Bluetooth: hci3: Malformed LE Event: 0x1b [ 374.892942][ T8043] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 374.917753][ T8042] IPVS: stopping backup sync thread 8043 ... [ 376.811030][ T8053] Cannot find add_set index 0 as target [ 377.617178][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.531'. [ 377.730618][ T5778] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 377.920043][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 378.952121][ T8068] loop0: detected capacity change from 0 to 1024 [ 379.552684][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.560920][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.883757][ T8075] bridge1: entered promiscuous mode [ 381.272918][ T5778] Bluetooth: hci2: Malformed LE Event: 0x1b [ 382.750293][ T8095] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8095] [ 382.903251][ T8106] tipc: Enabling of bearer rejected, already enabled [ 382.934262][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 383.001405][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'. [ 383.079731][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'. [ 383.307590][ T8117] loop1: detected capacity change from 0 to 64 [ 383.353355][ T27] audit: type=1800 audit(1784320404.907:149): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.547" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 383.530580][ T5773] hfs: node 4:3 still has 1 user(s)! [ 384.052951][ T8123] loop1: detected capacity change from 0 to 512 [ 384.065593][ T8123] EXT4-fs: Ignoring removed orlov option [ 385.142698][ T8123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 386.230787][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 386.954080][ T8123] EXT4-fs: error -4 creating inode table initialization thread [ 386.962718][ T8123] EXT4-fs (loop1): mount failed [ 389.560123][ T27] audit: type=1326 audit(1784320410.678:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f426e99de99 code=0x0 [ 389.737452][ T8161] random: crng reseeded on system resumption [ 389.753187][ T27] audit: type=1326 audit(1784320410.874:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdb6b9de99 code=0x0 [ 390.915113][ T5778] Bluetooth: hci0: Malformed LE Event: 0x1b [ 391.257947][ T8174] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.529896][ T5778] Bluetooth: hci0: Malformed LE Event: 0x1b [ 395.984153][ T8202] loop0: detected capacity change from 0 to 32768 [ 396.061366][ T8202] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 396.459934][ T8202] XFS (loop0): Ending clean mount [ 396.476778][ T8202] XFS (loop0): Quotacheck needed: Please wait. [ 397.071610][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 397.188855][ T8202] XFS (loop0): Quotacheck: Done. [ 397.353506][ T8219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.361056][ T8219] IPv6: NLM_F_CREATE should be set when creating new route [ 397.368420][ T8219] IPv6: NLM_F_CREATE should be set when creating new route [ 397.375649][ T8219] IPv6: NLM_F_CREATE should be set when creating new route [ 397.636340][ T27] audit: type=1800 audit(1784320418.255:152): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.568" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 398.432854][ T5781] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 399.380764][ T8232] binder: 8231:8232 ioctl 4018620d 0 returned -22 [ 399.389646][ T8232] binder: 8231:8232 ioctl c0306201 0 returned -14 [ 399.397316][ T8232] binder: 8231:8232 ioctl c0306201 0 returned -14 [ 400.114389][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 401.104458][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 402.053055][ T5778] Bluetooth: hci3: unexpected event for opcode 0x042c [ 405.203333][ T8268] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.257141][ T8272] loop3: detected capacity change from 0 to 16 [ 405.359914][ T8272] erofs: (device loop3): mounted with root inode @ nid 36. [ 405.479253][ T8274] syz.3.585: attempt to access beyond end of device [ 405.479253][ T8274] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 405.591850][ T8274] syz.3.585: attempt to access beyond end of device [ 405.591850][ T8274] loop3: rw=0, sector=36, nr_sectors = 1 limit=16 [ 407.310673][ T5778] Bluetooth: hci2: Malformed LE Event: 0x1b [ 409.286379][ T8302] loop3: detected capacity change from 0 to 8 [ 409.410719][ T5766] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 412.565317][ T8314] loop1: detected capacity change from 0 to 32768 [ 412.627868][ T8314] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 413.332935][ T8314] XFS (loop1): Ending clean mount [ 413.377942][ T8314] XFS (loop1): Quotacheck needed: Please wait. [ 413.472364][ T8314] XFS (loop1): Quotacheck: Done. [ 414.319597][ T27] audit: type=1800 audit(1784320433.365:153): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.596" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 416.137678][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 418.092293][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 418.366540][ T8355] can: request_module (can-proto-3) failed. [ 420.990677][ T8379] tipc: Enabling of bearer rejected, already enabled [ 421.027913][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 421.038403][ T8379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.611'. [ 421.527334][ T8379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.611'. [ 424.548383][ T5778] Bluetooth: hci2: Malformed LE Event: 0x1b [ 429.140370][ T5778] Bluetooth: hci3: Malformed LE Event: 0x1b [ 433.695610][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 434.505479][ T8464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 436.864038][ T8476] tipc: Enabling of bearer rejected, already enabled [ 436.872846][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 436.884417][ T8476] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 437.042155][ T8476] bond1: entered promiscuous mode [ 437.047542][ T8476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.126236][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.643'. [ 438.217281][ T8497] futex_wake_op: syz.2.640 tries to shift op by 144; fix this program [ 439.718914][ T8500] 9pnet_fd: Insufficient options for proto=fd [ 439.946868][ T8500] netlink: 'syz.3.631': attribute type 10 has an invalid length. [ 440.102233][ T8500] team0: Port device netdevsim0 added [ 440.145592][ T8500] syz.3.631 (8500) used greatest stack depth: 20008 bytes left [ 440.257677][ T8503] loop3: detected capacity change from 0 to 1024 [ 440.585055][ T8509] futex_wake_op: syz.0.650 tries to shift op by 144; fix this program [ 440.757636][ T8511] bridge1: entered promiscuous mode [ 443.151294][ T8530] tipc: Enabling of bearer rejected, already enabled [ 443.160089][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 443.174612][ T8530] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 443.219589][ T8530] bond1: entered promiscuous mode [ 443.225126][ T8530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.240300][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.648'. [ 445.189624][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.196563][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.208726][ T8543] 9pnet_fd: Insufficient options for proto=fd [ 446.490186][ T8543] netlink: 'syz.2.651': attribute type 10 has an invalid length. [ 446.517818][ T8543] team0: Port device netdevsim0 added [ 448.733607][ T8554] sctp: failed to load transform for md5: -2 [ 449.005752][ T8562] loop3: detected capacity change from 0 to 512 [ 449.032931][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 449.071161][ T8562] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 449.234433][ T8567] loop0: detected capacity change from 0 to 1024 [ 449.383499][ T8562] EXT4-fs (loop3): 1 truncate cleaned up [ 449.575078][ T8562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.351690][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 450.900145][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.000528][ T8579] befs: (nullb0): invalid magic header [ 451.350771][ T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 451.608943][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.635350][ T42] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 451.660722][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.703852][ T42] usb 1-1: config 0 descriptor?? [ 451.743978][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 451.943214][ T8589] loop3: detected capacity change from 0 to 8 [ 451.973089][ T8590] loop1: detected capacity change from 0 to 1024 [ 452.099026][ T27] audit: type=1326 audit(1784320469.234:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a6599de99 code=0x0 [ 452.396063][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.405078][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.536091][ T8594] bridge1: entered promiscuous mode [ 453.174005][ T8596] SQUASHFS error: Failed to read block 0x4de: -5 [ 453.216753][ T8596] SQUASHFS error: Failed to read block 0x4de: -5 [ 453.438105][ T27] audit: type=1800 audit(1784320470.404:155): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.662" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 453.551449][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 453.565581][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 455.076784][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'. [ 457.324270][ T42] pwc: recv_control_msg error -71 req 04 val 1000 [ 457.377823][ T42] pwc: recv_control_msg error -71 req 04 val 1300 [ 457.385282][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 457.399202][ T42] pwc: recv_control_msg error -71 req 04 val 1400 [ 457.418476][ T42] pwc: recv_control_msg error -71 req 02 val 2000 [ 457.505901][ T42] pwc: recv_control_msg error -71 req 02 val 2100 [ 457.521971][ T42] pwc: recv_control_msg error -71 req 04 val 1500 [ 457.660650][ T42] pwc: recv_control_msg error -71 req 02 val 2500 [ 457.679669][ T42] pwc: recv_control_msg error -71 req 02 val 2400 [ 458.377033][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 458.778963][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 458.843207][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 458.850870][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 459.396745][ T8624] syz.3.668 (8624) used greatest stack depth: 16536 bytes left [ 459.515089][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 459.562623][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 459.673699][ T42] pwc: Registered as video103. [ 459.842727][ T8634] loop1: detected capacity change from 0 to 1024 [ 459.903174][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 459.925121][ T42] usb 1-1: USB disconnect, device number 3 [ 460.890738][ T8640] bridge2: entered promiscuous mode [ 467.645168][ T8681] xt_TPROXY: Can be used only with -p tcp or -p udp [ 468.877941][ T8689] qrtr: Invalid version 0 [ 476.222743][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 476.231678][ T8718] bridge_slave_1: left allmulticast mode [ 476.237325][ T8718] bridge_slave_1: left promiscuous mode [ 476.244167][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.268608][ T8718] bridge_slave_0: left allmulticast mode [ 476.274539][ T8718] bridge_slave_0: left promiscuous mode [ 476.280219][ T8718] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.878032][ T8740] loop0: detected capacity change from 0 to 32768 [ 479.885693][ T8740] xfs: Unknown parameter 'appraise' [ 479.940833][ T8737] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.970778][ T5766] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.769901][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 482.590685][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 483.381007][ T27] audit: type=1326 audit(1784320498.506:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.2.710" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f426e99de99 code=0x0 [ 483.721062][ T8780] loop1: detected capacity change from 0 to 512 [ 483.754099][ T8780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 485.933453][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.042840][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 488.311258][ T27] audit: type=1326 audit(1784320503.110:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.2.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f426e99de99 code=0x0 [ 490.042467][ T8838] trusted_key: encrypted_key: insufficient parameters specified [ 490.079167][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 490.934497][ T5778] Bluetooth: hci0: Malformed LE Event: 0x1b [ 493.615767][ T8844] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 494.826467][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 496.317782][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 497.622068][ T5778] Bluetooth: hci2: Malformed LE Event: 0x1b [ 497.844500][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 497.861959][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.869225][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.228969][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 501.154880][ T5778] Bluetooth: hci0: Malformed LE Event: 0x1b [ 501.299364][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 501.655090][ T5778] Bluetooth: hci1: Malformed LE Event: 0x1b [ 502.518354][ T5778] Bluetooth: hci0: Malformed LE Event: 0x1b [ 503.312953][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 503.315165][ T8937] IPVS: Error connecting to the multicast addr [ 504.629691][ T27] audit: type=1326 audit(1784320518.364:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.0.753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdb6b9de99 code=0x0 [ 507.720636][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 507.730282][ T5089] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 509.168517][ T9012] lo speed is unknown, defaulting to 1000 [ 509.176278][ T9012] lo speed is unknown, defaulting to 1000 [ 509.185707][ T9012] lo speed is unknown, defaulting to 1000 [ 509.196517][ T9012] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 509.209220][ T9012] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 509.680280][ T9012] lo speed is unknown, defaulting to 1000 [ 509.688973][ T9012] lo speed is unknown, defaulting to 1000 [ 509.695692][ T9012] lo speed is unknown, defaulting to 1000 [ 509.702475][ T9012] lo speed is unknown, defaulting to 1000 [ 509.836302][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 510.844313][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.850734][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.117576][ T9027] syz_tun: entered allmulticast mode [ 513.933293][ T9048] can: request_module (can-proto-3) failed. [ 515.490124][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 515.691026][ T5089] Bluetooth: hci0: Malformed LE Event: 0x1b [ 518.157362][ T5089] Bluetooth: hci1: Malformed LE Event: 0x1b [ 519.934770][ T9105] input: syz0 as /devices/virtual/input/input10 [ 520.523452][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 521.594230][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 522.616248][ T5089] Bluetooth: hci0: Malformed LE Event: 0x1b [ 527.445474][ T5089] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 527.835063][ T9147] input: syz1 as /devices/virtual/input/input11 [ 530.307117][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 532.956105][ T9201] lo speed is unknown, defaulting to 1000 [ 532.962155][ T9201] lo speed is unknown, defaulting to 1000 [ 532.969202][ T9201] lo speed is unknown, defaulting to 1000 [ 532.981540][ T9201] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 533.008373][ T9201] lo speed is unknown, defaulting to 1000 [ 533.015521][ T9201] lo speed is unknown, defaulting to 1000 [ 533.023493][ T9201] lo speed is unknown, defaulting to 1000 [ 533.031097][ T9201] lo speed is unknown, defaulting to 1000 [ 533.755489][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 534.903883][ T9222] netlink: 96 bytes leftover after parsing attributes in process `syz.0.829'. [ 535.082674][ T9227] tipc: Enabling of bearer rejected, already enabled [ 535.210113][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 535.244851][ T9228] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 535.339465][ T9228] bond2: entered promiscuous mode [ 535.347098][ T9228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.362822][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.831'. [ 536.514422][ T9244] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 537.443284][ T9253] capability: warning: `syz.3.836' uses deprecated v2 capabilities in a way that may be insecure [ 537.461481][ T5089] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 539.668725][ T5089] Bluetooth: hci3: command 0x206a tx timeout [ 539.860020][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 541.229821][ T9280] tipc: Enabling of bearer rejected, already enabled [ 541.327014][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 541.472886][ T9280] netlink: 'syz.1.844': attribute type 1 has an invalid length. [ 541.502567][ T9280] bond2: entered promiscuous mode [ 541.512283][ T9280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.347605][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.844'. [ 546.092545][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 546.732880][ T9317] tipc: Enabling of bearer rejected, already enabled [ 546.745827][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.856'. [ 546.763681][ T9317] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 548.103044][ T9317] bond3: entered promiscuous mode [ 548.109543][ T9317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 548.133854][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 549.557473][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 552.423032][ T9359] loop1: detected capacity change from 0 to 16 [ 552.439878][ T9359] erofs: (device loop1): mounted with root inode @ nid 36. [ 552.486360][ T9358] syz.1.858: attempt to access beyond end of device [ 552.486360][ T9358] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 552.509706][ T9358] syz.1.858: attempt to access beyond end of device [ 552.509706][ T9358] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 552.524548][ T9358] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 552.548890][ T27] audit: type=1800 audit(1784320563.226:159): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.858" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 552.763444][ T9367] tipc: Enabling of bearer rejected, already enabled [ 552.772458][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'. [ 552.783504][ T9367] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 552.811703][ T9367] bond3: entered promiscuous mode [ 552.825661][ T9367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 552.839597][ T9371] xt_hashlimit: max too large, truncated to 1048576 [ 552.847315][ T9371] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 553.626917][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 557.905965][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 558.731873][ T9412] tipc: Enabling of bearer rejected, already enabled [ 559.267430][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 559.346457][ T9412] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 559.495834][ T5089] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 559.559186][ T9412] bond4: entered promiscuous mode [ 559.564424][ T9412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.823884][ T9419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.882'. [ 564.438832][ T9444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.450059][ T9473] netlink: 'syz.0.897': attribute type 49 has an invalid length. [ 568.768867][ T9479] NILFS (nullb0): couldn't find nilfs on the device [ 569.267259][ T9473] veth0_to_bond: entered promiscuous mode [ 569.273143][ T9473] veth0_to_bond: entered allmulticast mode [ 572.933849][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 577.093090][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.099822][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.328463][ T9613] futex_wake_op: syz.2.924 tries to shift op by 144; fix this program [ 585.977544][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 587.034083][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 588.071092][ T9653] overlayfs: failed to clone upperpath [ 589.390083][ T9678] netlink: 'syz.2.944': attribute type 11 has an invalid length. [ 589.528037][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 590.952157][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 591.280037][ T9698] MTD: Couldn't look up '/dev/nullb0': -13 [ 593.232543][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 594.929467][ T9769] netlink: 'syz.0.967': attribute type 9 has an invalid length. [ 596.594034][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 596.954939][ T9787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 596.962980][ T9787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 596.970349][ T9787] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 596.978746][ T9787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.984868][ T9787] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 597.005437][ T9787] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 597.051730][ T9149] libceph: connect (1)[c::]:6789 error -101 [ 597.074983][ T5089] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 597.087873][ T9149] libceph: mon0 (1)[c::]:6789 connect error [ 597.410443][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 597.438290][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 597.772774][ T9792] ceph: No mds server is up or the cluster is laggy [ 599.335255][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 599.342462][ T5089] Bluetooth: hci3: command 0x206a tx timeout [ 599.348897][ T5089] Bluetooth: hci2: command 0x206a tx timeout [ 599.355220][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 601.564370][ T5778] Bluetooth: hci3: command 0x206a tx timeout [ 601.828950][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 601.853689][ T9828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.244007][ T9828] batadv_slave_1: entered promiscuous mode [ 603.776359][ T5778] Bluetooth: hci3: command 0x206a tx timeout [ 604.581023][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 606.400609][ T9871] overlayfs: missing 'lowerdir' [ 607.648626][ T9883] loop1: detected capacity change from 0 to 1024 [ 607.690526][ T9883] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 607.700997][ T9883] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 608.566758][ T9883] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 608.577225][ T9883] EXT4-fs (loop1): orphan cleanup on readonly fs [ 608.584258][ T9883] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #3: comm syz.1.994: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 608.604837][ T9883] EXT4-fs (loop1): Remounting filesystem read-only [ 608.611921][ T9883] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 608.626744][ T9883] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 608.643405][ T9883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 609.010099][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.707257][ T9916] sctp: failed to load transform for md5: -2 [ 612.979409][ T9931] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 614.315879][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 614.637580][ T9939] tipc: Enabling of bearer rejected, failed to enable media [ 622.566175][ T23] libceph: connect (1)[c::]:6789 error -101 [ 622.574060][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 622.907038][T10002] ceph: No mds server is up or the cluster is laggy [ 622.917219][ T42] libceph: connect (1)[c::]:6789 error -101 [ 622.923295][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 623.082072][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 624.607946][T10033] fuse: Bad value for 'fd' [ 625.572526][T10041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.874952][T10041] batadv_slave_1: entered promiscuous mode [ 628.336175][T10072] loop1: detected capacity change from 0 to 4096 [ 628.955033][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 629.467489][T10076] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 629.728882][T10072] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 629.875155][T10080] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 630.355059][T10082] tipc: Enabling of bearer rejected, already enabled [ 630.392858][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 630.419899][T10082] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 630.520348][T10082] bond2: entered promiscuous mode [ 630.536834][T10082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 630.558902][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1042'. [ 632.995996][T10104] ipt_REJECT: ECHOREPLY no longer supported. [ 636.070925][T10134] tipc: Enabling of bearer rejected, already enabled [ 636.107352][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'. [ 636.289877][T10134] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 636.332224][T10134] bond3: entered promiscuous mode [ 636.338820][T10134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 637.187995][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1053'. [ 638.783110][ T5778] Bluetooth: hci3: Malformed LE Event: 0x1b [ 639.713232][T10162] smc: net device vlan1 applied user defined pnetid SYZ2 [ 642.256528][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 642.263319][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.113485][ T5778] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 643.845263][T10186] IPVS: ip_vs_add_dest(): server weight less than zero [ 643.853908][T10186] IPVS: rr: FWM 3 0x00000003 - no destination available [ 643.934674][ T5763] IPVS: starting estimator thread 0... [ 644.034508][ T5089] Bluetooth: hci1: Malformed LE Event: 0x1b [ 644.062920][T10187] IPVS: using max 25 ests per chain, 60000 per kthread [ 646.020193][T10202] Process accounting resumed [ 646.084116][T10215] tipc: Enabling of bearer rejected, already enabled [ 646.092687][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 646.126674][T10215] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 646.258670][T10215] bond4: entered promiscuous mode [ 646.264350][T10215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 646.430738][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 647.453220][ T5089] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 647.463967][ T5089] Bluetooth: hci3: Injecting HCI hardware error event [ 647.474486][ T5089] Bluetooth: hci3: hardware error 0x00 [ 648.320305][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 649.675927][ T5089] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 650.129657][T10257] tipc: Enabling of bearer rejected, already enabled [ 650.139779][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 650.161424][T10257] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 650.206280][T10257] bond4: entered promiscuous mode [ 650.211863][T10257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 650.233541][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1090'. [ 650.909869][T10265] syz.0.1093(10265): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 650.931514][ T27] audit: type=1326 audit(1784320655.253:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 652.547461][ T27] audit: type=1326 audit(1784320655.253:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 652.615163][T10274] loop1: detected capacity change from 0 to 512 [ 652.626401][ T27] audit: type=1326 audit(1784320655.253:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 652.630006][T10274] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 652.663837][T10274] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 652.675005][T10274] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.1094: Invalid inode table block 1 in block_group 0 [ 652.688298][ T27] audit: type=1326 audit(1784320655.253:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 652.713033][ T27] audit: type=1326 audit(1784320655.253:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 652.757669][T10280] overlayfs: missing 'lowerdir' [ 653.535773][ T27] audit: type=1326 audit(1784320655.253:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 653.579176][T10274] EXT4-fs (loop1): get root inode failed [ 653.621499][T10274] EXT4-fs (loop1): mount failed [ 653.738115][ T27] audit: type=1326 audit(1784320655.253:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 654.149114][ T27] audit: type=1326 audit(1784320655.253:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 654.505285][ T27] audit: type=1326 audit(1784320655.253:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 654.839367][ T27] audit: type=1326 audit(1784320655.271:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 655.112321][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 655.602966][ T8] libceph: connect (1)[c::]:6789 error -101 [ 655.633366][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 656.171507][T10297] ceph: No mds server is up or the cluster is laggy [ 656.198838][T10302] tipc: Enabling of bearer rejected, already enabled [ 656.230940][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 656.314446][T10302] netlink: 'syz.2.1101': attribute type 1 has an invalid length. [ 656.624059][T10302] bond5: entered promiscuous mode [ 656.662436][T10302] 8021q: adding VLAN 0 to HW filter on device bond5 [ 657.263191][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1101'. [ 658.625645][T10324] loop1: detected capacity change from 0 to 32768 [ 658.633329][T10324] xfs: Unknown parameter 'appraise' [ 659.307463][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 661.051295][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 661.278680][T10352] tipc: Enabling of bearer rejected, already enabled [ 661.290826][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 661.315334][T10352] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 662.269059][T10352] bond6: entered promiscuous mode [ 662.276946][T10352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 662.351676][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1116'. [ 663.128353][T10374] loop1: detected capacity change from 0 to 16 [ 663.416597][T10376] overlayfs: failed to clone upperpath [ 663.516220][T10374] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 663.759172][T10088] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 665.552491][T10398] tipc: Enabling of bearer rejected, already enabled [ 665.560923][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 665.672933][T10398] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 665.739623][T10398] bond5: entered promiscuous mode [ 665.745179][T10398] 8021q: adding VLAN 0 to HW filter on device bond5 [ 665.802113][T10398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1129'. [ 667.005863][T10421] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 668.059006][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 668.447453][ T5089] Bluetooth: hci0: Malformed LE Event: 0x1b [ 668.906868][T10437] tipc: Enabling of bearer rejected, already enabled [ 668.946608][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 668.963417][T10437] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 669.038000][T10437] bond7: entered promiscuous mode [ 669.043376][T10437] 8021q: adding VLAN 0 to HW filter on device bond7 [ 669.051675][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1142'. [ 671.690172][T10457] serio: Serial port ttyS3 [ 672.098266][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 672.676578][ T5089] Bluetooth: hci0: Malformed LE Event: 0x1b [ 672.775794][T10474] tipc: Enabling of bearer rejected, already enabled [ 672.811393][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 672.948196][T10474] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 673.039231][T10474] bond5: entered promiscuous mode [ 673.050749][T10474] 8021q: adding VLAN 0 to HW filter on device bond5 [ 673.075795][T10480] loop1: detected capacity change from 0 to 512 [ 673.115484][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1155'. [ 673.211325][T10480] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1156: bad orphan inode 11862016 [ 673.564902][T10480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 673.577673][T10480] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.254501][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 676.323981][ T5089] Bluetooth: hci1: Malformed LE Event: 0x1b [ 676.377131][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 676.443516][T10515] tipc: Enabling of bearer rejected, already enabled [ 676.452470][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1167'. [ 676.472330][T10515] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 677.577134][T10515] bond8: entered promiscuous mode [ 677.598216][T10515] 8021q: adding VLAN 0 to HW filter on device bond8 [ 678.510215][T10521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1167'. [ 679.017070][T10541] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.026336][T10541] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.035355][T10541] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.044149][T10541] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.089096][T10541] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.098064][T10541] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.107012][T10541] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.116979][T10541] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.758397][T10542] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.767260][T10542] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.776090][T10542] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.784868][T10542] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.031199][T10542] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.040270][T10542] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.049236][T10542] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.058260][T10542] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.368818][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 681.458009][T10558] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 683.182533][T10568] tipc: Enabling of bearer rejected, already enabled [ 683.206634][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'. [ 683.221857][T10568] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 683.444643][T10568] bond6: entered promiscuous mode [ 683.496055][T10568] 8021q: adding VLAN 0 to HW filter on device bond6 [ 683.527759][T10575] overlayfs: failed to clone upperpath [ 683.574971][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1179'. [ 686.615652][T10603] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 686.634753][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 687.116689][ C0] hrtimer: interrupt took 45369 ns [ 689.145784][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 689.401674][T10642] loop1: detected capacity change from 0 to 256 [ 690.640348][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 698.135655][T10728] trusted_key: encrypted_key: insufficient parameters specified [ 698.539518][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 698.601153][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1222'. [ 701.437791][T10747] netlink: 'syz.0.1228': attribute type 2 has an invalid length. [ 702.164200][T10763] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1232'. [ 707.813731][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 707.823423][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.385675][T10821] block device autoloading is deprecated and will be removed. [ 711.743459][T10847] program syz.1.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.754986][T10847] (null): rxe_set_mtu: Set mtu to 1024 [ 711.876806][T10847] infiniband syz1: set active [ 711.881727][T10847] infiniband syz1: added bond0 [ 711.919592][T10847] RDS/IB: syz1: added [ 711.924481][T10847] smc: adding ib device syz1 with port count 1 [ 711.930910][T10847] smc: ib device syz1 port 1 has pnetid [ 715.958702][ T23] Process accounting resumed [ 715.983547][T10880] Process accounting resumed [ 716.361068][T10891] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.369848][T10891] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.378602][T10891] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.387354][T10891] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.398820][T10891] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.407749][T10891] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.416619][T10891] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.425519][T10891] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.222957][T10893] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.231953][T10893] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.240782][T10893] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.249512][T10893] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.280087][T10893] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.289158][T10893] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.298223][T10893] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.308071][T10893] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.468672][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1272'. [ 719.434332][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 719.434371][ T27] audit: type=1326 audit(1784320719.402:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10910 comm="syz.2.1273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f426e99de99 code=0x0 [ 723.620797][T10959] ip6erspan0: entered allmulticast mode [ 725.920008][T10981] trusted_key: encrypted_key: insufficient parameters specified [ 726.718518][T10946] IPVS: starting estimator thread 0... [ 726.839335][T10994] IPVS: using max 22 ests per chain, 52800 per kthread [ 727.407125][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 729.648743][T11016] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.657664][T11016] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.666396][T11016] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.675154][T11016] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.696660][T11016] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.706001][T11016] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.715030][T11016] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.723927][T11016] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.793102][T11023] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.801973][T11023] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.811290][T11023] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.820173][T11023] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.833498][T11023] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.842523][T11023] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.852081][T11023] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.861415][T11023] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.117350][T11028] (null): rxe_set_mtu: Set mtu to 1024 [ 730.123469][T11028] rdma_rxe: rxe_newlink: failed to add bond0 [ 730.428772][T11036] trusted_key: encrypted_key: insufficient parameters specified [ 732.101456][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 732.900102][T11059] openvswitch: netlink: EtherType 0 is less than min 600 [ 733.809958][T11076] 9pnet_fd: Insufficient options for proto=fd [ 734.534565][T11085] trusted_key: encrypted_key: insufficient parameters specified [ 735.508481][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 737.829041][T11117] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 738.099950][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 738.556575][T11129] tipc: Enabling of bearer rejected, already enabled [ 738.565192][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 738.577557][T11129] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 739.066006][T11129] bond9: entered promiscuous mode [ 739.240456][T11129] 8021q: adding VLAN 0 to HW filter on device bond9 [ 739.348522][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1336'. [ 740.177564][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1338'. [ 740.186707][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1338'. [ 740.195882][T11150] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1338'. [ 742.492071][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1346'. [ 742.504623][T11173] netlink: 'syz.0.1344': attribute type 21 has an invalid length. [ 742.512680][T11173] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1344'. [ 742.693447][ T3061] IPVS: starting estimator thread 0... [ 742.936082][T11182] tipc: Enabling of bearer rejected, already enabled [ 742.945232][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 743.452078][T11179] IPVS: using max 24 ests per chain, 57600 per kthread [ 743.466075][T11184] tipc: Enabling of bearer rejected, already enabled [ 743.476053][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'. [ 743.633753][T11184] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 743.752602][T11184] bond7: entered promiscuous mode [ 743.758009][T11184] 8021q: adding VLAN 0 to HW filter on device bond7 [ 743.860831][T11190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1347'. [ 745.803681][T11217] ip6erspan0: entered allmulticast mode [ 745.810293][T11219] trusted_key: encrypted_key: insufficient parameters specified [ 746.169679][T11231] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 746.327459][T11236] tipc: Enabling of bearer rejected, already enabled [ 746.342645][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 746.423349][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 747.036563][T11236] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 747.508018][T11236] bond10: entered promiscuous mode [ 747.526921][T11236] 8021q: adding VLAN 0 to HW filter on device bond10 [ 747.547428][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1360'. [ 747.658425][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 750.600686][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 752.373307][T11285] tipc: Enabling of bearer rejected, already enabled [ 752.381980][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1373'. [ 752.400467][T11285] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 752.442940][T11285] bond6: entered promiscuous mode [ 752.448408][T11285] 8021q: adding VLAN 0 to HW filter on device bond6 [ 752.581889][T11285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1373'. [ 753.178207][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 755.082708][T11332] tipc: Enabling of bearer rejected, already enabled [ 755.164602][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 755.344073][T11332] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 756.051115][T11332] bond11: entered promiscuous mode [ 756.056579][T11332] 8021q: adding VLAN 0 to HW filter on device bond11 [ 756.091730][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'. [ 759.354059][T11367] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 761.619209][T11384] tmpfs: Bad value for 'huge' [ 762.499057][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 762.992033][T11396] tipc: Enabling of bearer rejected, already enabled [ 763.006519][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'. [ 763.018842][T11396] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 763.150187][T11396] bond7: entered promiscuous mode [ 763.190653][T11396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 763.353200][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1399'. [ 763.573226][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 764.154052][T11407] xt_CT: No such helper "snmp_trap" [ 764.272762][T11417] wg1: entered promiscuous mode [ 764.277656][T11417] wg1: entered allmulticast mode [ 764.409481][T11424] bridge0: port 3(syz_tun) entered disabled state [ 764.417531][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.424959][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.568212][T11424] bridge0: port 3(syz_tun) entered blocking state [ 764.576622][T11424] bridge0: port 3(syz_tun) entered forwarding state [ 764.586001][T11424] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.593169][T11424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.600573][T11424] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.607792][T11424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.273848][T11424] team0: Port device bridge0 added [ 765.399534][T11422] netlink: 'syz.1.1407': attribute type 11 has an invalid length. [ 765.407411][T11422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1407'. [ 766.086134][T11430] ip6erspan1: entered allmulticast mode [ 766.105161][T11422] ALSA: mixer_oss: invalid OSS volume '' [ 766.155247][T11442] tipc: Enabling of bearer rejected, already enabled [ 766.164324][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 766.178641][T11442] netlink: 'syz.2.1410': attribute type 1 has an invalid length. [ 766.217025][T11442] bond12: entered promiscuous mode [ 766.223251][T11442] 8021q: adding VLAN 0 to HW filter on device bond12 [ 766.245951][T11442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1410'. [ 768.830070][T11464] wg1: entered promiscuous mode [ 768.835216][T11464] wg1: entered allmulticast mode [ 769.811490][T11476] tipc: Enabling of bearer rejected, already enabled [ 769.827668][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1420'. [ 769.844524][T11476] netlink: 'syz.3.1420': attribute type 1 has an invalid length. [ 770.901702][T11478] xt_CT: No such helper "netbios-ns" [ 771.166721][T11476] bond8: entered promiscuous mode [ 771.302150][T11476] 8021q: adding VLAN 0 to HW filter on device bond8 [ 771.354454][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1420'. [ 772.885704][T11508] bridge_slave_1: left allmulticast mode [ 772.891415][T11508] bridge_slave_1: left promiscuous mode [ 773.143093][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.263904][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 773.560522][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 773.567210][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 773.739318][T11508] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 774.915139][T11526] tipc: Enabling of bearer rejected, already enabled [ 774.946258][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 774.970875][T11529] loop1: detected capacity change from 0 to 4096 [ 774.992608][T11526] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 775.036991][T11529] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 775.814893][T11526] bond9: entered promiscuous mode [ 775.822171][T11526] 8021q: adding VLAN 0 to HW filter on device bond9 [ 775.933459][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1433'. [ 776.395075][T11549] xt_hashlimit: max too large, truncated to 1048576 [ 777.193099][T11555] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 777.641600][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'. [ 778.788895][T11571] loop1: detected capacity change from 0 to 1024 [ 778.803167][T11571] EXT4-fs: Ignoring removed bh option [ 778.806034][T11573] bridge_slave_1: left allmulticast mode [ 778.823342][T11571] EXT4-fs: Ignoring removed bh option [ 778.831963][T11573] bridge_slave_1: left promiscuous mode [ 778.842921][T11571] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 778.862061][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.896335][T11571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.006293][T11580] tipc: Enabling of bearer rejected, already enabled [ 779.015347][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 779.026361][T11580] netlink: 'syz.3.1445': attribute type 1 has an invalid length. [ 779.264447][T11580] bond10: entered promiscuous mode [ 779.270795][T11580] 8021q: adding VLAN 0 to HW filter on device bond10 [ 779.291518][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 779.306016][T11585] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 779.370096][T11585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 780.131643][T11587] bond8: (slave geneve2): making interface the new active one [ 780.687191][T11587] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 780.936107][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.429145][T11625] tipc: Enabling of bearer rejected, already enabled [ 784.451925][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 784.474430][T11625] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 784.578233][T11625] bond11: entered promiscuous mode [ 784.583827][T11625] 8021q: adding VLAN 0 to HW filter on device bond11 [ 784.591452][T11628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1457'. [ 789.881465][ T27] audit: type=1326 audit(1784320784.013:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.2.1465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7fc00000 [ 789.971535][T11667] serio: Serial port ttyS3 [ 790.878987][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 790.898899][T11678] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1471'. [ 791.491191][T11683] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 796.559092][T11713] xt_CT: No such helper "snmp_trap" [ 800.538055][T11755] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.545336][T11755] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.568022][T11753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1494'. [ 800.610648][T11755] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.618358][T11755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.628253][T11755] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.635536][T11755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.665162][T11755] team0: Port device bridge0 added [ 801.673914][T11770] xt_TPROXY: Can be used only with -p tcp or -p udp [ 802.334947][T11769] gretap0: entered promiscuous mode [ 803.317034][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 804.505759][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 805.291235][T11816] binder: 11815:11816 ioctl c0306201 0 returned -14 [ 805.319066][T11816] binder: 11815:11816 ioctl 40383d03 0 returned -22 [ 805.883686][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 810.079834][T11856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1523'. [ 813.017979][T11885] serio: Serial port ttyS3 [ 813.551758][T11891] can: request_module (can-proto-3) failed. [ 815.447959][T11924] serio: Serial port ttyS3 [ 822.446882][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 824.812856][T12032] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 827.264098][T12046] can: request_module (can-proto-3) failed. [ 828.212645][T12070] serio: Serial port ttyS3 [ 829.233386][T12084] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 829.684672][T12095] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 830.301093][T12101] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12101] [ 830.844984][T12103] loop1: detected capacity change from 0 to 32768 [ 832.421195][ T59] read_mapping_page failed! [ 832.440920][ T59] ERROR: (device loop1): txCommit: [ 832.440920][ T59] [ 832.545453][ T59] jfs_write_inode: jfs_commit_inode failed! [ 836.300572][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 836.411012][T12167] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 838.613226][T12186] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 839.383854][T12197] 9pnet_fd: Insufficient options for proto=fd [ 839.904149][ T5089] Bluetooth: hci0: unexpected event for opcode 0x203c [ 840.582327][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 840.588707][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 841.704046][T12201] syz.1.1626 (12201): drop_caches: 2 [ 841.724317][T12221] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 842.570985][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1633'. [ 842.608997][T12235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1637'. [ 843.312075][T12238] overlayfs: failed to resolve './file1': -2 [ 843.773219][T12245] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 845.218360][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 845.509375][T12267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1647'. [ 846.614871][T12283] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 846.632842][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 847.244501][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 847.252286][T12293] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 847.317987][T12291] can: request_module (can-proto-3) failed. [ 847.334556][T12291] siw: device registration error -23 [ 847.368049][T12290] serio: Serial port ttyS3 [ 850.666900][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 852.248611][T12331] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 852.859233][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 853.777065][T12341] xt_CT: No such helper "snmp_trap" [ 853.902373][T12349] overlay: ./file0 is not a directory [ 855.172157][T12360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1669'. [ 856.058584][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 856.453443][T12379] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 857.501522][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 858.569628][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 859.227260][T12389] xt_CT: No such helper "snmp_trap" [ 860.904201][ T5089] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 860.911997][T12403] xt_CT: No such helper "snmp_trap" [ 860.969127][T12401] infiniband syz1: set active [ 860.969641][T12401] infiniband syz1: set active [ 860.974545][T12401] wg1: left promiscuous mode [ 860.976646][T12401] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.978672][T12401] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.005388][T12401] bond1: left promiscuous mode [ 861.006139][T12401] bridge1: left promiscuous mode [ 861.006814][T12401] bridge2: left promiscuous mode [ 861.007426][T12401] bond2: left promiscuous mode [ 861.662511][T12405] tty tty22: ldisc open failed (-12), clearing slot 21 [ 861.770327][T12409] IPVS: sed: FWM 3 0x00000003 - no destination available [ 861.807054][T12411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1682'. [ 862.577983][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 862.673274][T12424] serio: Serial port ttyS3 [ 863.609914][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'. [ 865.146236][ T5089] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 865.162482][T12444] xt_CT: No such helper "snmp_trap" [ 865.345263][T12450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1693'. [ 867.398208][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 867.692602][T12465] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 867.796778][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'. [ 868.800466][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1700'. [ 870.770973][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 870.913356][T12487] xt_CT: No such helper "snmp_trap" [ 871.904446][T12502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1706'. [ 871.940283][T12500] loop1: detected capacity change from 0 to 4096 [ 871.982061][T12500] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 872.046198][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 872.058088][T12500] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 872.231153][T12500] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 872.333302][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 872.614531][T12500] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 873.071540][T12500] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 873.084512][T12500] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 873.132333][T12500] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 873.177379][T12500] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 873.241858][T12500] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 873.306707][T12500] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 873.524823][T12500] ntfs: volume version 3.1. [ 873.614710][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 874.699927][T12527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1717'. [ 875.614089][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 876.380207][T12544] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 876.481889][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 878.360598][ T5089] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 878.629520][T12568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1728'. [ 878.919882][T12576] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 879.047857][T12577] loop1: detected capacity change from 0 to 1024 [ 879.077041][T12577] EXT4-fs: inline encryption not supported [ 879.090476][T12577] EXT4-fs: Ignoring removed bh option [ 879.118481][T12577] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 879.284618][T12581] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 879.725808][T12577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.976295][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 881.197885][T12592] IPVS: rr: FWM 3 0x00000003 - no destination available [ 881.795620][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.906647][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 882.910904][T12615] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 884.239222][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 885.318420][T12632] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 885.676498][T12627] serio: Serial port ttyS3 [ 888.076799][T12651] netlink: 'syz.0.1751': attribute type 4 has an invalid length. [ 888.481590][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 889.312306][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 891.853486][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 892.551331][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 893.398242][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 895.553870][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 895.613991][T12721] xt_CT: No such helper "snmp_trap" [ 897.337300][T12742] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 898.375134][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 899.139118][T12752] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 901.168448][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 901.586790][T12769] xt_CT: No such helper "snmp_trap" [ 902.162253][T12785] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 903.058524][T12798] futex_wake_op: syz.0.1791 tries to shift op by 144; fix this program [ 903.374765][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 904.821791][T12804] xt_CT: No such helper "snmp_trap" [ 906.228207][T12821] overlay: filesystem on ./bus not supported as upperdir [ 906.239065][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 907.111480][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 907.120178][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 907.506023][T12816] xt_CT: No such helper "snmp_trap" [ 907.582107][T12826] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 908.190335][T12831] overlay: filesystem on ./bus not supported as upperdir [ 910.300969][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 910.301034][ T27] audit: type=1326 audit(1784320895.203:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.1.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f020699de99 code=0x0 [ 911.513494][T12851] overlayfs: failed to clone lowerpath [ 912.639763][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 912.924070][T12853] xt_CT: No such helper "snmp_trap" [ 915.425227][T12865] xt_CT: No such helper "snmp_trap" [ 915.850399][T12871] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 917.050627][T12882] netlink: 'syz.1.1811': attribute type 4 has an invalid length. [ 917.284658][ T5089] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 917.823538][T12890] loop1: detected capacity change from 0 to 512 [ 917.843423][T12890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 917.875687][T12890] ext4: Unknown parameter 'fscontext' [ 918.779779][T12891] xt_CT: No such helper "snmp_trap" [ 919.177675][T12905] overlay: filesystem on ./bus not supported as upperdir [ 921.733081][T12915] loop1: detected capacity change from 0 to 2048 [ 922.114558][ T5089] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 923.509342][ T5089] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 924.758363][T12953] xt_CONNSECMARK: invalid mode: 66 [ 925.558113][ T5089] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 926.613440][T12968] loop1: detected capacity change from 0 to 1024 [ 926.632095][T12968] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 927.120985][T12980] xt_hashlimit: max too large, truncated to 1048576 [ 927.134308][T12980] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 928.568475][ T5089] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 928.600165][T12968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.165566][T12983] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 929.624467][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.145477][T12995] loop1: detected capacity change from 0 to 128 [ 930.845361][T12993] xt_CT: No such helper "snmp_trap" [ 930.856298][T12995] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 930.895278][T13000] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 931.164563][T13005] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 931.445101][T13014] xt_CONNSECMARK: invalid mode: 66 [ 932.452058][T13018] overlay: ./file0 is not a directory [ 933.449395][T13021] atomic_op ffff88802eab5998 conn xmit_atomic 0000000000000000 [ 933.658486][T13025] loop1: detected capacity change from 0 to 4096 [ 933.916010][T13025] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 934.640246][T13031] xt_CT: No such helper "snmp_trap" [ 935.186982][T13038] xt_hashlimit: max too large, truncated to 1048576 [ 935.195359][T13038] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 936.693917][T13047] overlay: ./file0 is not a directory [ 938.754511][T13070] overlay: filesystem on ./bus not supported as upperdir [ 940.632514][ T5089] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 940.781610][T13081] xt_CT: No such helper "snmp_trap" [ 942.000998][T13090] ALSA: mixer_oss: invalid OSS volume 'u' [ 942.667907][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1870'. [ 944.270373][T13122] overlay: filesystem on ./bus not supported as upperdir [ 946.148970][T13143] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1882'. [ 946.394960][ T5089] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 946.826303][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1883'. [ 946.882311][T13145] netlink: 'syz.0.1883': attribute type 1 has an invalid length. [ 946.928744][T13145] bond9: entered promiscuous mode [ 946.990942][T13145] 8021q: adding VLAN 0 to HW filter on device bond9 [ 947.092301][T13145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1883'. [ 947.389611][T13161] netlink: 'syz.1.1887': attribute type 10 has an invalid length. [ 947.596106][T13161] team0: Port device dummy0 added [ 949.128516][ T5089] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 949.679382][T13174] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1889'. [ 949.699824][T13174] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1889'. [ 950.745981][T13192] hsr0: entered promiscuous mode [ 950.753726][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 951.483943][T13189] EXT4-fs: Conflicting test_dummy_encryption options [ 951.503583][T13200] tipc: Enabling of bearer rejected, already enabled [ 951.516544][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'. [ 951.528220][T13200] netlink: 'syz.0.1896': attribute type 1 has an invalid length. [ 951.582569][T13200] bond10: entered promiscuous mode [ 951.589942][T13200] 8021q: adding VLAN 0 to HW filter on device bond10 [ 951.625264][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1896'. [ 952.999352][T13218] xt_hashlimit: size too large, truncated to 1048576 [ 953.241889][T13226] loop1: detected capacity change from 0 to 512 [ 953.249445][T13226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 953.277152][T13226] ext4: Unknown parameter 'fscontext' [ 953.330791][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1901'. [ 954.279601][ T5089] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 955.153594][T13234] fuse: Bad value for 'fd' [ 955.577046][T13244] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1905'. [ 955.599295][T13243] tipc: Enabling of bearer rejected, already enabled [ 956.291416][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 956.428378][T13243] netlink: 'syz.0.1907': attribute type 1 has an invalid length. [ 956.577862][T13243] bond11: entered promiscuous mode [ 956.603058][T13243] 8021q: adding VLAN 0 to HW filter on device bond11 [ 956.711909][T13243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1907'. [ 958.081867][T13320] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 959.936626][T13326] xt_CT: No such helper "snmp_trap" [ 960.209725][ T5089] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 960.768642][T13338] tipc: Enabling of bearer rejected, already enabled [ 960.800231][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'. [ 960.834612][T13338] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 961.419028][T13338] bond12: entered promiscuous mode [ 961.424667][T13338] 8021q: adding VLAN 0 to HW filter on device bond12 [ 961.457826][T13341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1921'. [ 962.920011][T13362] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 963.081222][T13369] tipc: Enabling of bearer rejected, already enabled [ 963.090208][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1930'. [ 963.103386][T13369] netlink: 'syz.0.1930': attribute type 1 has an invalid length. [ 964.918184][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 965.022050][T13374] xt_CT: No such helper "snmp_trap" [ 965.232169][T13369] bond13: entered promiscuous mode [ 965.247292][T13369] 8021q: adding VLAN 0 to HW filter on device bond13 [ 965.268279][T13372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1930'. [ 965.608396][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 966.456756][T13382] xt_CT: No such helper "snmp_trap" [ 967.318891][T13404] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 967.833705][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'. [ 968.052140][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 968.683653][T13419] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 968.722251][T13418] tipc: Enabling of bearer rejected, already enabled [ 968.742292][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1941'. [ 968.786671][T13418] netlink: 'syz.3.1941': attribute type 1 has an invalid length. [ 969.729631][T13418] bond12: entered promiscuous mode [ 969.758935][T13418] 8021q: adding VLAN 0 to HW filter on device bond12 [ 969.922597][T13426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1941'. [ 969.950114][T13432] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 970.829638][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 970.941529][T13450] overlay: ./file0 is not a directory [ 970.981843][T13452] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1949'. [ 971.300271][T13455] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 973.112980][T13473] tipc: Enabling of bearer rejected, already enabled [ 973.122426][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1958'. [ 973.149659][T13466] vcan0: tx drop: invalid sa for name 0x00000000000000f0 [ 973.202591][T13473] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 973.214814][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 973.222452][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 973.323401][T13473] bond13: entered promiscuous mode [ 973.329598][T13473] 8021q: adding VLAN 0 to HW filter on device bond13 [ 973.345188][T13475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1958'. [ 973.586003][ T5089] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 974.550599][T13485] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 975.525115][ T5089] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 975.806629][T13490] overlay: filesystem on ./bus not supported as upperdir [ 979.032707][T13491] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 980.145607][T13526] tipc: Enabling of bearer rejected, already enabled [ 980.174773][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 980.374998][T13526] netlink: 'syz.0.1970': attribute type 1 has an invalid length. [ 981.235646][T13526] bond14: entered promiscuous mode [ 981.251535][T13526] 8021q: adding VLAN 0 to HW filter on device bond14 [ 982.104954][T13531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1970'. [ 982.902712][T13552] overlay: ./file0 is not a directory [ 984.807416][T13491] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 985.035066][T13561] xt_CT: No such helper "snmp_trap" [ 985.494407][T13577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'. [ 986.669194][T13582] tipc: Enabling of bearer rejected, already enabled [ 986.684114][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 986.705803][T13582] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 986.876904][T13582] bond3: entered promiscuous mode [ 986.892338][T13582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 986.893438][T13589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 986.909345][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1986'. [ 989.044269][T13606] virtio-fs: tag not found [ 989.134932][T13606] "syz.1.1991" (13606) uses obsolete ecb(arc4) skcipher [ 991.269731][T13619] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 991.347086][T13620] overlay: ./file0 is not a directory [ 991.461876][T13624] tipc: Enabling of bearer rejected, already enabled [ 991.535762][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1999'. [ 991.557830][T13624] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 991.730171][ T27] audit: type=1326 audit(1784320970.241:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 991.740634][T13624] bond15: entered promiscuous mode [ 991.763311][ T27] audit: type=1326 audit(1784320970.241:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 991.807614][T13624] 8021q: adding VLAN 0 to HW filter on device bond15 [ 991.856237][ T27] audit: type=1326 audit(1784320970.241:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 992.242462][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1999'. [ 992.517923][ T27] audit: type=1326 audit(1784320970.241:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 992.627769][ T27] audit: type=1326 audit(1784320970.241:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 993.100996][T13491] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 993.117734][ T27] audit: type=1326 audit(1784320970.241:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 993.143674][ T27] audit: type=1326 audit(1784320970.241:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 993.230521][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 993.786708][ T27] audit: type=1326 audit(1784320970.241:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 993.815483][ T27] audit: type=1326 audit(1784320970.241:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 993.841966][ T27] audit: type=1326 audit(1784320970.241:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13625 comm="syz.2.2000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426e99de99 code=0x7ffc0000 [ 994.167944][T13653] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 994.190073][T13653] cramfs: wrong magic [ 996.585664][T13667] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 997.463431][T13673] tipc: Enabling of bearer rejected, already enabled [ 997.611249][T13673] netlink: 'syz.0.2011': attribute type 1 has an invalid length. [ 997.727888][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2013'. [ 998.355650][T13685] serio: Serial port ttyS3 [ 998.522095][T13673] bond16: entered promiscuous mode [ 998.527774][T13673] 8021q: adding VLAN 0 to HW filter on device bond16 [ 998.562782][T13679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2011'. [ 998.703715][T13692] overlay: ./file0 is not a directory [ 1001.307644][T13713] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1002.259736][T13721] tipc: Enabling of bearer rejected, already enabled [ 1002.313451][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'. [ 1002.325953][T13721] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 1002.405854][T13723] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 1002.413379][T13723] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1002.421484][T13723] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 1002.428280][T13723] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 1002.435330][T13723] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 1002.443670][T13723] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 1002.451656][T13723] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 1002.458292][T13723] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1002.466729][T13723] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 1002.473716][T13723] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 1002.481234][T13723] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 1002.488033][T13723] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 1002.495307][T13723] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 1002.503029][T13723] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 1002.510599][T13723] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 1002.517526][T13723] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 1002.524764][T13723] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 1002.531676][T13723] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 1002.538310][T13723] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 1002.545008][T13723] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 1002.551958][T13723] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 1002.558697][T13723] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 1002.565930][T13723] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 1002.572716][T13723] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 1002.579960][T13723] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 1003.107602][T13721] bond14: entered promiscuous mode [ 1003.846060][T13721] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1003.854407][T13724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2024'. [ 1004.338624][T13491] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 1004.553858][T13739] xt_CT: No such helper "snmp_trap" [ 1005.045417][T13737] overlay: ./file0 is not a directory [ 1005.311022][T13491] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1006.051133][T13762] tipc: Enabling of bearer rejected, already enabled [ 1006.059744][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 1006.081753][T13762] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 1006.119747][T13762] bond15: entered promiscuous mode [ 1006.125262][T13762] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1006.147878][T13762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2035'. [ 1006.420620][T13769] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1006.556665][T13772] overlay: filesystem on ./bus not supported as upperdir [ 1006.743605][T13773] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1008.730676][T13781] xt_CT: No such helper "snmp_trap" [ 1008.857234][T13491] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 1009.978975][T13491] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1010.515841][T13802] tipc: Enabling of bearer rejected, already enabled [ 1010.572140][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2044'. [ 1010.617518][T13802] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 1010.710844][T13802] bond17: entered promiscuous mode [ 1010.716634][T13802] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1010.749071][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2044'. [ 1010.929622][T13805] overlay: ./file0 is not a directory [ 1011.801885][T13491] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1014.934499][T13828] overlay: ./file0 is not a directory [ 1014.986063][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1015.700160][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 1015.708500][ T5834] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1015.717102][ T5834] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1015.726205][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.786611][ T5834] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1015.795936][ T5834] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1015.806503][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.823218][ T5834] usb 2-1: config 0 descriptor?? [ 1016.735799][ T5809] usb 2-1: USB disconnect, device number 2 [ 1016.817819][T13491] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1017.424443][T13842] tipc: Enabling of bearer rejected, already enabled [ 1017.462113][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'. [ 1017.523411][T13842] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 1017.625616][T13842] bond13: entered promiscuous mode [ 1017.631631][T13842] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1017.688676][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2053'. [ 1018.193502][T13491] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1019.180857][T13865] overlay: ./file0 is not a directory [ 1019.745520][T13869] overlay: filesystem on ./bus not supported as upperdir [ 1021.020830][T13881] overlay: filesystem on ./bus not supported as upperdir [ 1021.401394][T13884] tipc: Enabling of bearer rejected, already enabled [ 1021.411079][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2064'. [ 1021.426235][T13884] netlink: 'syz.0.2064': attribute type 1 has an invalid length. [ 1021.579960][T13884] bond18: entered promiscuous mode [ 1021.603172][T13884] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1021.954569][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2064'. [ 1023.986044][T13491] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1024.607993][T13916] overlay: ./file0 is not a directory [ 1025.042537][T13924] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1026.300973][T13933] overlay: filesystem on ./bus not supported as upperdir [ 1026.883456][T13934] overlay: filesystem on ./bus not supported as upperdir [ 1027.380746][T13938] tipc: Enabling of bearer rejected, already enabled [ 1027.454111][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2077'. [ 1027.475799][T13938] netlink: 'syz.3.2077': attribute type 1 has an invalid length. [ 1027.497170][T13944] loop1: detected capacity change from 0 to 512 [ 1027.538508][T13944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1027.614474][T13944] ext4: Unknown parameter 'fscontext' [ 1027.915757][T13938] bond16: entered promiscuous mode [ 1028.125286][T13938] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1028.230249][T13949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2077'. [ 1028.243963][T13948] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1028.629019][T13954] loop1: detected capacity change from 0 to 2048 [ 1029.632472][T13491] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1029.690239][T13491] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1030.856464][T13970] option changes via remount are deprecated (pid=13969 comm=syz.0.2084) [ 1030.960708][T13974] loop1: detected capacity change from 0 to 512 [ 1031.109039][T13974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1031.126026][T13974] ext4: Unknown parameter 'fscontext' [ 1031.556808][T13982] loop1: detected capacity change from 0 to 2048 [ 1031.910384][T13491] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1031.943621][T13979] overlay: ./file0 is not a directory [ 1032.304556][T13987] tipc: Enabling of bearer rejected, already enabled [ 1032.406225][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2090'. [ 1032.781325][T13987] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 1032.898140][T13987] bond14: entered promiscuous mode [ 1032.903896][T13987] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1032.963563][T13987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2090'. [ 1033.291318][T13997] overlay: filesystem on ./bus not supported as upperdir [ 1033.456509][T14000] loop1: detected capacity change from 0 to 512 [ 1033.479463][T14000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1033.495789][T14000] ext4: Unknown parameter 'fscontext' [ 1033.913507][T14002] loop1: detected capacity change from 0 to 2048 [ 1033.999051][T13491] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1034.967305][T13491] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1035.410673][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 1035.410688][ T27] audit: type=1326 audit(1784321010.705:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1035.621982][ T27] audit: type=1326 audit(1784321010.705:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1035.647599][ T27] audit: type=1326 audit(1784321010.705:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1035.672236][ T27] audit: type=1326 audit(1784321010.705:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1036.118440][ T27] audit: type=1326 audit(1784321010.705:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1036.758368][ T27] audit: type=1326 audit(1784321010.705:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1036.819388][ T27] audit: type=1326 audit(1784321010.705:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1036.889926][ T27] audit: type=1326 audit(1784321010.705:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1036.950158][ T27] audit: type=1326 audit(1784321010.705:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1037.831784][T13491] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1037.886776][ T27] audit: type=1326 audit(1784321010.705:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.0.2094" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb6b9de99 code=0x7ffc0000 [ 1039.308695][T14031] tipc: Enabling of bearer rejected, already enabled [ 1039.327460][T14024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1039.345238][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2100'. [ 1039.370543][T14031] netlink: 'syz.3.2100': attribute type 1 has an invalid length. [ 1039.557039][T14031] bond17: entered promiscuous mode [ 1039.619815][T14031] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1039.787390][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1039.795851][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1039.810694][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2100'. [ 1041.406483][T14039] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1041.795527][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 1041.795549][ T27] audit: type=1326 audit(1784321016.604:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1042.000801][ T27] audit: type=1326 audit(1784321016.604:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1042.026099][ T27] audit: type=1326 audit(1784321016.604:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1042.053504][ T27] audit: type=1326 audit(1784321016.604:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1042.667415][ T27] audit: type=1326 audit(1784321016.604:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1042.820466][ T27] audit: type=1326 audit(1784321016.604:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1042.845104][ T27] audit: type=1326 audit(1784321016.604:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1042.959049][ T27] audit: type=1326 audit(1784321016.604:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1043.041318][ T27] audit: type=1326 audit(1784321016.604:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1043.149171][ T27] audit: type=1326 audit(1784321016.604:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.1.2106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020699de99 code=0x7ffc0000 [ 1044.802058][T13491] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1045.902512][T14076] tipc: Enabling of bearer rejected, already enabled [ 1046.084075][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'. [ 1046.302686][T14076] netlink: 'syz.0.2113': attribute type 1 has an invalid length. [ 1046.387130][T14076] bond19: entered promiscuous mode [ 1046.556150][T14076] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1046.591805][T14084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2113'. [ 1050.424475][T14118] tipc: Enabling of bearer rejected, already enabled [ 1050.450487][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2124'. [ 1050.920927][T13491] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1050.926445][T14118] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 1050.966293][T14118] bond18: entered promiscuous mode [ 1050.986705][T14118] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1051.008480][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2124'. [ 1052.953706][T14141] loop1: detected capacity change from 0 to 512 [ 1052.966485][T14141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1052.973180][T14141] ext4: Unknown parameter 'fscontext' [ 1053.658026][T14146] loop1: detected capacity change from 0 to 2048 [ 1053.907260][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 1053.907276][ T27] audit: type=1326 audit(1784321027.775:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1053.953894][T14139] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1054.078903][ T27] audit: type=1326 audit(1784321027.775:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1054.134446][T13491] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1054.744660][ T27] audit: type=1326 audit(1784321027.775:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1054.903068][ T27] audit: type=1326 audit(1784321027.775:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1054.959493][ T27] audit: type=1326 audit(1784321027.784:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1054.990919][ T27] audit: type=1326 audit(1784321027.784:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1055.015552][ T27] audit: type=1326 audit(1784321027.784:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1055.039727][ T27] audit: type=1326 audit(1784321027.784:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1055.064537][ T27] audit: type=1326 audit(1784321027.784:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1055.088612][ T27] audit: type=1326 audit(1784321027.784:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.3.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6599de99 code=0x7ffc0000 [ 1055.537472][T14162] netlink: 'syz.1.2133': attribute type 1 has an invalid length. [ 1056.253583][T14167] tipc: Enabling of bearer rejected, already enabled [ 1056.263532][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2134'. [ 1056.275032][T14167] netlink: 'syz.1.2134': attribute type 1 has an invalid length. [ 1056.415037][T14167] bond4: entered promiscuous mode [ 1056.561661][T14167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1056.578877][T14167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2134'. [ 1057.137251][T13491] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1059.634576][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.136900][T14200] loop1: detected capacity change from 0 to 512 [ 1060.160319][T14200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1060.252568][T14200] ext4: Unknown parameter 'fscontext' [ 1061.085941][T14204] loop1: detected capacity change from 0 to 2048 [ 1061.342776][T13491] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1061.584964][T14210] tipc: Enabling of bearer rejected, already enabled [ 1061.628670][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2146'. [ 1061.677286][T14210] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 1061.813226][T14210] bond15: entered promiscuous mode [ 1061.834653][T14210] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1061.856463][T14213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2146'. [ 1062.072497][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2155'. [ 1062.101838][T14217] tipc: Enabling of bearer rejected, already enabled [ 1062.114198][T14221] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 1062.246019][T14221] bond5: entered promiscuous mode [ 1062.251875][T14221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1062.437071][T13491] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1062.659296][T14229] netlink: 'syz.2.2147': attribute type 1 has an invalid length. [ 1062.699632][T13297] wlan0: Trigger new scan to find an IBSS to join [ 1062.912047][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2155'. [ 1063.063995][T14235] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1063.190282][T14235] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1063.945882][T14235] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1065.663749][T14262] loop1: detected capacity change from 0 to 512 [ 1065.724037][T14262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1065.734824][T14262] ext4: Unknown parameter 'fscontext' [ 1066.114526][T13491] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1066.767352][T14270] tipc: Enabling of bearer rejected, already enabled [ 1066.770751][T14273] loop1: detected capacity change from 0 to 512 [ 1066.775999][T14270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'. [ 1066.794728][T14270] netlink: 'syz.0.2159': attribute type 1 has an invalid length. [ 1067.664332][T14273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1067.704987][T14273] ext4: Unknown parameter 'fscontext' [ 1067.829325][T14270] bond20: entered promiscuous mode [ 1067.855473][T14270] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1067.921698][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2159'. [ 1068.070884][T14280] loop1: detected capacity change from 0 to 2048 [ 1068.721405][T13491] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1068.879662][T13282] wlan0: Trigger new scan to find an IBSS to join [ 1068.886363][ T3503] wlan0: Trigger new scan to find an IBSS to join [ 1069.900575][T14291] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1069.965339][T14291] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1069.973955][T14291] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1070.010577][T13299] wlan0: Creating new IBSS network, BSSID 7e:62:87:52:fd:eb [ 1070.054704][T14296] loop1: detected capacity change from 0 to 512 [ 1070.077755][T14296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1070.103615][T14296] ext4: Unknown parameter 'fscontext' [ 1070.554456][T13491] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1071.135563][T14305] tipc: Enabling of bearer rejected, already enabled [ 1071.144169][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2171'. [ 1071.154819][T14305] netlink: 'syz.2.2171': attribute type 1 has an invalid length. [ 1071.272262][T14305] bond16: entered promiscuous mode [ 1071.279769][T14305] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1071.313871][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 1071.588390][T13491] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1072.520959][ T62] ------------[ cut here ]------------ [ 1072.527184][ T62] WARNING: CPU: 0 PID: 62 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 1072.536753][ T62] Modules linked in: [ 1072.540682][ T62] CPU: 0 PID: 62 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1072.548399][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1072.558618][ T62] Workqueue: iou_exit io_ring_exit_work [ 1072.564206][ T62] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 1072.570116][ T62] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 1072.590044][ T62] RSP: 0018:ffffc900015d7a40 EFLAGS: 00010293 [ 1072.596149][ T62] RAX: ffffffff8a833c89 RBX: ffff88805c410000 RCX: ffff88801eadbc00 [ 1072.604197][ T62] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 1072.612243][ T62] RBP: ffffc900015d7bb0 R08: ffffc900015d79c7 R09: 1ffff920002baf38 [ 1072.620240][ T62] R10: dffffc0000000000 R11: fffff520002baf39 R12: dffffc0000000000 [ 1072.628305][ T62] R13: 00000001000119ca R14: 00000001000119d0 R15: ffff88805c410510 [ 1072.636550][ T62] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1072.645653][ T62] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1072.652269][ T62] CR2: 00007ff4e44cd3aa CR3: 000000001f7a8000 CR4: 00000000003506f0 [ 1072.660501][ T62] Call Trace: [ 1072.663797][ T62] [ 1072.666894][ T62] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1072.672816][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 1072.678186][ T62] ? process_scheduled_works+0x975/0x1600 [ 1072.683941][ T62] ? process_scheduled_works+0x975/0x1600 [ 1072.689802][ T62] process_scheduled_works+0xa60/0x1600 [ 1072.695415][ T62] ? worker_attach_to_pool+0x370/0x370 [ 1072.700991][ T62] ? assign_work+0x3cc/0x5d0 [ 1072.705613][ T62] worker_thread+0xa5e/0xfe0 [ 1072.710280][ T62] kthread+0x2fa/0x390 [ 1072.714346][ T62] ? pr_cont_work+0x550/0x550 [ 1072.719019][ T62] ? kthread_blkcg+0xd0/0xd0 [ 1072.723654][ T62] ret_from_fork+0x48/0x80 [ 1072.728088][ T62] ? kthread_blkcg+0xd0/0xd0 [ 1072.732732][ T62] ret_from_fork_asm+0x11/0x20 [ 1072.737536][ T62] [ 1072.740549][ T62] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1072.747979][ T62] CPU: 0 PID: 62 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1072.755381][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1072.765443][ T62] Workqueue: iou_exit io_ring_exit_work [ 1072.771001][ T62] Call Trace: [ 1072.774276][ T62] [ 1072.777224][ T62] dump_stack_lvl+0x18c/0x250 [ 1072.782027][ T62] ? show_regs_print_info+0x20/0x20 [ 1072.787235][ T62] ? load_image+0x420/0x420 [ 1072.791788][ T62] panic+0x2ca/0x720 [ 1072.795691][ T62] ? bpf_jit_dump+0xd0/0xd0 [ 1072.800205][ T62] ? ret_from_fork_asm+0x11/0x20 [ 1072.805153][ T62] __warn+0x2e0/0x470 [ 1072.809135][ T62] ? io_ring_exit_work+0x3b9/0x830 [ 1072.814247][ T62] ? io_ring_exit_work+0x3b9/0x830 [ 1072.819356][ T62] report_bug+0x2be/0x4f0 [ 1072.823715][ T62] ? io_ring_exit_work+0x3b9/0x830 [ 1072.828914][ T62] ? io_ring_exit_work+0x3b9/0x830 [ 1072.834029][ T62] ? io_ring_exit_work+0x3bb/0x830 [ 1072.839139][ T62] handle_bug+0xcf/0x120 [ 1072.843390][ T62] exc_invalid_op+0x1a/0x50 [ 1072.847891][ T62] asm_exc_invalid_op+0x1a/0x20 [ 1072.852845][ T62] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 1072.858566][ T62] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 1072.878175][ T62] RSP: 0018:ffffc900015d7a40 EFLAGS: 00010293 [ 1072.884241][ T62] RAX: ffffffff8a833c89 RBX: ffff88805c410000 RCX: ffff88801eadbc00 [ 1072.892209][ T62] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 1072.900262][ T62] RBP: ffffc900015d7bb0 R08: ffffc900015d79c7 R09: 1ffff920002baf38 [ 1072.908245][ T62] R10: dffffc0000000000 R11: fffff520002baf39 R12: dffffc0000000000 [ 1072.916228][ T62] R13: 00000001000119ca R14: 00000001000119d0 R15: ffff88805c410510 [ 1072.924212][ T62] ? io_ring_exit_work+0x3b9/0x830 [ 1072.929352][ T62] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1072.935171][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 1072.940375][ T62] ? process_scheduled_works+0x975/0x1600 [ 1072.946096][ T62] ? process_scheduled_works+0x975/0x1600 [ 1072.951815][ T62] process_scheduled_works+0xa60/0x1600 [ 1072.957388][ T62] ? worker_attach_to_pool+0x370/0x370 [ 1072.962853][ T62] ? assign_work+0x3cc/0x5d0 [ 1072.967450][ T62] worker_thread+0xa5e/0xfe0 [ 1072.972079][ T62] kthread+0x2fa/0x390 [ 1072.976190][ T62] ? pr_cont_work+0x550/0x550 [ 1072.980877][ T62] ? kthread_blkcg+0xd0/0xd0 [ 1072.985468][ T62] ret_from_fork+0x48/0x80 [ 1072.989886][ T62] ? kthread_blkcg+0xd0/0xd0 [ 1072.994495][ T62] ret_from_fork_asm+0x11/0x20 [ 1072.999271][ T62] [ 1073.002540][ T62] Kernel Offset: disabled [ 1073.006946][ T62] Rebooting in 86400 seconds..