last executing test programs: 12m35.069625372s ago: executing program 3 (id=37): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec77e000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 12m34.697333073s ago: executing program 3 (id=41): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) socketpair$unix(0x1, 0x2, 0x0, 0x0) 12m34.378271563s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) close(0x3) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048080) r3 = socket$inet(0xa, 0x801, 0x84) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 12m33.374070514s ago: executing program 3 (id=51): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xfffffffd, 0x20000, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x8, 0x10001}}, 0x50) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) 12m32.516827182s ago: executing program 3 (id=54): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e1d, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000500)={0x7, 0x8, 0xfa00, {r3, 0xe}}, 0x10) 12m32.048647867s ago: executing program 3 (id=55): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x100) r2 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x521}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12m31.458152985s ago: executing program 32 (id=55): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x100) r2 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x521}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12m28.399991451s ago: executing program 0 (id=71): r0 = fsopen(&(0x7f00000005c0)='cramfs\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x80000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 12m28.147456309s ago: executing program 0 (id=73): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12m27.240989347s ago: executing program 0 (id=75): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@local}) close_range(r0, 0xffffffffffffffff, 0x0) 12m27.127231311s ago: executing program 0 (id=76): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) r1 = syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010101, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0xfffffffffffffffd, 0x400000000, 0x8000000000000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) timer_create(0x2, &(0x7f0000000000)={0x0, 0xf, 0x1, @thr={0x0, 0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4810) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xc, 0x0) 12m26.52299048s ago: executing program 0 (id=79): socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000080)='./file0\x00', 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 12m24.729018426s ago: executing program 0 (id=83): creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) socketpair(0x10, 0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 12m24.182651333s ago: executing program 33 (id=83): creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) socketpair(0x10, 0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 12m21.963922023s ago: executing program 1 (id=93): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000400)={0x2c, 0x2, r2, 0x16}, 0x10) 12m16.877333183s ago: executing program 1 (id=100): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x1, 0xffffffffffbffffb}) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x9, 0x800800}) creat(&(0x7f0000000040)='./bus\x00', 0x0) 12m13.320391425s ago: executing program 1 (id=97): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12m12.232838949s ago: executing program 1 (id=106): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 12m12.018876546s ago: executing program 1 (id=108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66646185, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 12m11.591540839s ago: executing program 1 (id=111): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0xc000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) signalfd4(r1, &(0x7f0000000340)={[0xfffffffffffffffe]}, 0x8, 0x800) 12m11.006523388s ago: executing program 34 (id=111): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0xc000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) signalfd4(r1, &(0x7f0000000340)={[0xfffffffffffffffe]}, 0x8, 0x800) 12m8.105736549s ago: executing program 5 (id=133): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 12m6.864903978s ago: executing program 5 (id=135): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000009a000/0xb000)=nil], 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 12m4.617859898s ago: executing program 5 (id=145): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 12m1.117642908s ago: executing program 5 (id=153): syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f000068d000/0x1000)=nil, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 11m59.890560927s ago: executing program 5 (id=159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 11m59.080676592s ago: executing program 5 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 11m58.491744041s ago: executing program 35 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 11m4.106703679s ago: executing program 7 (id=408): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r3) sendmmsg$unix(r1, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=[@cred={{0x1c, 0x1, 0x2, {r0, r3}}}], 0x20, 0x40000}}], 0x1, 0x8000) 11m3.868565957s ago: executing program 7 (id=411): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 11m3.681727943s ago: executing program 7 (id=413): openat$nullb(0xffffffffffffff9c, 0x0, 0x185042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = shmat(0x0, &(0x7f00001bd000/0x2000)=nil, 0x4000) shmdt(r0) 11m0.078243236s ago: executing program 7 (id=434): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xfffffffd, 0x20000, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x8, 0x10001}}, 0x50) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) 10m58.627847162s ago: executing program 7 (id=439): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000000)=ANY=[], 0x23) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0xf8, r4, 0x1, 0x2, 0x6, @remote}, 0x14) splice(r1, 0x0, r3, 0x0, 0x10500, 0x0) 10m56.601028675s ago: executing program 7 (id=443): socket$netlink(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x161d21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m56.094179871s ago: executing program 36 (id=443): socket$netlink(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x161d21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m1.803021997s ago: executing program 8 (id=639): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x7, 0x100}, {0x6, 0x9, 0x9, 0x10001}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f00000001c0)) sendto$inet6(r1, 0x0, 0x0, 0x40d8880, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3008, 0x0, 0x0, 0x0) 10m1.532370306s ago: executing program 8 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x801) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x8000000, 0xd000, 0x3, 0x0, 0xa, 0xfc, 0x4, 0x0, 0x0, 0xfe, 0x0, 0xfe}, {0x0, 0x2000, 0x3, 0x1, 0x40, 0x3, 0x4, 0x9, 0xfc, 0x0, 0x0, 0x52}, {0xeeef0000, 0xeeef0000, 0x13, 0x8, 0x1, 0x0, 0xb, 0x0, 0x4, 0xd, 0x84, 0x3}, {0x100000, 0x0, 0x0, 0xb, 0x0, 0x3, 0xff}, {0xd000, 0x8000000, 0x0, 0x0, 0x0, 0x80, 0x86, 0x0, 0x2, 0x10, 0x1a}, {0x11001006, 0x8000000, 0xd, 0x0, 0x0, 0x8f, 0x8b, 0x0, 0x0, 0x0, 0x84}, {0x8080000, 0x80a0000, 0x4, 0xf0, 0x0, 0xfe, 0xfd, 0x0, 0x2, 0x4}, {0x1, 0xa000, 0xf, 0xe9, 0x3, 0x2, 0x0, 0xc, 0x0, 0x3, 0x0, 0x40}, {0x6000, 0x3}, {0x1000, 0xfffe}, 0x60060020, 0x0, 0x41000, 0x100041, 0x40000b, 0x1000, 0x900, [0x5, 0x0, 0x0, 0x9]}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x100000001, 0x0, 0x0, 0x9, 0x13, 0x3, 0x2002], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m0.921827885s ago: executing program 8 (id=647): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000002f40)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/108, 0x0, 0x40000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) write$vhost_msg_v2(r1, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) 10m0.495479028s ago: executing program 8 (id=649): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) syz_read_part_table(0x1060, &(0x7f0000001080)="$eJzsz7FxwjAYBeCns53YVbJBMkY2SJE6EzCIgXFYgYKeEZiFO3G2gRGA4vuKX3dPT9IpPNVQkjTtT0nqOAWf78tGm828NvPssj+2ZZ18ZUytc6dfioe/rk/9aPqk5PQ7bIfr1W/TONfV7amyJN/lfjT/u0f9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe2SUAAP//QVgOmw==") lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000500)=@v3={0x3000000, [{0xdd, 0x1}, {0x2, 0x6}]}, 0x18, 0x0) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 9m57.228296201s ago: executing program 8 (id=670): fsopen(&(0x7f0000000000)='exfat\x00', 0x0) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 9m55.65686439s ago: executing program 8 (id=678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x75, 0x6, 0x1, 0x0, 0x8, 0x7, 0xc, 0x7, 0x4, 0xb, 0x24, 0x7, 0x0, 0x5, 0x1, 0xff, 0x3, 0x5, 0x6, '\x00', 0xff, 0xfff}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xd, 0x0, 0x7, 0xc2, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x1, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x1, 0x7, 0x20, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x200000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x5b, 0xb, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0xffff1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x7ffffffe, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m55.022959101s ago: executing program 37 (id=678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x8, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x75, 0x6, 0x1, 0x0, 0x8, 0x7, 0xc, 0x7, 0x4, 0xb, 0x24, 0x7, 0x0, 0x5, 0x1, 0xff, 0x3, 0x5, 0x6, '\x00', 0xff, 0xfff}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xd, 0x0, 0x7, 0xc2, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x1, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x1, 0x7, 0x20, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x200000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x5b, 0xb, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0xffff1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x7ffffffe, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.760568318s ago: executing program 6 (id=2785): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 9.621991711s ago: executing program 9 (id=2790): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x0, 0x0, 0x0, 0xf}, 0x94) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) set_mempolicy(0x4005, 0x0, 0x6) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 9.514726035s ago: executing program 6 (id=2791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000010401f007000000000000010100000506000640000000000a000200fffffffe08000a000500010001"], 0x30}, 0x1, 0x0, 0x0, 0x260080d4}, 0xc0) socket$kcm(0x29, 0x2, 0x0) 9.05416449s ago: executing program 9 (id=2792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40281, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffb6, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x4, 0x80000000, 0x4, 0x6, 0x6, 0x1, 0x100, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 8.427442281s ago: executing program 2 (id=2794): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r1, &(0x7f0000000380)='j', 0x1, 0x24024095, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0xfdae) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 8.247160697s ago: executing program 6 (id=2796): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r2 = dup3(r1, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003180)=[{{0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1}}], 0x1, 0x58ca2280, 0x0) 7.785992972s ago: executing program 4 (id=2797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 7.733800264s ago: executing program 9 (id=2798): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) truncate(&(0x7f0000000900)='./file1\x00', 0x6) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 6.118858117s ago: executing program 9 (id=2799): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x4e21, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x4001, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x8}, 0x9, 0x0, 0x0, 0x1, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 6.110690138s ago: executing program 2 (id=2800): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @local, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x80, 0x800, @mcast1}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 5.733040811s ago: executing program 2 (id=2801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 5.73288078s ago: executing program 4 (id=2802): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1000000000000}]}) setrlimit(0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.673146552s ago: executing program 9 (id=2803): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000100)='rw\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) syz_emit_ethernet(0x16, &(0x7f0000000540)={@remote, @broadcast, @val, {@generic={0x8864}}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0x6, 0x58b, &(0x7f00000008c0)="$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") 5.656115823s ago: executing program 6 (id=2804): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000080)='./file0/file0\x00', 0x4000, 0x400, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r1}}]}, 0x1, 0x5dd, &(0x7f0000001680)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x64042, 0x12e) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x6168, r0}, 0x0) landlock_restrict_self(r2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x2a00008, 0x0, 0x5, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 5.228988567s ago: executing program 4 (id=2805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.695576514s ago: executing program 2 (id=2806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pselect6(0x40, &(0x7f0000000080)={0x9, 0x3, 0x7ff, 0x6, 0x8, 0x2, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) fcntl$setsig(r0, 0xa, 0x32) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 1.031688246s ago: executing program 4 (id=2807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="56c355abbfb25656ae8a254adbc339dc171b30490a7ad42beee1cc68f78a8385a4fb8d437f96cb58b8d6a6726c0e7430596065733ec05015e505f57e964a01cab2df588439b0802434212b9f81c24fad954d423a80dda784c4d408490a47e6cfb048f5", 0x63}, {&(0x7f0000000180)="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", 0x14b}], 0x2}}], 0x2, 0x20000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) 998.463717ms ago: executing program 6 (id=2808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x845}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x13, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 935.787859ms ago: executing program 9 (id=2809): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) 425.087306ms ago: executing program 4 (id=2810): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x1, 0x27d, &(0x7f0000000180)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x28000004}, 0x4000000) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) finit_module(r2, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00'], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000008c0)={{0x2, 0x4e23, @empty}, {0x1, @remote}, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 341.029089ms ago: executing program 2 (id=2811): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000001100), 0x4) sendmsg$inet(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000640)}, 0x4000040) sendmsg$inet(r0, 0x0, 0x8040) close(r0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) 130.767705ms ago: executing program 6 (id=2812): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x141000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000206030000000300686173683a69000000000100000000000900020073797a311b000097cc26afc28057001400078008001340000017e508001240000000090000000000"], 0x48}}, 0x4080) socket(0x1, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x48000, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1000, 0xffff8000) 117.967516ms ago: executing program 2 (id=2813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x796f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) 0s ago: executing program 4 (id=2814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295c700000000000000000000000000000000fe31e1e02dd54ac3c7af2b3d76a63b79ca6f9a20b26761254aee1352ad08118a58802cc8f107852b8f5382f0871255ce5c0b31e39637850330f520d03ed2aa076efa8401613537585d45bd27454beccdc32645cfe67921df3f2bbf88cacc83f82e916f0ee19ad20cdf5ce3b2ee147f78c1caf8b8024bac9809015b2210d7c2471dfd73f6eb"], &(0x7f0000000100)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): j=unconfined pid=10400 comm="syz.2.1020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 328.886317][ T28] audit: type=1326 audit(1782227249.723:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 328.999601][ T28] audit: type=1326 audit(1782227249.723:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 329.057725][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1025'. [ 329.073985][ T28] audit: type=1326 audit(1782227249.723:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 329.158430][ T28] audit: type=1326 audit(1782227249.723:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 329.434030][T10428] binder: 10427:10428 unknown command 0 [ 329.479171][T10428] binder: 10427:10428 ioctl c0306201 200000000080 returned -22 [ 330.623948][T10458] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1036'. [ 330.806004][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1037'. [ 330.938918][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 330.968790][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 331.051914][T10471] bridge2: port 1(vlan2) entered blocking state [ 331.085249][T10471] bridge2: port 1(vlan2) entered disabled state [ 331.127681][T10471] vlan2: entered allmulticast mode [ 331.149845][T10471] bridge2: entered allmulticast mode [ 331.170741][T10471] vlan2: left allmulticast mode [ 331.179341][T10471] bridge2: left allmulticast mode [ 331.659124][ C1] hrtimer: interrupt took 505156 ns [ 331.848130][T10498] CUSE: unknown device info "" [ 331.853845][T10498] CUSE: unknown device info "" [ 331.858796][T10498] CUSE: unknown device info "" [ 331.863898][T10498] CUSE: unknown device info "" [ 331.868842][T10498] CUSE: unknown device info "" [ 331.874510][T10498] CUSE: unknown device info "" [ 331.880077][T10498] CUSE: unknown device info "" [ 331.885968][T10498] CUSE: unknown device info "" [ 331.891064][T10498] CUSE: unknown device info "" [ 331.896585][T10498] CUSE: unknown device info "" [ 331.902207][T10498] CUSE: unknown device info "" [ 331.907638][T10498] CUSE: unknown device info "r" [ 331.913177][T10498] CUSE: unknown device info "#" [ 331.934449][T10498] CUSE: unknown device info "" [ 331.940635][T10498] CUSE: unknown device info "" [ 331.945785][T10498] CUSE: unknown device info "" [ 331.951029][T10498] CUSE: DEVNAME unspecified [ 335.465776][T10530] loop9: detected capacity change from 0 to 512 [ 335.715849][T10530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.750574][T10530] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.004105][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 336.004164][ T28] audit: type=1800 audit(1782227257.083:65): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1052" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 336.162991][ T28] audit: type=1800 audit(1782227257.113:66): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1052" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 336.197392][T10542] EXT4-fs (loop9): shut down requested (2) [ 336.408347][ T9049] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.994414][T10573] loop6: detected capacity change from 0 to 8 [ 343.037418][T10573] SQUASHFS error: zlib decompression failed, data probably corrupt [ 343.046102][T10573] SQUASHFS error: Failed to read block 0x9b: -5 [ 343.052537][T10573] SQUASHFS error: Unable to read metadata cache entry [99] [ 343.059996][T10573] SQUASHFS error: Unable to read inode 0x127 [ 344.943050][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1066'. [ 345.419185][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 345.625729][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 346.161991][T10620] loop2: detected capacity change from 0 to 7 [ 346.199738][T10620] Dev loop2: unable to read RDB block 7 [ 346.205590][T10620] loop2: unable to read partition table [ 346.229084][T10620] loop2: partition table beyond EOD, truncated [ 346.253271][T10620] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 347.276311][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 347.333018][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 349.119899][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 349.329838][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 349.364629][ T9] usb 7-1: config index 0 descriptor too short (expected 3659, got 75) [ 349.376124][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.441840][ T9] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 349.494899][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.540141][ T9] usb 7-1: Product: syz [ 349.560023][ T9] usb 7-1: Manufacturer: syz [ 349.564715][ T9] usb 7-1: SerialNumber: syz [ 349.628693][ T9] usb 7-1: config 0 descriptor?? [ 349.663707][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 350.999260][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.086800][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.100050][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.117826][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.145091][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.153410][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.161451][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.173797][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.191196][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.199140][T10720] netlink: 'syz.9.1093': attribute type 3 has an invalid length. [ 351.846649][ T9] gspca_sunplus: reg_r err -71 [ 351.852064][ T9] sunplus: probe of 7-1:0.0 failed with error -71 [ 351.892860][ T9] usb 7-1: USB disconnect, device number 6 [ 352.183914][T10732] overlayfs: failed to clone upperpath [ 353.469376][T10755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.516692][T10757] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 353.622100][T10757] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 353.940938][T10758] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 354.005527][T10758] bond1: (slave batadv1): making interface the new active one [ 354.039255][T10758] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 354.171243][T10758] batadv1: entered promiscuous mode [ 354.177129][T10758] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 356.525350][T10769] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1111'. [ 356.639324][T10772] loop9: detected capacity change from 0 to 128 [ 356.757296][T10772] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.786755][T10772] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 356.949049][T10772] EXT4-fs (loop9): shut down requested (1) [ 356.975978][T10772] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 357.192301][ T9049] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.595686][T10790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.621990][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1117'. [ 357.754784][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1118'. [ 357.888588][T10793] syz_tun (unregistering): left allmulticast mode [ 359.831577][ T28] audit: type=1326 audit(1782227280.913:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147b9ce59 code=0x7ffc0000 [ 359.923699][ T28] audit: type=1326 audit(1782227280.913:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147b9ce59 code=0x7ffc0000 [ 360.121831][ T28] audit: type=1326 audit(1782227280.913:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147b9ce59 code=0x7ffc0000 [ 360.222883][ T28] audit: type=1326 audit(1782227280.913:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147b9ce59 code=0x7ffc0000 [ 360.305231][ T28] audit: type=1326 audit(1782227280.913:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0147b9ce59 code=0x7ffc0000 [ 360.452917][ T28] audit: type=1326 audit(1782227280.963:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147b9ce59 code=0x7ffc0000 [ 360.539918][ T28] audit: type=1326 audit(1782227280.963:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147b9ce59 code=0x7ffc0000 [ 360.600175][ T28] audit: type=1326 audit(1782227280.963:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0147b5d68e code=0x7ffc0000 [ 360.696971][ T28] audit: type=1326 audit(1782227280.963:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0147b5d68e code=0x7ffc0000 [ 360.804481][ T28] audit: type=1326 audit(1782227280.963:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.6.1126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0147b5d68e code=0x7ffc0000 [ 364.658459][T10867] validate_nla: 44 callbacks suppressed [ 364.658480][T10867] netlink: 'syz.6.1146': attribute type 10 has an invalid length. [ 364.849901][T10869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1147'. [ 365.054465][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 365.514345][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1149'. [ 365.690744][ T71] batadv1: left promiscuous mode [ 365.805127][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 365.805143][ T28] audit: type=1326 audit(1782227286.903:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.4.1151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8f4f9ce59 code=0x0 [ 369.039567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 369.285760][T10925] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.683630][T10925] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.972408][T10925] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.115984][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1168'. [ 370.618069][T10925] team0: Port device netdevsim0 removed [ 370.670811][T10925] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.268842][T10925] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.347346][T10925] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.375113][T10925] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.459493][T10925] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.449837][ T28] audit: type=1326 audit(1782227293.533:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.6.1177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0147b9ce59 code=0x0 [ 372.907138][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1182'. [ 373.014295][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 373.761891][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1188'. [ 374.762839][T11003] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1192'. [ 374.816208][T11003] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1192'. [ 374.871498][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 375.149862][ T28] audit: type=1326 audit(1782227296.243:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.9.1194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 375.256400][ T28] audit: type=1326 audit(1782227296.253:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.9.1194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 376.298646][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1199'. [ 379.042003][ T28] audit: type=1800 audit(1782227300.143:146): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1208" name="bus" dev="ramfs" ino=25517 res=0 errno=0 [ 379.091195][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.098740][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.178173][T11056] kvm: pic: level sensitive irq not supported [ 379.349576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 379.419568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 380.588430][T11081] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 382.781979][T11098] loop6: detected capacity change from 0 to 256 [ 383.036316][T11098] netlink: 'syz.6.1219': attribute type 298 has an invalid length. [ 384.089649][ T5872] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 384.299655][ T5872] usb 7-1: Using ep0 maxpacket: 32 [ 384.317714][ T5872] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 384.343863][ T5872] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 384.385636][ T5872] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 384.428204][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.472825][ T5872] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 384.506231][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.547501][ T5872] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 384.609735][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.650918][ T5872] usb 7-1: config 0 descriptor?? [ 385.003414][ T5872] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 385.522254][ T5872] usb 7-1: USB disconnect, device number 7 [ 385.545091][ T5872] usblp0: removed [ 386.183947][T11143] bond2: entered allmulticast mode [ 386.259862][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 386.316877][T11149] sctp: [Deprecated]: syz.4.1236 (pid 11149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.316877][T11149] Use struct sctp_sack_info instead [ 386.429827][T11145] macvlan2: entered promiscuous mode [ 386.467114][T11145] macvlan2: entered allmulticast mode [ 386.485195][T11145] bond2: entered promiscuous mode [ 386.542093][T11145] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 386.602471][T11145] bond2: left promiscuous mode [ 387.934078][T11174] sctp: [Deprecated]: syz.9.1246 (pid 11174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.934078][T11174] Use struct sctp_sack_info instead [ 387.991374][T11176] ref_ctr increment failed for inode: 0x84c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ccd1c80 [ 388.476649][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 388.887766][T11190] tipc: Failed to remove unknown binding: 66,0,0/0:3434106258/3434106259 [ 389.147225][T11198] netlink: 'syz.9.1256': attribute type 1 has an invalid length. [ 389.460037][T11198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.880814][T11195] team0: Port device team_slave_0 removed [ 390.061865][T11199] bond3: (slave veth5): Enslaving as an active interface with a down link [ 390.191288][T11201] bond3: (slave dummy0): making interface the new active one [ 390.292543][T11201] dummy0: entered promiscuous mode [ 390.298193][T11201] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 390.465033][T11204] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1256'. [ 390.623896][T11204] bond3: (slave dummy0): Releasing active interface [ 390.657313][T11204] dummy0 (unregistering): left promiscuous mode [ 391.121060][T11207] ceph: No mds server is up or the cluster is laggy [ 391.309569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 393.147417][T11248] overlayfs: failed to clone upperpath [ 394.745723][T11260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.889057][T11266] loop6: detected capacity change from 0 to 256 [ 394.938108][T11267] bond3: (slave ip6gretap2): making interface the new active one [ 394.968582][T11267] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 396.223888][ T28] audit: type=1326 audit(1782227317.323:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.9.1282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 396.339879][ T28] audit: type=1326 audit(1782227317.323:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.9.1282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 396.782310][T11266] loop6: detected capacity change from 0 to 32768 [ 397.080413][T11262] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop6 scanned by udevd (11262) [ 397.810265][T11298] bond1: option mode: unable to set because the bond device has slaves [ 397.917199][T11298] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 398.287010][T11299] bond1: left allmulticast mode [ 398.333129][T11299] macvlan2: left allmulticast mode [ 398.365052][T11299] bond0: left allmulticast mode [ 398.416719][T11299] bond_slave_0: left allmulticast mode [ 398.446738][T11299] bond_slave_1: left allmulticast mode [ 398.954681][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1292'. [ 399.027184][T11306] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.037304][T11306] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.046243][T11306] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.055189][T11306] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.085230][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1292'. [ 399.122101][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1292'. [ 399.545037][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.824749][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1295'. [ 399.910540][T11318] overlayfs: failed to clone upperpath [ 400.770623][T11328] capability: warning: `syz.9.1299' uses 32-bit capabilities (legacy support in use) [ 402.847608][T11359] capability: warning: `syz.6.1311' uses deprecated v2 capabilities in a way that may be insecure [ 407.942905][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1332'. [ 408.492490][T11431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.546247][T11431] batadv_slave_1: entered promiscuous mode [ 409.885281][T11453] loop6: detected capacity change from 0 to 136 [ 410.260021][T11462] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 410.325440][T11462] ref_ctr increment failed for inode: 0x66f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805df6af80 [ 410.394210][T11460] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 410.440585][T11460] ref_ctr decrement failed for inode: 0x66f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805df6af80 [ 410.709976][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1350'. [ 411.000510][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1350'. [ 414.643624][T11541] loop6: detected capacity change from 0 to 512 [ 414.699658][T11541] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 414.724916][T11543] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 414.724916][T11543] The task syz.2.1369 (11543) triggered the difference, watch for misbehavior. [ 414.774711][T11541] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 414.843876][T11541] EXT4-fs (loop6): 1 truncate cleaned up [ 414.886222][T11541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.117587][T11541] EXT4-fs error (device loop6): get_max_inline_xattr_value_size:69: inode #12: comm syz.6.1370: corrupt xattr in inline inode [ 415.233976][T11541] EXT4-fs error (device loop6): ext4_check_all_de:666: inode #12: block 7: comm syz.6.1370: bad entry in directory: directory entry overrun - offset=0, inode=901261600, rec_len=7976, size=56 fake=0 [ 415.493956][ T6388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.057525][T11579] overlayfs: failed to clone upperpath [ 418.333093][T11601] bond4: entered allmulticast mode [ 418.493204][T11601] 8021q: adding VLAN 0 to HW filter on device bond5 [ 418.581347][T11601] bond5: entered allmulticast mode [ 418.587171][T11601] bond4: (slave bond5): Enslaving as an active interface with an up link [ 420.866709][ T28] audit: type=1800 audit(1782227341.963:149): pid=11634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1410" name="bus" dev="ramfs" ino=27675 res=0 errno=0 [ 421.226138][T11645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.566118][T11658] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1412'. [ 421.803429][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1412'. [ 422.441943][T11666] bond6: entered allmulticast mode [ 422.524513][T11670] bond6: (slave ip6gretap3): no link monitoring support [ 422.620819][T11670] ip6gretap3: entered allmulticast mode [ 422.630681][T11670] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link [ 423.441285][ T28] audit: type=1326 audit(1782227344.533:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.2.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 423.513977][ T28] audit: type=1326 audit(1782227344.543:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.2.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 423.562837][ T28] audit: type=1326 audit(1782227344.543:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.2.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 423.609692][ T28] audit: type=1326 audit(1782227344.563:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.2.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 423.662742][ T28] audit: type=1326 audit(1782227344.593:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.2.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cdd75d68e code=0x7ffc0000 [ 423.759873][ T28] audit: type=1326 audit(1782227344.593:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.2.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cdd75d68e code=0x7ffc0000 [ 423.849889][ T28] audit: type=1326 audit(1782227344.593:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.2.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cdd75d68e code=0x7ffc0000 [ 423.953635][ T28] audit: type=1326 audit(1782227344.593:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.2.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cdd75d68e code=0x7ffc0000 [ 424.029927][ T28] audit: type=1326 audit(1782227344.603:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.2.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cdd75d68e code=0x7ffc0000 [ 430.534215][T11751] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 431.483897][T11762] io-wq is not configured for unbound workers [ 432.912085][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 432.912105][ T28] audit: type=1800 audit(1782227354.003:227): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1454" name="/" dev="fuse" ino=4 res=0 errno=0 [ 434.018553][ T5817] kernel read not supported for file [userfaultfd] (pid: 5817 comm: kworker/1:3) [ 435.204990][T11849] loop6: detected capacity change from 0 to 1024 [ 435.226742][T11849] EXT4-fs: Ignoring removed bh option [ 435.291616][T11849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.610905][ T6388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.971849][ T8380] libceph: connect (1)[c::]:6789 error -101 [ 435.978265][ T8380] libceph: mon0 (1)[c::]:6789 connect error [ 436.061890][T11865] ceph: No mds server is up or the cluster is laggy [ 438.263067][T11908] netlink: 'syz.9.1498': attribute type 10 has an invalid length. [ 438.343015][T11908] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 438.584745][ T28] audit: type=1326 audit(1782227359.683:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.6.1495" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0147b9ce59 code=0x0 [ 439.544595][T11923] netlink: 'syz.9.1504': attribute type 1 has an invalid length. [ 439.819935][T11931] bond4: (slave veth7): Enslaving as an active interface with a down link [ 439.865786][T11934] bond4: entered promiscuous mode [ 439.899930][T11934] bond4: entered allmulticast mode [ 439.957508][T11934] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.560289][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.569772][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.609637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 442.489662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 444.079880][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 444.100542][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 444.138150][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 444.149813][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 444.190036][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 444.210647][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 444.242265][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 444.342669][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 444.378144][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 444.407858][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 446.363311][T11985] netlink: 'syz.4.1525': attribute type 1 has an invalid length. [ 446.728799][T11985] bond7: (slave veth3): Enslaving as an active interface with a down link [ 446.860266][T11992] bond7: (slave dummy0): making interface the new active one [ 446.901688][T11992] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 446.946619][T11994] netlink: 'syz.4.1525': attribute type 10 has an invalid length. [ 447.029702][T11994] dummy0: entered promiscuous mode [ 447.086721][T11994] bond7: (slave dummy0): Releasing active interface [ 447.156199][T12008] tipc: Failed to remove unknown binding: 66,1,1/0:3951463968/3951463970 [ 447.352793][T12015] tipc: Failed to remove unknown binding: 66,1,1/0:3951463968/3951463970 [ 447.415207][T12015] tipc: Failed to remove unknown binding: 66,1,1/0:3951463968/3951463970 [ 450.144374][ T28] audit: type=1326 audit(1782227371.223:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 450.259266][ T28] audit: type=1326 audit(1782227371.233:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 450.288566][ T28] audit: type=1326 audit(1782227371.233:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 450.386021][ T28] audit: type=1326 audit(1782227371.233:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 450.459845][ T28] audit: type=1326 audit(1782227371.233:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 450.549667][ T28] audit: type=1326 audit(1782227371.233:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 450.639119][ T28] audit: type=1326 audit(1782227371.233:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 450.729826][ T28] audit: type=1326 audit(1782227371.233:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 450.814860][ T28] audit: type=1326 audit(1782227371.233:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 450.929809][ T28] audit: type=1326 audit(1782227371.233:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.9.1542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 452.320803][T12082] macsec0: entered promiscuous mode [ 452.337955][T12082] __nla_validate_parse: 4 callbacks suppressed [ 452.337978][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1547'. [ 452.398397][T12082] veth1_macvtap: left promiscuous mode [ 453.283798][ T60] bond1: (slave geneve2): link status up again after 0 ms [ 453.370404][ T5066] bond1: (slave geneve2): link status up again after 0 ms [ 453.377637][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 453.536479][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 453.670469][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 453.800042][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 453.931904][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 454.069663][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 454.096852][T12117] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 454.243459][T12117] bond2: entered allmulticast mode [ 454.250885][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 454.366985][T12123] ip6gretap2: entered promiscuous mode [ 454.399297][T12123] ip6gretap2: entered allmulticast mode [ 454.444921][T12123] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 454.479978][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 454.611074][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 454.860356][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 455.071766][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 455.829545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 455.889535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 456.069536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 456.189536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 458.251956][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 458.251978][ T28] audit: type=1326 audit(1782227379.343:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.9.1578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75a8f9ce59 code=0x0 [ 458.442066][ T60] net_ratelimit: 17 callbacks suppressed [ 458.442090][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 458.611608][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 458.734038][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 458.898300][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 459.083967][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 459.286103][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 459.460836][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 459.615397][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 459.779736][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 459.931948][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 460.752596][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1594'. [ 461.708198][T12196] bridge4: entered promiscuous mode [ 462.762286][T12217] ip6gre2: entered promiscuous mode [ 462.784484][T12217] ip6gre2: entered allmulticast mode [ 463.499735][ T3440] net_ratelimit: 26 callbacks suppressed [ 463.499758][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 463.579362][T12232] syz_tun: entered promiscuous mode [ 463.610596][T12232] vlan2: entered promiscuous mode [ 463.755072][T12235] overlayfs: failed to clone upperpath [ 463.780628][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 463.919773][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 463.957713][T12239] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1617'. [ 464.030325][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 464.141250][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 464.271848][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 464.389915][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 464.501923][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 464.639769][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 464.779884][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 466.472513][T12270] netlink: 'syz.6.1631': attribute type 1 has an invalid length. [ 467.216794][T12270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.613454][T12271] bond3: (slave geneve2): making interface the new active one [ 467.749187][T12271] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 468.513010][ T68] net_ratelimit: 18 callbacks suppressed [ 468.513061][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 468.759818][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 469.019246][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 469.343793][ T1099] bond1: (slave geneve2): failed to get link speed/duplex [ 469.529969][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 469.669767][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 469.790073][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 469.916997][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 470.103966][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 470.273381][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 470.416286][T12299] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 470.807654][T12299] 8021q: adding VLAN 0 to HW filter on device bond8 [ 470.963394][T12302] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 470.989070][T12304] dummy0: left promiscuous mode [ 471.055795][T12304] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 471.101264][T12307] netlink: 'syz.4.1640': attribute type 10 has an invalid length. [ 471.159813][T12307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1640'. [ 471.200588][T12307] dummy0: entered promiscuous mode [ 471.232002][T12307] bond8: (slave dummy0): Removing an active aggregator [ 471.244622][T12307] bond8: (slave dummy0): Releasing backup interface [ 471.992807][T12326] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 472.207591][T12326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.872576][T12328] bond2: (slave veth5): Enslaving as an active interface with a down link [ 472.911859][T12331] veth0_virt_wifi: entered promiscuous mode [ 472.979368][T12331] bond2: (slave veth0_virt_wifi): making interface the new active one [ 473.027469][T12331] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 473.098309][T12326] bond2: (slave veth0_virt_wifi): Releasing active interface [ 473.133217][T12326] veth0_virt_wifi: left promiscuous mode [ 473.516516][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1653'. [ 473.629687][ T68] net_ratelimit: 12 callbacks suppressed [ 473.629710][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 473.782626][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 473.934239][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 474.089918][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 474.510021][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 474.619802][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 474.739694][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 474.838199][T12341] netlink: 'syz.2.1655': attribute type 3 has an invalid length. [ 474.859898][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 475.030787][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 475.107891][T12349] overlayfs: failed to clone upperpath [ 475.182509][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 475.236496][T12351] loop6: detected capacity change from 0 to 256 [ 475.343328][T12351] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 475.399053][T12351] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 475.575904][T12351] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 475.697041][T12351] 9pnet: p9_errstr2errno: server reported unknown error @cDfߠ؋ [ 477.178372][T12374] team0: Port device team_slave_0 removed [ 478.646612][ T3440] net_ratelimit: 24 callbacks suppressed [ 478.646635][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 478.796133][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 478.980532][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 479.089904][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 479.231017][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 479.361571][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 479.543242][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 479.705539][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 479.842412][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 480.020741][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 480.992387][T12432] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1688'. [ 481.651287][T12443] overlayfs: failed to clone upperpath [ 481.740826][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1692'. [ 482.069747][T12445] team0 (unregistering): Port device team_slave_1 removed [ 482.372707][T12449] ceph: No mds server is up or the cluster is laggy [ 483.719637][ T49] net_ratelimit: 23 callbacks suppressed [ 483.719660][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 484.094427][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 484.220164][T12467] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1699'. [ 484.277542][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 484.433580][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 484.590412][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 484.748585][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 484.870731][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 484.956372][T12477] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1701'. [ 485.005259][T12477] ip6gre3: entered promiscuous mode [ 485.037819][T12477] ip6gre3: entered allmulticast mode [ 485.064932][T12482] overlayfs: failed to clone upperpath [ 485.288922][T12477] netlink: 'syz.6.1701': attribute type 6 has an invalid length. [ 485.298292][T12477] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1701'. [ 485.413182][ T1099] bond1: (slave geneve2): failed to get link speed/duplex [ 485.560820][ T1099] bond1: (slave geneve2): failed to get link speed/duplex [ 485.770293][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 485.847977][T12495] loop6: detected capacity change from 0 to 512 [ 485.955176][T12495] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 486.004755][T12495] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #13: comm syz.6.1705: iget: bad i_size value: 12154757448730 [ 486.088341][ T2182] IPVS: starting estimator thread 0... [ 486.143134][T12495] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1705: couldn't read orphan inode 13 (err -117) [ 486.217168][T12495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.230569][T12503] IPVS: using max 18 ests per chain, 43200 per kthread [ 486.490858][ T6388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.769895][ T71] net_ratelimit: 24 callbacks suppressed [ 488.769918][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 488.962767][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 489.150422][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 489.259661][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 489.421501][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 489.579599][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 489.681055][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1725'. [ 489.762656][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 490.015807][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 490.088591][T12558] tipc: Started in network mode [ 490.150204][T12558] tipc: Node identity ac1414aa, cluster identity 4711 [ 490.216890][T12558] tipc: Enabled bearer , priority 10 [ 490.453091][T12564] tipc: Enabled bearer , priority 0 [ 490.590272][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 490.719835][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 491.479722][ T2182] tipc: Node number set to 2886997162 [ 491.904816][T12582] Bluetooth: MGMT ver 1.22 [ 492.217843][T12586] loop6: detected capacity change from 0 to 512 [ 492.290440][T12586] EXT4-fs (loop6): orphan cleanup on readonly fs [ 492.337248][T12586] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 492.409785][T12586] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 492.452673][T12586] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1731: couldn't read orphan inode 26 (err -116) [ 492.525164][T12586] EXT4-fs (loop6): Remounting filesystem read-only [ 492.554326][T12586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 492.896465][ T6388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.784271][ T68] net_ratelimit: 23 callbacks suppressed [ 493.784292][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 493.869936][ T5819] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 493.939955][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 494.073526][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 494.080595][ T5819] usb 7-1: Using ep0 maxpacket: 32 [ 494.137722][ T5819] usb 7-1: unable to get BOS descriptor or descriptor too short [ 494.170991][ T5819] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 494.182128][ T5819] usb 7-1: can't read configurations, error -71 [ 494.222318][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 494.352141][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 494.483419][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 494.520256][ T28] audit: type=1326 audit(1782227415.623:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12610 comm="syz.2.1739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x0 [ 494.612125][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 494.730794][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 494.922719][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 495.049842][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 495.421339][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1743'. [ 496.267399][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'. [ 496.623585][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1752'. [ 496.986761][T12640] macvlan2: entered promiscuous mode [ 497.036722][T12640] macvlan2: entered allmulticast mode [ 497.102554][T12640] bond3: (slave macvlan2): Opening slave failed [ 498.120140][ T8380] IPVS: starting estimator thread 0... [ 498.230056][T12661] IPVS: using max 16 ests per chain, 38400 per kthread [ 498.347812][T12663] siw: device registration error -23 [ 498.490198][ T28] audit: type=1326 audit(1782227419.573:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.9.1754" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 498.826133][ T60] net_ratelimit: 23 callbacks suppressed [ 498.826152][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 499.041359][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 499.222313][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 499.389585][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 499.569597][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 499.690833][ T68] bond1: (slave geneve2): failed to get link speed/duplex [ 499.810862][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 499.950214][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 500.044943][T12692] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 500.187151][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 500.343521][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 501.063445][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1774'. [ 501.956816][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.965366][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.334476][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'. [ 503.834063][ T49] net_ratelimit: 30 callbacks suppressed [ 503.834085][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 503.983143][ T28] audit: type=1326 audit(1782227425.063:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 504.090098][ T28] audit: type=1326 audit(1782227425.063:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 504.209704][ T28] audit: type=1326 audit(1782227425.063:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 504.312088][ T28] audit: type=1326 audit(1782227425.063:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 504.369793][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 504.438686][ T28] audit: type=1326 audit(1782227425.063:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 504.521369][ T60] bond1: (slave geneve2): failed to get link speed/duplex [ 504.540535][ T28] audit: type=1326 audit(1782227425.063:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 504.650477][ T28] audit: type=1326 audit(1782227425.063:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 504.674946][ T1099] bond1: (slave geneve2): failed to get link speed/duplex [ 504.767956][ T28] audit: type=1326 audit(1782227425.063:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 504.809649][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 504.885021][ T28] audit: type=1326 audit(1782227425.063:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 504.971246][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 505.002486][ T28] audit: type=1326 audit(1782227425.073:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.2.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9cdd79cbc2 code=0x7ffc0000 [ 505.057304][T12777] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1796'. [ 505.152332][T12760] loop6: detected capacity change from 0 to 32768 [ 505.318157][T12780] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1796'. [ 505.392814][T12780] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1796'. [ 505.510459][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 505.585734][T12760] JBD2: Ignoring recovery information on journal [ 505.639611][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 505.785520][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 505.828210][T12760] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 505.960572][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 506.146327][T12791] IPVS: Scheduler module ip_vs_ not found [ 506.541164][T12800] netlink: 'syz.4.1805': attribute type 1 has an invalid length. [ 506.574445][ T6388] ocfs2: Unmounting device (7,6) on (node local) [ 506.811781][T12800] 8021q: adding VLAN 0 to HW filter on device bond9 [ 507.172829][T12803] bond9: (slave veth0_to_bond): making interface the new active one [ 507.203058][T12803] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 508.007178][T12805] bond9: entered promiscuous mode [ 508.018477][T12805] veth0_to_bond: entered promiscuous mode [ 508.047236][T12805] bond9: entered allmulticast mode [ 508.055470][T12805] veth0_to_bond: entered allmulticast mode [ 508.624337][T12828] loop6: detected capacity change from 0 to 512 [ 508.665922][T12828] EXT4-fs: quotafile must be on filesystem root [ 508.931455][ T12] net_ratelimit: 12 callbacks suppressed [ 508.931477][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 509.091433][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 509.230984][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 509.377307][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 509.509878][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 509.649820][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 509.763388][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 509.763406][ T28] audit: type=1804 audit(1782227430.863:419): pid=12846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1818" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=30347 res=1 errno=0 [ 509.799953][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 509.844075][ T28] audit: type=1804 audit(1782227430.903:420): pid=12846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1818" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=30347 res=1 errno=0 [ 509.911343][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 510.029712][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 510.172968][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 510.227720][T12855] netlink: 'syz.6.1821': attribute type 4 has an invalid length. [ 510.286789][T12855] netlink: 'syz.6.1821': attribute type 4 has an invalid length. [ 511.057241][T12864] netlink: 'syz.6.1824': attribute type 6 has an invalid length. [ 512.323305][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1827'. [ 512.686450][T12876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1829'. [ 513.279920][ T5076] bond1: (slave geneve2): link status up again after 0 ms [ 513.961174][ T12] net_ratelimit: 31 callbacks suppressed [ 513.961196][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 514.120936][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 514.269925][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 514.389137][ T71] bond1: (slave geneve2): failed to get link speed/duplex [ 514.555468][ T12] bond1: (slave geneve2): failed to get link speed/duplex [ 514.710098][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 514.831129][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 514.991783][ T5066] bond1: (slave geneve2): failed to get link speed/duplex [ 515.250945][ T49] bond1: (slave geneve2): failed to get link speed/duplex [ 515.485048][ T3440] bond1: (slave geneve2): failed to get link speed/duplex [ 519.447948][T12929] tipc: Resetting bearer [ 519.949328][T12929] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.961587][T12929] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.978041][T12929] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.002337][T12929] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.117832][T12942] veth0_macvtap: left promiscuous mode [ 524.193875][T12979] bond1: (slave wlan0): Releasing active interface [ 524.201679][T12979] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 524.401756][T12979] batadv1: entered promiscuous mode [ 524.678533][T12979] bond0: (slave wlan1): Releasing backup interface [ 524.741592][T12979] bond1: (slave batadv1): Releasing active interface [ 524.778649][T12979] batadv1: left promiscuous mode [ 524.892237][T12979] bond3: (slave veth5): Releasing active interface [ 524.979013][T12979] bond4: (slave veth7): Releasing active interface [ 525.427489][ T56] Process accounting resumed [ 525.439280][T13015] : renamed from bond0 (while UP) [ 525.908709][ T5438] veth0_macvtap: entered promiscuous mode [ 528.260921][T13047] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.268419][T13047] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.854587][T13077] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 530.592756][T13047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.781011][T13047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.228519][T13098] loop6: detected capacity change from 0 to 4096 [ 531.245876][T13047] hsr0: left promiscuous mode [ 531.254307][T13098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.301683][T13098] EXT4-fs (loop6): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 531.367655][T13098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.106330][ T6388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.206511][T13106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.285207][T13106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.805712][T13047] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.815732][T13047] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.825713][T13047] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.836257][T13047] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.186176][T13106] netlink: 'syz.2.1894': attribute type 10 has an invalid length. [ 534.222854][T13106] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 535.893322][T13127] loop6: detected capacity change from 0 to 128 [ 535.902220][T13126] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1899'. [ 536.482061][T13134] siw: device registration error -23 [ 537.812029][T13152] loop6: detected capacity change from 0 to 128 [ 538.002205][T13159] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.1901'. [ 539.669791][T13152] syz.6.1909: attempt to access beyond end of device [ 539.669791][T13152] loop6: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 540.353233][T13188] loop6: detected capacity change from 0 to 1024 [ 540.407206][T13188] ext4: Unknown parameter 'no' [ 542.901095][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.778893][T13228] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 545.410704][T13243] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 545.523796][T13231] bond4: (slave veth9): Enslaving as an active interface with a down link [ 547.603772][T13273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.687659][T13273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.270396][T13282] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1939'. [ 553.483477][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1957'. [ 553.692150][T13343] bridge5: port 1(dummy0) entered blocking state [ 553.754609][T13343] bridge5: port 1(dummy0) entered disabled state [ 553.764106][T13343] dummy0: entered allmulticast mode [ 553.775374][T13343] dummy0: entered promiscuous mode [ 554.409732][T13341] netlink: 'syz.6.1957': attribute type 10 has an invalid length. [ 554.479846][T13341] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1957'. [ 554.560099][T13341] bridge5: port 1(dummy0) entered blocking state [ 554.566688][T13341] bridge5: port 1(dummy0) entered forwarding state [ 554.673549][T13341] dummy0: left allmulticast mode [ 554.721365][T13341] bridge5: port 1(dummy0) entered disabled state [ 554.864780][T13354] netlink: 'syz.4.1959': attribute type 1 has an invalid length. [ 556.187074][T13355] bond10: (slave veth7): Enslaving as an active interface with a down link [ 556.255471][T13359] bond10: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 557.819027][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1969'. [ 558.778843][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801cf43c00: rx timeout, send abort [ 558.788445][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801cf43c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 559.374720][T13410] Invalid ELF header len 7 [ 560.339282][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1980'. [ 562.670687][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1988'. [ 562.706763][T13446] vlan2: entered promiscuous mode [ 562.721703][T13446] bridge0: entered promiscuous mode [ 562.750120][T13446] vlan2: entered allmulticast mode [ 562.783567][T13446] bridge0: entered allmulticast mode [ 563.402125][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.412516][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.585556][ T28] audit: type=1326 audit(1782227485.683:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.1994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8f4f9ce59 code=0x0 [ 565.377405][T13470] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 565.474010][T13470] bond5: entered promiscuous mode [ 565.499848][T13470] bond5: entered allmulticast mode [ 565.530629][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 565.667350][T13472] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 565.783694][ T5785] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 565.795032][ T5785] Bluetooth: hci3: Injecting HCI hardware error event [ 565.808010][ T5785] Bluetooth: hci3: hardware error 0x00 [ 565.823710][T13472] bond5: (slave bridge6): making interface the new active one [ 565.831775][T13472] bridge6: entered promiscuous mode [ 565.837465][T13472] bridge6: entered allmulticast mode [ 565.845379][T13472] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 565.866015][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1996'. [ 565.876750][T13470] bond5: left promiscuous mode [ 565.882158][T13470] bridge6: left promiscuous mode [ 565.887449][T13470] bond5: left allmulticast mode [ 565.893413][T13470] bridge6: left allmulticast mode [ 565.914118][T13470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 565.957317][T13476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.020138][T13476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.134692][T13476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.855174][T13491] trusted_key: encrypted_key: insufficient parameters specified [ 568.001260][ T5785] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 570.019284][T13514] veth1_to_bond: entered promiscuous mode [ 570.050204][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'. [ 570.209081][T13514] veth1_to_bond (unregistering): left promiscuous mode [ 570.401434][T13514] bond0: (slave bond_slave_1): Releasing backup interface [ 573.613061][T13557] tipc: Failed to remove unknown binding: 66,0,0/4001528598:15545583/15545585 [ 573.654750][T13557] tipc: Failed to remove unknown binding: 66,0,0/4001528598:15545583/15545584 [ 573.702298][T13558] tipc: Failed to remove unknown binding: 66,0,0/4001528598:15545583/15545585 [ 573.734610][T13558] tipc: Failed to remove unknown binding: 66,0,0/4001528598:15545583/15545584 [ 576.364186][T13599] netlink: 'syz.6.2034': attribute type 4 has an invalid length. [ 576.480637][T13601] netlink: 'syz.6.2034': attribute type 4 has an invalid length. [ 577.525880][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2042'. [ 577.950497][T13633] trusted_key: syz.4.2043 sent an empty control message without MSG_MORE. [ 578.661146][T13641] net_ratelimit: 3 callbacks suppressed [ 578.661157][T13641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.443876][T13661] vlan2: entered promiscuous mode [ 582.456846][T13661] bridge0: entered promiscuous mode [ 582.474230][T13661] vlan2: entered allmulticast mode [ 582.499216][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'. [ 582.522175][T13661] bridge0: entered allmulticast mode [ 584.351999][T13662] bond0: (slave wlan1): Releasing backup interface [ 584.931094][T13662] bond1: (slave geneve2): Removing an active aggregator [ 584.944225][T13662] bond1: (slave geneve2): Releasing backup interface [ 584.972977][T13662] bond2: (slave veth5): Releasing active interface [ 585.017405][T13662] bond4: (slave veth9): Releasing active interface [ 585.348133][T13662] bond5: (slave bridge6): Releasing active interface [ 596.887136][T13759] vlan4: entered promiscuous mode [ 596.895252][T13759] bridge0: entered promiscuous mode [ 596.901938][T13759] vlan4: entered allmulticast mode [ 596.907464][T13759] bridge0: entered allmulticast mode [ 596.942967][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 596.963852][T13761] bridge_slave_0: left allmulticast mode [ 596.973772][T13761] bridge_slave_0: left promiscuous mode [ 596.985874][T13761] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.008289][T13761] bridge_slave_1: left allmulticast mode [ 597.020665][T13761] bridge_slave_1: left promiscuous mode [ 597.046376][T13761] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.076218][T13761] bond9: (slave veth0_to_bond): Releasing active interface [ 597.085929][T13761] veth0_to_bond: left promiscuous mode [ 597.107861][T13761] veth0_to_bond: left allmulticast mode [ 597.120897][T13761] bond0: (slave bond_slave_0): Releasing backup interface [ 597.135914][T13761] team0: Port device team_slave_1 removed [ 597.153754][T13761] bond1: (slave geneve2): Releasing active interface [ 597.165824][T13761] bond2: (slave ip6gretap1): Releasing active interface [ 597.181616][T13761] bond3: (slave ip6gretap2): Releasing active interface [ 597.196007][T13761] bond4: (slave bond5): Releasing backup interface [ 597.204351][T13761] bond5: left allmulticast mode [ 597.227429][T13761] bond6: (slave ip6gretap3): Releasing backup interface [ 597.246961][T13761] ip6gretap3: left allmulticast mode [ 597.275338][T13761] bond7: (slave veth3): Releasing active interface [ 597.296374][T13761] bond8: (slave veth5): Releasing backup interface [ 597.315670][T13761] bond10: (slave veth7): Releasing active interface [ 597.434323][ T28] audit: type=1804 audit(1782227518.533:422): pid=13765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2086" name="bus" dev="ramfs" ino=34594 res=1 errno=0 [ 597.494785][ T28] audit: type=1804 audit(1782227518.563:423): pid=13765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2086" name="bus" dev="ramfs" ino=34594 res=1 errno=0 [ 599.854893][T13800] IPv6: sit1: Disabled Multicast RS [ 603.558126][T13820] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 603.596789][T13820] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 603.778364][T13820] bridge0: port 1(vlan4) entered blocking state [ 603.822591][T13820] bridge0: port 1(vlan4) entered disabled state [ 603.840561][T13820] vlan4: entered allmulticast mode [ 603.876928][T13820] bond0: entered allmulticast mode [ 603.899674][T13820] macvlan2: entered allmulticast mode [ 603.905193][T13820] team0: entered allmulticast mode [ 603.955156][T13820] vlan4: entered promiscuous mode [ 603.975251][T13820] bond0: entered promiscuous mode [ 603.985505][T13820] macvlan2: entered promiscuous mode [ 604.010720][T13820] team0: entered promiscuous mode [ 604.915479][T13839] IPv6: sit1: Disabled Multicast RS [ 605.459400][T13849] tipc: Enabling of bearer rejected, failed to enable media [ 606.147227][T13853] loop6: detected capacity change from 0 to 2048 [ 606.292362][T13853] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 606.353347][T13853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 606.984496][T13868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2114'. [ 607.617027][T13868] 8021q: adding VLAN 0 to HW filter on device bond11 [ 607.742782][T13871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.776802][T13871] bond11: (slave batadv0): Enslaving as an active interface with an up link [ 608.434570][T13872] bond11 (unregistering): (slave batadv0): Releasing backup interface [ 608.468970][T13872] bond11 (unregistering): Released all slaves [ 608.577894][T13880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2116'. [ 608.761339][T13884] bridge0: port 3(vlan3) entered blocking state [ 608.775277][T13884] bridge0: port 3(vlan3) entered disabled state [ 608.790816][T13884] vlan3: entered allmulticast mode [ 608.806585][T13884] bond0: entered allmulticast mode [ 608.816816][T13884] bond_slave_0: entered allmulticast mode [ 608.826582][T13884] bond_slave_1: entered allmulticast mode [ 608.839993][T13884] vlan3: entered promiscuous mode [ 608.846510][T13884] bond0: entered promiscuous mode [ 608.877511][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 609.036043][T13887] team0: left allmulticast mode [ 609.054957][T13887] team0: left promiscuous mode [ 609.409239][T13896] xt_TCPMSS: Only works on TCP SYN packets [ 609.429885][T13892] netlink: 'syz.6.2120': attribute type 7 has an invalid length. [ 609.484596][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2119'. [ 609.571922][T13892] netlink: 'syz.6.2120': attribute type 7 has an invalid length. [ 609.660362][T13892] netlink: 'syz.6.2120': attribute type 7 has an invalid length. [ 610.037121][T13906] netlink: 'syz.4.2133': attribute type 2 has an invalid length. [ 611.066316][T13914] vlan4: entered promiscuous mode [ 611.090726][T13914] bridge0: entered promiscuous mode [ 611.097236][T13914] vlan4: entered allmulticast mode [ 611.143678][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2125'. [ 611.160037][T13914] bridge0: entered allmulticast mode [ 611.304971][T13914] bridge_slave_0: left allmulticast mode [ 611.314672][T13914] bridge_slave_0: left promiscuous mode [ 611.323805][T13914] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.353311][T13914] bridge_slave_1: left allmulticast mode [ 611.360708][T13914] bridge_slave_1: left promiscuous mode [ 611.368305][T13914] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.434769][T13914] bond0: (slave bond_slave_0): Releasing backup interface [ 611.468164][T13914] bond_slave_0: left allmulticast mode [ 611.486545][T13914] bond_slave_0: left promiscuous mode [ 611.542976][T13914] bond0: (slave bond_slave_1): Releasing backup interface [ 611.595810][T13914] bond_slave_1: left allmulticast mode [ 611.617487][T13914] bond_slave_1: left promiscuous mode [ 611.710431][T13914] bond1: (slave macvlan2): Releasing active interface [ 611.717316][T13914] bond1: (slave ip6gretap1): making interface the new active one [ 611.757441][T13914] vlan2: left allmulticast mode [ 611.770840][T13914] erspan0: left allmulticast mode [ 611.785573][T13914] vlan2: left promiscuous mode [ 611.802273][T13914] erspan0: left promiscuous mode [ 611.813361][T13914] bridge1: port 1(vlan2) entered disabled state [ 611.840155][T13914] bond1: (slave ip6gretap1): Releasing active interface [ 611.863645][ T8380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.893286][T13914] bond2: (slave ip6gretap2): Releasing backup interface [ 611.921874][T13914] ip6gretap2: left allmulticast mode [ 611.960183][T13914] bond3: (slave geneve2): Releasing active interface [ 611.989228][T13914] vlan3: left allmulticast mode [ 611.996450][T13914] bond0: left allmulticast mode [ 612.005957][T13914] vlan3: left promiscuous mode [ 612.012147][T13914] bond0: left promiscuous mode [ 612.017528][T13914] bridge0: port 3(vlan3) entered disabled state [ 612.359795][ T8380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.485378][T13944] kvm: pic: non byte write [ 616.057046][T13968] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 618.133087][T13993] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 623.852007][T14042] tipc: Enabling of bearer rejected, failed to enable media [ 624.949637][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.956829][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.183493][T14059] syz_tun: entered allmulticast mode [ 625.213214][T14059] team0: entered allmulticast mode [ 625.240475][T14058] syz_tun: left allmulticast mode [ 628.390213][T14092] syz.4.2186 (14092): attempted to duplicate a private mapping with mremap. This is not supported. [ 629.237881][ T28] audit: type=1326 audit(1782227550.323:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.4.2189" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f4f9ce59 code=0x7fc00000 [ 630.034120][T14108] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2188'. [ 630.056204][ T28] audit: type=1326 audit(1782227550.893:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.4.2189" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8f4f3e1d9 code=0x7fc00000 [ 630.215909][T14105] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2188'. [ 630.884607][T14123] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 633.316341][T14161] tipc: Started in network mode [ 633.332236][T14161] tipc: Node identity ac1414aa, cluster identity 4711 [ 633.341450][T14161] tipc: Enabling of bearer rejected, failed to enable media [ 633.808017][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2211'. [ 636.128305][T14187] ip6gretap0: entered promiscuous mode [ 636.149318][T14187] ip6gretap0: entered allmulticast mode [ 641.209134][T14239] : renamed from veth0_to_bond [ 641.340301][T14235] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2232'. [ 641.371699][T14235] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 641.710498][T14238] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2232'. [ 641.765777][T14238] bond0: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 643.449551][ T8472] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 643.683448][ T8472] usb 7-1: Using ep0 maxpacket: 16 [ 643.703777][ T8472] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.752255][ T8472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.814127][ T8472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 643.865417][ T8472] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 643.919181][ T8472] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.011904][ T8472] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.045097][ T8472] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.069901][ T8472] usb 7-1: Manufacturer: syz [ 644.107587][ T8472] usb 7-1: config 0 descriptor?? [ 644.457018][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2244'. [ 645.018282][T14292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.042974][ T8472] rc_core: IR keymap rc-hauppauge not found [ 645.056726][T14292] bond5: (slave bond6): Enslaving as an active interface with an up link [ 645.066406][ T8472] Registered IR keymap rc-empty [ 645.078708][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.132980][T14296] bond5 (unregistering): (slave bond6): Releasing backup interface [ 645.147694][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.186213][ T8472] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 645.262741][T14296] bond5 (unregistering): Released all slaves [ 645.268979][ T8472] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 645.364200][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.422607][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.470017][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.521863][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.535159][T14299] netlink: 'syz.2.2246': attribute type 1 has an invalid length. [ 645.583172][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.664479][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.700959][T14299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.733703][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.757828][T14300] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 645.798529][T14300] bond6: (slave batadv1): making interface the new active one [ 645.809848][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.819196][T14300] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 645.860218][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.912087][ T8472] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 645.960064][ T8472] mceusb 7-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 646.012314][ T8472] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 646.076866][ T8472] usb 7-1: USB disconnect, device number 10 [ 646.891534][T14301] bond6 (unregistering): (slave batadv1): Releasing active interface [ 646.928096][T14301] bond6 (unregistering): Released all slaves [ 648.378623][ T28] audit: type=1326 audit(1782227569.473:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.2.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 648.437673][ T28] audit: type=1326 audit(1782227569.473:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.2.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 648.508456][ T28] audit: type=1326 audit(1782227569.493:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.2.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 648.635499][ T28] audit: type=1326 audit(1782227569.543:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.2.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 648.778125][ T28] audit: type=1326 audit(1782227569.553:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.2.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 648.869610][ T28] audit: type=1326 audit(1782227569.553:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.2.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 648.989615][ T28] audit: type=1326 audit(1782227569.553:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.2.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 649.094796][ T28] audit: type=1326 audit(1782227569.563:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.2.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 649.249492][ T28] audit: type=1326 audit(1782227569.563:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.2.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 669.170957][ T8472] IPVS: starting estimator thread 0... [ 669.270031][T14483] IPVS: using max 19 ests per chain, 45600 per kthread [ 669.450786][T14489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2300'. [ 671.815778][T14526] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 672.183847][T14535] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 673.263236][T14542] netlink: 'syz.6.2313': attribute type 4 has an invalid length. [ 673.315983][T14547] netlink: 'syz.6.2313': attribute type 4 has an invalid length. [ 677.083208][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2321'. [ 680.482333][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2328'. [ 680.625023][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2330'. [ 681.409176][T14617] virtio-fs: tag not found [ 682.024522][T14624] overlayfs: failed to clone lowerpath [ 683.111087][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2338'. [ 683.216876][T14643] bond6: entered promiscuous mode [ 683.223109][T14643] bond6: entered allmulticast mode [ 685.407257][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2344'. [ 685.637606][T14668] tipc: Started in network mode [ 685.644960][T14668] tipc: Node identity 869e28ada533, cluster identity 4711 [ 685.673595][T14668] tipc: Enabled bearer , priority 2 [ 685.717381][T14668] netdevsim netdevsim9 : renamed from netdevsim0 (while UP) [ 685.759296][T14668] tipc: Disabling bearer [ 686.635821][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.643666][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.767980][T14666] netlink: 'syz.2.2345': attribute type 4 has an invalid length. [ 686.961917][T14669] netlink: 'syz.2.2345': attribute type 4 has an invalid length. [ 690.239756][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2352'. [ 691.049154][T14710] xt_cgroup: invalid path, errno=-2 [ 697.910653][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 698.173291][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2369'. [ 698.211827][T14739] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 698.240618][T14741] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 698.428172][T14750] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2372'. [ 701.512718][T14783] Invalid option length (1045252) for dns_resolver key [ 701.579106][ T28] audit: type=1326 audit(1782227622.673:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.2.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7fc00000 [ 701.902137][ T28] audit: type=1326 audit(1782227622.713:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.2.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9cdd79ce59 code=0x7fc00000 [ 702.536131][T14792] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 704.203246][T14808] loop6: detected capacity change from 0 to 512 [ 704.738691][T14808] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2384: invalid indirect mapped block 2 (level 1) [ 704.788008][T14808] EXT4-fs (loop6): 1 truncate cleaned up [ 704.797420][T14808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.986355][T14817] netlink: 'syz.4.2390': attribute type 11 has an invalid length. [ 705.867093][ T6388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.766419][T14830] netlink: 'syz.2.2394': attribute type 4 has an invalid length. [ 708.656604][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 708.719663][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 708.733718][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 708.745588][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 708.757337][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 708.768860][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 712.790792][T14868] cgroup: Invalid name [ 714.170986][T14875] loop6: detected capacity change from 0 to 128 [ 714.189069][T14875] ufs: Invalid option: "" or missing value [ 714.196852][T14875] ufs: wrong mount options [ 714.278132][T14862] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 714.973324][T14879] syzkaller0: entered promiscuous mode [ 714.993587][T14879] syzkaller0: entered allmulticast mode [ 715.520305][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2406'. [ 715.754702][T14887] loop6: detected capacity change from 0 to 512 [ 715.843639][T14887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.858887][T14887] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.948956][T14887] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 715.977111][T14887] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #15: comm syz.6.2407: corrupted xattr block 33: invalid ea_ino [ 716.043669][T14887] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 719.716681][ T6388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.259824][T14920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2418'. [ 721.835952][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2420'. [ 724.819116][ T28] audit: type=1326 audit(1782227645.913:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 724.847328][T14944] syz.2.2426 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 724.899085][ T28] audit: type=1326 audit(1782227645.943:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 724.968988][ T28] audit: type=1326 audit(1782227645.943:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 725.017085][ T28] audit: type=1326 audit(1782227645.943:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 725.095505][ T28] audit: type=1326 audit(1782227645.943:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 725.164288][ T28] audit: type=1326 audit(1782227645.943:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 725.256767][ T28] audit: type=1326 audit(1782227645.943:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 725.332822][ T28] audit: type=1326 audit(1782227645.943:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 725.431415][ T28] audit: type=1326 audit(1782227645.973:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 725.558951][ T28] audit: type=1326 audit(1782227645.983:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14943 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 726.012086][T14956] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.2432'. [ 727.448899][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2438'. [ 728.918744][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'. [ 732.501173][T15022] exFAT-fs (nullb0): invalid boot record signature [ 732.509855][T15022] exFAT-fs (nullb0): failed to read boot sector [ 732.517568][T15022] exFAT-fs (nullb0): failed to recognize exfat type [ 732.590416][T15020] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2451'. [ 733.163650][T15034] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2455'. [ 733.460710][T15038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 733.473912][T15040] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 733.538658][T15042] Cannot find add_set index 0 as target [ 733.638583][T15040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 733.747095][T15040] bond3: (slave lo): making interface the new active one [ 733.767100][T15040] bond3: (slave lo): Enslaving as an active interface with an up link [ 733.778987][T15040] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 734.594591][T15053] netlink: 'syz.4.2460': attribute type 1 has an invalid length. [ 734.778068][T15053] bond11: entered promiscuous mode [ 734.809128][T15053] 8021q: adding VLAN 0 to HW filter on device bond11 [ 734.962768][T15058] bridge7: entered promiscuous mode [ 735.032201][T13348] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 735.032210][T15058] bond11: (slave bridge7): Enslaving as a backup interface with an up link [ 735.207435][T15061] veth13: entered promiscuous mode [ 735.235864][T15061] veth13: entered allmulticast mode [ 735.254837][T15061] bond11: (slave veth13): Enslaving as a backup interface with a down link [ 735.298785][ T1145] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 736.612123][ T8472] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 736.989586][ T8472] usb 7-1: Using ep0 maxpacket: 16 [ 736.997346][ T8472] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 737.014539][ T8472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 737.037243][ T8472] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 737.066385][ T8472] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 737.078025][ T8472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 737.114151][ T8472] usb 7-1: SerialNumber: syz [ 737.678969][T15067] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 737.982577][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 737.982595][ T28] audit: type=1326 audit(1782227659.083:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 738.052151][T15067] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 738.081501][ T28] audit: type=1326 audit(1782227659.083:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 738.164392][ T28] audit: type=1326 audit(1782227659.113:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 738.234470][ T28] audit: type=1326 audit(1782227659.113:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 738.322270][ T28] audit: type=1326 audit(1782227659.123:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9cdd79bcc7 code=0x7ffc0000 [ 738.402537][ T28] audit: type=1326 audit(1782227659.123:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 738.499569][ T28] audit: type=1326 audit(1782227659.123:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 738.597195][ T28] audit: type=1326 audit(1782227659.133:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 738.687328][ T28] audit: type=1326 audit(1782227659.133:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 738.745426][T15093] netlink: 'syz.2.2472': attribute type 1 has an invalid length. [ 738.760461][ T28] audit: type=1326 audit(1782227659.143:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f9cdd79ce59 code=0x7ffc0000 [ 738.899031][T15093] 8021q: adding VLAN 0 to HW filter on device bond7 [ 738.918812][ T8472] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 738.997697][ T8472] usb 7-1: USB disconnect, device number 11 [ 739.018523][T15095] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 740.586600][T15096] bond7 (unregistering): (slave syz_tun): Releasing backup interface [ 740.619307][T15096] bond7 (unregistering): Released all slaves [ 742.174764][T15114] tipc: Can't bind to reserved service type 1 [ 747.170017][T15158] tipc: Enabling of bearer rejected, failed to enable media [ 747.203095][T15159] loop6: detected capacity change from 0 to 128 [ 747.277138][T15159] FAT-fs (loop6): Unrecognized mount option "nfs(Azy" or missing value [ 747.820081][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.826489][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.691366][T15172] batman_adv: batadv0: Adding interface: macvtap1 [ 748.699187][T15172] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.729231][T15172] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 748.747534][T15176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2495'. [ 748.865625][T15178] batman_adv: batadv0: Removing interface: macvtap1 [ 749.200637][ T8446] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 749.307422][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 749.473962][ T8446] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.519603][ T8446] usb 7-1: config 0 has no interfaces? [ 749.526374][ T8446] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 749.560304][ T8446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.610405][ T8446] usb 7-1: config 0 descriptor?? [ 750.715382][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'. [ 750.783444][T15206] netlink: 'syz.9.2504': attribute type 4 has an invalid length. [ 751.012141][T15207] bridge8: port 1(veth15) entered blocking state [ 751.026070][T15207] bridge8: port 1(veth15) entered disabled state [ 751.035767][T15207] veth15: entered allmulticast mode [ 751.047646][T15207] veth15: entered promiscuous mode [ 751.058151][T15203] bridge8: port 2(veth0_to_bond) entered blocking state [ 751.070643][T15203] bridge8: port 2(veth0_to_bond) entered disabled state [ 751.095015][T15203] veth0_to_bond: entered allmulticast mode [ 751.153447][T15203] veth0_to_bond: entered promiscuous mode [ 751.190996][T15212] netlink: 'syz.9.2504': attribute type 4 has an invalid length. [ 751.511874][T15215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 751.778305][T15215] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 752.005479][T15215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 752.081385][T15215] bond5: (slave lo): making interface the new active one [ 752.136443][T15215] bond5: (slave lo): Enslaving as an active interface with an up link [ 752.231650][T15215] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 754.252224][T15237] tipc: Enabling of bearer rejected, failed to enable media [ 756.447108][ T8] usb 7-1: USB disconnect, device number 12 [ 760.372490][T15299] vxcan0: entered allmulticast mode [ 760.745217][T15304] netlink: 8752 bytes leftover after parsing attributes in process `syz.9.2530'. [ 761.386569][T15313] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 768.583575][T15371] pimreg: entered allmulticast mode [ 770.831425][T15397] loop6: detected capacity change from 0 to 256 [ 772.487872][T15408] bridge0: port 1(veth0_to_bridge) entered blocking state [ 772.532712][T15408] bridge0: port 1(veth0_to_bridge) entered disabled state [ 772.658281][T15408] veth0_to_bridge: entered allmulticast mode [ 772.768000][T15408] veth0_to_bridge: entered promiscuous mode [ 772.858134][T15408] bridge0: port 1(veth0_to_bridge) entered blocking state [ 772.865584][T15408] bridge0: port 1(veth0_to_bridge) entered listening state [ 773.004430][T15421] can: request_module (can-proto-0) failed. [ 773.178483][T15425] dummy0: left promiscuous mode [ 773.239718][T15425] batman_adv: batadv0: Adding interface: dummy0 [ 773.306377][T15425] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.415927][T15425] batman_adv: batadv0: Interface activated: dummy0 [ 773.488054][T15426] batadv0: mtu less than device minimum [ 773.502570][T15426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.516492][T15426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.529373][T15426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.542061][T15426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.554825][T15426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.567492][T15426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.580205][T15426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.592824][T15426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.605415][T15426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.666417][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2565'. [ 773.683111][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2565'. [ 773.740993][T15430] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 773.758635][T15430] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.028362][T15440] team0: Mode changed to "activebackup" [ 774.141847][T15442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.224204][T15442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.037091][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 775.201294][T15457] geneve2: entered promiscuous mode [ 775.245683][T15450] veth13: entered allmulticast mode [ 775.858035][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2578'. [ 778.236887][T15498] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2587'. [ 778.975186][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 779.202542][T15518] netlink: 'syz.4.2592': attribute type 10 has an invalid length. [ 780.239268][T15535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.579924][T15538] xt_CONNSECMARK: invalid mode: 0 [ 782.411336][T15555] vlan2: entered promiscuous mode [ 782.570175][T15562] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 782.599464][T15562] CIFS mount error: No usable UNC path provided in device string! [ 782.599464][T15562] [ 782.611161][T15562] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 782.816340][T15567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2607'. [ 783.498390][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2613'. [ 783.530268][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2613'. [ 784.864070][ T1099] bond3: (slave lo): link status definitely down, disabling slave [ 784.925350][ T1099] bond3: now running without any active interface! [ 785.064065][T15605] dummy0: left promiscuous mode [ 785.188082][T15603] can: request_module (can-proto-0) failed. [ 785.756560][T15611] syzkaller0: entered promiscuous mode [ 785.775919][T15611] syzkaller0: entered allmulticast mode [ 792.565320][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2639'. [ 793.079967][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2639'. [ 793.102268][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2639'. [ 795.958768][T15697] loop6: detected capacity change from 0 to 256 [ 796.156414][T15256] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 796.500122][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 798.070722][ T8472] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 799.365500][ T8472] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 799.513827][T15754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2660'. [ 799.549442][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 799.549462][ T28] audit: type=1326 audit(1782227720.643:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7ffc0000 [ 799.641123][ T28] audit: type=1326 audit(1782227720.643:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7ffc0000 [ 799.681323][ T28] audit: type=1326 audit(1782227720.643:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7ffc0000 [ 799.777494][ T28] audit: type=1326 audit(1782227720.643:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7ffc0000 [ 799.925356][ T28] audit: type=1326 audit(1782227720.643:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7ffc0000 [ 799.996594][ T28] audit: type=1326 audit(1782227720.683:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f75a8f9ce59 code=0x7ffc0000 [ 800.037391][ T28] audit: type=1326 audit(1782227720.733:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75a8f5d68e code=0x7ffc0000 [ 800.180024][ T28] audit: type=1326 audit(1782227720.743:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75a8f5d68e code=0x7ffc0000 [ 800.250010][ T28] audit: type=1326 audit(1782227720.743:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75a8f5d68e code=0x7ffc0000 [ 800.305608][ T28] audit: type=1326 audit(1782227720.743:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.2659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75a8f5d68e code=0x7ffc0000 [ 801.284686][T15783] netlink: 'syz.4.2669': attribute type 27 has an invalid length. [ 801.423051][T15783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.457265][T15783] bridge0: port 1(vlan4) entered blocking state [ 801.463804][T15783] bridge0: port 1(vlan4) entered forwarding state [ 801.531068][T15783] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.564669][T15783] net_ratelimit: 10 callbacks suppressed [ 801.564681][T15783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.620179][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 801.742182][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 801.849956][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 801.925306][T15793] tipc: Enabled bearer , priority 0 [ 801.981482][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 802.138934][ T60] bond3: (slave lo): failed to get link speed/duplex [ 802.235824][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2674'. [ 802.316616][T15801] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2674'. [ 802.364281][ T1099] bond3: (slave lo): failed to get link speed/duplex [ 802.512611][ T60] bond3: (slave lo): failed to get link speed/duplex [ 802.665509][ T60] bond3: (slave lo): failed to get link speed/duplex [ 802.810809][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2678'. [ 802.884949][ T60] bond3: (slave lo): failed to get link speed/duplex [ 803.381143][ C0] bridge0: port 1(veth0_to_bridge) entered learning state [ 803.472414][ T8472] tipc: Node number set to 2886997162 [ 804.450471][T15823] syzkaller0: entered promiscuous mode [ 804.475229][T15823] syzkaller0: entered allmulticast mode [ 808.073114][ T1145] net_ratelimit: 6 callbacks suppressed [ 808.073135][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 808.253500][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 808.425541][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 808.566453][ T49] bond3: (slave lo): failed to get link speed/duplex [ 808.712351][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 808.847316][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 809.189849][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.196343][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.114539][ T1099] bond3: (slave lo): failed to get link speed/duplex [ 810.259967][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 810.379662][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 810.514420][ T1099] bond3: (slave lo): failed to get link speed/duplex [ 810.562757][ T8446] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 810.830182][ T8446] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.888681][ T8446] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 810.910398][ T8446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.942936][ T8446] usb 7-1: config 0 descriptor?? [ 810.967058][ T8446] pwc: Askey VC010 type 2 USB webcam detected. [ 811.195346][T15858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.233685][T15858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.427897][T15877] netlink: 'syz.4.2696': attribute type 4 has an invalid length. [ 811.447431][T15877] netlink: 'syz.4.2696': attribute type 5 has an invalid length. [ 811.456200][T15877] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2696'. [ 811.470555][ T8446] pwc: recv_control_msg error -32 req 02 val 2b00 [ 811.489855][ T8446] pwc: recv_control_msg error -32 req 02 val 2700 [ 811.501225][ T8446] pwc: recv_control_msg error -32 req 02 val 2c00 [ 811.511849][ T8446] pwc: recv_control_msg error -32 req 04 val 1000 [ 811.533924][ T8446] pwc: recv_control_msg error -32 req 04 val 1300 [ 811.535843][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 811.535886][ T28] audit: type=1326 audit(1782227732.633:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15878 comm="syz.9.2697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 811.562515][ T8446] pwc: recv_control_msg error -32 req 04 val 1400 [ 811.590983][ T8446] pwc: recv_control_msg error -32 req 02 val 2000 [ 811.602061][ T28] audit: type=1326 audit(1782227732.683:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15878 comm="syz.9.2697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f75a8f9ce59 code=0x7fc00000 [ 811.637086][ T8446] pwc: recv_control_msg error -32 req 02 val 2100 [ 811.848541][ T8446] pwc: recv_control_msg error -71 req 02 val 2500 [ 811.859100][ T8446] pwc: recv_control_msg error -71 req 02 val 2400 [ 811.880568][ T8446] pwc: recv_control_msg error -71 req 02 val 2600 [ 811.900681][ T8446] pwc: recv_control_msg error -71 req 02 val 2900 [ 811.927031][ T8446] pwc: recv_control_msg error -71 req 02 val 2800 [ 811.955244][ T8446] pwc: recv_control_msg error -71 req 04 val 1100 [ 811.982801][ T8446] pwc: recv_control_msg error -71 req 04 val 1200 [ 812.056984][ T8446] pwc: Registered as video103. [ 812.090188][ T8446] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 812.842662][ T8446] usb 7-1: USB disconnect, device number 13 [ 813.111650][ T5076] net_ratelimit: 21 callbacks suppressed [ 813.111672][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 813.321086][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 813.429517][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 813.546824][ T1099] bond3: (slave lo): failed to get link speed/duplex [ 813.680948][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 813.793974][ T1099] bond3: (slave lo): failed to get link speed/duplex [ 813.940053][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 814.071505][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 814.203685][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 814.329976][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 818.190489][ T60] net_ratelimit: 20 callbacks suppressed [ 818.190555][ T60] bond3: (slave lo): failed to get link speed/duplex [ 818.608667][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 818.696201][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2715'. [ 818.705569][T15948] netlink: 'syz.4.2715': attribute type 3 has an invalid length. [ 818.713460][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2715'. [ 818.722846][T15948] netlink: 'syz.4.2715': attribute type 3 has an invalid length. [ 818.766703][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 818.901841][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 819.010227][ T49] bond3: (slave lo): failed to get link speed/duplex [ 819.123740][ T60] bond3: (slave lo): failed to get link speed/duplex [ 819.279638][ T49] bond3: (slave lo): failed to get link speed/duplex [ 819.420701][ T49] bond3: (slave lo): failed to get link speed/duplex [ 819.533358][ T49] bond3: (slave lo): failed to get link speed/duplex [ 819.687286][ T60] bond3: (slave lo): failed to get link speed/duplex [ 823.251902][ T49] net_ratelimit: 8 callbacks suppressed [ 823.251923][ T49] bond3: (slave lo): failed to get link speed/duplex [ 823.463641][ T49] bond3: (slave lo): failed to get link speed/duplex [ 823.639670][T13941] bond3: (slave lo): failed to get link speed/duplex [ 823.819647][T13941] bond3: (slave lo): failed to get link speed/duplex [ 824.012384][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 824.194307][ T49] bond3: (slave lo): failed to get link speed/duplex [ 824.362874][ T60] bond3: (slave lo): failed to get link speed/duplex [ 824.403946][T15996] netlink: 'syz.2.2730': attribute type 1 has an invalid length. [ 824.503534][ T60] bond3: (slave lo): failed to get link speed/duplex [ 824.580118][ T8446] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 824.647814][T15996] bond9: (slave bridge7): making interface the new active one [ 824.661774][T15996] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 824.673670][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'. [ 824.707982][T15998] bond9: entered promiscuous mode [ 824.714470][T15998] bridge7: entered promiscuous mode [ 824.721333][T15998] bond9: entered allmulticast mode [ 824.750285][T15998] bridge7: entered allmulticast mode [ 824.768080][T15998] 8021q: adding VLAN 0 to HW filter on device bond9 [ 824.803015][ T8446] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 824.824108][ T8446] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 824.852365][T13941] bond9: (slave bridge7): link status definitely down, disabling slave [ 824.863895][ T8446] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 824.893185][ T8446] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 824.907011][T13941] bridge7: left promiscuous mode [ 824.913658][ T8446] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 824.932483][T13941] bridge7: left allmulticast mode [ 824.941880][ T8446] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 824.968002][ T8446] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 824.986416][T13941] bond9: now running without any active interface! [ 825.000443][ T8446] usb 7-1: Product: syz [ 825.021770][ T8446] usb 7-1: Manufacturer: syz [ 825.066012][T16005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 825.074496][T16005] IPv6: NLM_F_CREATE should be set when creating new route [ 825.161502][ T8446] cdc_wdm 7-1:1.0: skipping garbage [ 825.178439][ T8446] cdc_wdm 7-1:1.0: skipping garbage [ 825.214649][ T8446] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 825.232488][ T8446] cdc_wdm 7-1:1.0: Unknown control protocol [ 825.572096][ T8] usb 7-1: USB disconnect, device number 14 [ 827.054569][T16005] bridge0: port 1(veth0_to_bridge) entered disabled state [ 829.619849][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.997125][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 831.642574][T16005] netdevsim netdevsim9 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.651129][T16005] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.660822][T16005] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.670462][T16005] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.745049][T16052] netlink: 'syz.4.2749': attribute type 1 has an invalid length. [ 831.760363][T16052] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 831.811119][T16053] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 831.832227][T16055] tipc: Enabling of bearer rejected, already enabled [ 831.928761][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 831.942416][T16058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2749'. [ 831.995701][T16059] tipc: Enabled bearer , priority 0 [ 832.050767][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 832.189805][ T5076] bond3: (slave lo): failed to get link speed/duplex [ 832.388994][ T71] bond3: (slave lo): failed to get link speed/duplex [ 832.779256][T16076] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2753'. [ 832.852813][ T60] bond3: (slave lo): failed to get link speed/duplex [ 834.347955][ T60] bond3: (slave lo): failed to get link speed/duplex [ 834.547208][T13941] bond3: (slave lo): failed to get link speed/duplex [ 834.720786][ T49] bond3: (slave lo): failed to get link speed/duplex [ 836.630713][ T60] bond3: (slave lo): failed to get link speed/duplex [ 836.740125][T13941] bond3: (slave lo): failed to get link speed/duplex [ 836.966081][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 837.202761][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 837.461909][T13941] bond3: (slave lo): failed to get link speed/duplex [ 837.782844][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 838.244286][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 838.351046][T16102] bond5: (slave lo): Releasing active interface [ 838.363453][T16102] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 838.387882][T16102] veth0_to_bridge: left allmulticast mode [ 838.395989][T16102] veth0_to_bridge: left promiscuous mode [ 838.894767][T16102] bridge0: port 1(veth0_to_bridge) entered disabled state [ 838.953881][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 839.104076][ T5066] bond3: (slave lo): failed to get link speed/duplex [ 839.275999][ T60] bond3: (slave lo): failed to get link speed/duplex [ 839.444907][ T60] bond3: (slave lo): failed to get link speed/duplex [ 840.146393][T16123] bridge0: port 1(vlan4) entered disabled state [ 840.358753][T16123] batman_adv: batadv0: Interface deactivated: dummy0 [ 840.650072][T16138] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2772'. [ 843.853172][T16179] smc: net device bond0 applied user defined pnetid SYZ2 [ 844.014872][T16179] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2780'. [ 844.423973][T16179] smc: removing net device bond0 with user defined pnetid SYZ2 [ 844.572732][T16179] bond0 (unregistering): Released all slaves [ 849.850040][T16240] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2792'. [ 849.910393][T16240] tipc: Enabling of bearer rejected, failed to enable media [ 852.675152][T16282] loop6: detected capacity change from 0 to 1024 [ 855.982361][T16282] hfsplus: failed to load extents file [ 857.185624][T16295] netlink: zone id is out of range [ 857.192590][T16295] netlink: zone id is out of range [ 857.197986][T16295] netlink: zone id is out of range [ 857.221628][T16295] netlink: zone id is out of range [ 857.228311][T16295] netlink: zone id is out of range [ 857.250144][T16295] netlink: zone id is out of range [ 857.261048][T16295] netlink: zone id is out of range [ 857.267584][T16295] netlink: zone id is out of range [ 857.274273][T16295] netlink: zone id is out of range [ 857.280880][T16295] netlink: zone id is out of range [ 857.370924][T16300] syzkaller0: entered promiscuous mode [ 857.388101][T16300] syzkaller0: entered allmulticast mode [ 963.289291][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 963.296448][ C0] rcu: 1-...!: (1 GPs behind) idle=4d2c/1/0x4000000000000000 softirq=70097/70098 fqs=0 [ 963.308664][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16308/3:b..l [ 963.316897][ C0] rcu: (detected by 0, t=10502 jiffies, g=102861, q=17 ncpus=2) [ 963.324675][ C0] Sending NMI from CPU 0 to CPUs 1: [ 963.330019][ C1] NMI backtrace for cpu 1 [ 963.330038][ C1] CPU: 1 PID: 16312 Comm: syz.6.2812 Not tainted syzkaller #0 [ 963.330054][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 963.330065][ C1] RIP: 0010:__lock_acquire+0xd9c/0x7d80 [ 963.330198][ C1] Code: 24 30 75 3c 48 63 d8 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 c5 1b 91 be 08 00 00 00 e8 de 45 77 00 49 b8 00 00 00 00 00 fc ff df <48> 0f a3 1d 4c af b3 0f 48 8b 9c 24 88 00 00 00 0f 83 72 0a 00 00 [ 963.330212][ C1] RSP: 0018:ffffc900001f08e0 EFLAGS: 00000056 [ 963.330226][ C1] RAX: 0000000000000001 RBX: 0000000000000e59 RCX: ffffffff816815a2 [ 963.330238][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911bc6c8 [ 963.330248][ C1] RBP: ffffc900001f0b28 R08: dffffc0000000000 R09: 1ffffffff22378d9 [ 963.330260][ C1] R10: dffffc0000000000 R11: fffffbfff22378da R12: 0000000000000000 [ 963.330272][ C1] R13: ffff888026feda00 R14: 0000000000000000 R15: ffff888026fee500 [ 963.330284][ C1] FS: 00007f0148a726c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 963.330298][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.330309][ C1] CR2: 000000110c306ab2 CR3: 0000000026101000 CR4: 00000000003506e0 [ 963.330324][ C1] Call Trace: [ 963.330333][ C1] [ 963.330352][ C1] ? verify_lock_unused+0x140/0x140 [ 963.330382][ C1] ? verify_lock_unused+0x140/0x140 [ 963.330415][ C1] ? debug_objects_fill_pool+0x8b/0x790 [ 963.330472][ C1] lock_acquire+0x19e/0x420 [ 963.330490][ C1] ? advance_sched+0xbb/0xc70 [ 963.330623][ C1] ? read_lock_is_recursive+0x20/0x20 [ 963.330642][ C1] ? __hrtimer_run_queues+0x426/0xc10 [ 963.330663][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 963.330680][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 963.330767][ C1] _raw_spin_lock+0x2e/0x40 [ 963.330792][ C1] ? advance_sched+0xbb/0xc70 [ 963.330815][ C1] advance_sched+0xbb/0xc70 [ 963.330840][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 963.330865][ C1] ? _raw_spin_unlock+0x40/0x40 [ 963.330892][ C1] ? taprio_dequeue_from_txq+0x8e0/0x8e0 [ 963.330918][ C1] __hrtimer_run_queues+0x525/0xc10 [ 963.330936][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 963.330957][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 963.330986][ C1] ? hrtimer_interrupt+0x980/0x980 [ 963.331003][ C1] ? read_tsc+0x9/0x20 [ 963.331035][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 963.331060][ C1] hrtimer_interrupt+0x39d/0x980 [ 963.331087][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 963.331110][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 963.331170][ C1] [ 963.331175][ C1] [ 963.331180][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 963.331256][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 963.331283][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 4b e4 ce f6 65 8b 05 1c 33 76 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 963.331297][ C1] RSP: 0018:ffffc9000484fc80 EFLAGS: 00000206 [ 963.331311][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: c3f1f113833c7b00 [ 963.331323][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: 0000000000000001 [ 963.331334][ C1] RBP: ffffc9000484fd10 R08: ffffffff8e8ae5ef R09: 1ffffffff1d15cbd [ 963.331347][ C1] R10: dffffc0000000000 R11: fffffbfff1d15cbe R12: dffffc0000000000 [ 963.331359][ C1] R13: dffffc0000000000 R14: ffffffff8d14b5c0 R15: 1ffff92000909f90 [ 963.331380][ C1] ? _raw_spin_unlock+0x40/0x40 [ 963.331405][ C1] ? __asan_memcpy+0x40/0x70 [ 963.331449][ C1] do_settimeofday64+0x591/0x750 [ 963.331472][ C1] ? nft_flush_table+0x35a/0x12e0 [ 963.331521][ C1] ? __x64_sys_clock_settime+0x25e/0x2a0 [ 963.331538][ C1] ? get_device_system_crosststamp+0x910/0x910 [ 963.331560][ C1] ? nft_flush_table+0x35a/0x12e0 [ 963.331577][ C1] ? security_settime64+0x7b/0xa0 [ 963.331620][ C1] ? do_sys_settimeofday64+0x163/0x250 [ 963.331644][ C1] __x64_sys_clock_settime+0x25e/0x2a0 [ 963.331660][ C1] ? lock_chain_count+0x20/0x20 [ 963.331676][ C1] ? exit_itimers+0x500/0x500 [ 963.331691][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 963.331717][ C1] do_syscall_64+0x55/0xb0 [ 963.331737][ C1] ? clear_bhb_loop+0x40/0x90 [ 963.331752][ C1] ? clear_bhb_loop+0x40/0x90 [ 963.331767][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.331793][ C1] RIP: 0033:0x7f0147b9ce59 [ 963.331809][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.331823][ C1] RSP: 002b:00007f0148a72028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 963.331839][ C1] RAX: ffffffffffffffda RBX: 00007f0147e15fa0 RCX: 00007f0147b9ce59 [ 963.331851][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 963.331861][ C1] RBP: 00007f0147c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 963.331871][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.331880][ C1] R13: 00007f0147e16038 R14: 00007f0147e15fa0 R15: 00007ffd3d418408 [ 963.331898][ C1] [ 963.332014][ C0] task:syz.2.2813 state:R running task stack:27048 pid:16308 ppid:5783 flags:0x00004000 [ 963.842323][ C0] Call Trace: [ 963.845647][ C0] [ 963.848631][ C0] __schedule+0x15ae/0x4660 [ 963.853212][ C0] ? asan.module_dtor+0x20/0x20 [ 963.858131][ C0] ? preempt_schedule+0xc0/0xd0 [ 963.863027][ C0] preempt_schedule_common+0x82/0xc0 [ 963.868399][ C0] preempt_schedule+0xc0/0xd0 [ 963.873323][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 963.879006][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 963.884262][ C0] preempt_schedule_thunk+0x1a/0x30 [ 963.889562][ C0] _raw_spin_unlock+0x3a/0x40 [ 963.894291][ C0] filemap_map_pages+0x1279/0x19c0 [ 963.899516][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 963.904760][ C0] ? filemap_read_folio+0x790/0x790 [ 963.910023][ C0] handle_mm_fault+0x384b/0x4a50 [ 963.915049][ C0] ? handle_mm_fault+0xe6/0x4a50 [ 963.920069][ C0] ? lock_vma_under_rcu+0x52c/0x660 [ 963.925340][ C0] ? numa_migrate_prep+0x350/0x350 [ 963.930500][ C0] ? lock_vma_under_rcu+0xe5/0x660 [ 963.935696][ C0] ? do_user_addr_fault+0x1cb/0x12d0 [ 963.941034][ C0] do_user_addr_fault+0xad2/0x12d0 [ 963.946211][ C0] ? rcu_is_watching+0x15/0xb0 [ 963.951030][ C0] exc_page_fault+0x64/0x100 [ 963.955936][ C0] asm_exc_page_fault+0x26/0x30 [ 963.960838][ C0] RIP: 0033:0x7f9cdd671756 [ 963.965328][ C0] RSP: 002b:00007ffd92ddf250 EFLAGS: 00010202 [ 963.971439][ C0] RAX: 000000110c2f4000 RBX: ffffffff8a70302b RCX: 0000000000000005 [ 963.979446][ C0] RDX: 000000000000102b RSI: 00000000000000c0 RDI: 0000000000000020 [ 963.987465][ C0] RBP: 0000000000000000 R08: 00007f9cdda00000 R09: 00007f9cdda02000 [ 963.995659][ C0] R10: 000000008a70302f R11: 0000000000000000 R12: 00007f9cdda16038 [ 964.003669][ C0] R13: 0000000000000047 R14: ffffffff8a7030c1 R15: 00007f9cde545720 [ 964.011880][ C0] ? mas_walk+0x21/0x200 [ 964.016301][ C0] ? __bpf_trace_ma_write+0x22b/0x240 [ 964.021728][ C0] [ 964.024784][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g102861 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 964.036193][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 964.046198][ C0] rcu: RCU grace-period kthread stack dump: [ 964.052121][ C0] task:rcu_preempt state:R running task stack:27032 pid:17 ppid:2 flags:0x00004000 [ 964.062962][ C0] Call Trace: [ 964.066273][ C0] [ 964.069250][ C0] __schedule+0x15ae/0x4660 [ 964.073812][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 964.078879][ C0] ? lock_chain_count+0x20/0x20 [ 964.083782][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 964.089038][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 964.094992][ C0] ? asan.module_dtor+0x20/0x20 [ 964.099892][ C0] ? rcu_is_watching+0x15/0xb0 [ 964.104728][ C0] schedule+0xbd/0x170 [ 964.108936][ C0] schedule_timeout+0x188/0x2d0 [ 964.113841][ C0] ? console_conditional_schedule+0x40/0x40 [ 964.119796][ C0] ? update_process_times+0x1b0/0x1b0 [ 964.125301][ C0] ? prepare_to_swait_event+0x344/0x360 [ 964.130929][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 964.135839][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 964.140730][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 964.146844][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 964.151920][ C0] ? rcu_gp_init+0x1530/0x1530 [ 964.156726][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 964.161624][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 964.166871][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 964.172120][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 964.176770][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 964.181919][ C0] ? __kthread_parkme+0x71/0x1c0 [ 964.186901][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 964.191970][ C0] kthread+0x2fa/0x390 [ 964.196084][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 964.201240][ C0] ? kthread_blkcg+0xd0/0xd0 [ 964.205872][ C0] ret_from_fork+0x48/0x80 [ 964.210332][ C0] ? kthread_blkcg+0xd0/0xd0 [ 964.214961][ C0] ret_from_fork_asm+0x11/0x20 [ 964.219826][ C0] [ 964.222901][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 964.229269][ C0] CPU: 0 PID: 5066 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 964.236940][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 964.247386][ C0] Workqueue: events_unbound toggle_allocation_gate [ 964.253953][ C0] RIP: 0010:smp_call_function_many_cond+0xd8a/0x1190 [ 964.260712][ C0] Code: 89 f6 83 e6 01 31 ff e8 34 f1 0a 00 41 83 e6 01 49 be 00 00 00 00 00 fc ff df 75 07 e8 6f ed 0a 00 eb 38 f3 90 42 0f b6 04 33 <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 53 ed 0a 00 eb e4 44 [ 964.280366][ C0] RSP: 0018:ffffc9000fc27780 EFLAGS: 00000293 [ 964.286564][ C0] RAX: 0000000000000000 RBX: 1ffff110171e82bd RCX: ffff888031fb5a00 [ 964.294750][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 964.302788][ C0] RBP: ffffc9000fc27900 R08: ffffffff911bc507 R09: 1ffffffff22378a0 [ 964.310894][ C0] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: ffff8880b8f415e8 [ 964.318910][ C0] R13: ffff8880b8e3d3c0 R14: dffffc0000000000 R15: 0000000000000001 [ 964.326923][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 964.335893][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.342517][ C0] CR2: 000000110c2f60e0 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 964.350541][ C0] DR0: 0000000000000101 DR1: 0000000000000007 DR2: 000000000000000f [ 964.358553][ C0] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 964.366741][ C0] Call Trace: [ 964.370094][ C0] [ 964.373093][ C0] ? smp_call_function_many+0x40/0x40 [ 964.378515][ C0] ? text_poke+0xc0/0xc0 [ 964.382990][ C0] ? __mutex_trylock_common+0x160/0x270 [ 964.388593][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 964.394800][ C0] ? text_poke_sync+0x30/0x30 [ 964.399515][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 964.404770][ C0] ? kmem_cache_alloc_bulk+0x12a/0x5a0 [ 964.410286][ C0] text_poke_bp_batch+0x31e/0x980 [ 964.415361][ C0] ? text_poke_loc_init+0x7c0/0x7c0 [ 964.420609][ C0] ? mutex_lock_nested+0x20/0x20 [ 964.425610][ C0] ? text_poke_queue+0x134/0x190 [ 964.430595][ C0] ? arch_jump_label_transform_queue+0x93/0x100 [ 964.436899][ C0] ? __jump_label_update+0x39a/0x3c0 [ 964.442434][ C0] text_poke_finish+0x30/0x50 [ 964.447152][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 964.453444][ C0] static_key_enable_cpuslocked+0x123/0x240 [ 964.459415][ C0] static_key_enable+0x1a/0x20 [ 964.464314][ C0] ? process_scheduled_works+0x975/0x1600 [ 964.470082][ C0] toggle_allocation_gate+0xa8/0x260 [ 964.475423][ C0] ? show_object+0x70/0x70 [ 964.479914][ C0] ? read_lock_is_recursive+0x20/0x20 [ 964.485338][ C0] ? process_scheduled_works+0x975/0x1600 [ 964.491285][ C0] ? process_scheduled_works+0x975/0x1600 [ 964.497060][ C0] process_scheduled_works+0xa60/0x1600 [ 964.502794][ C0] ? worker_attach_to_pool+0x370/0x370 [ 964.508309][ C0] ? assign_work+0x3cc/0x5d0 [ 964.512957][ C0] worker_thread+0xa5e/0xfe0 [ 964.517642][ C0] kthread+0x2fa/0x390 [ 964.521780][ C0] ? pr_cont_work+0x550/0x550 [ 964.526576][ C0] ? kthread_blkcg+0xd0/0xd0 [ 964.531240][ C0] ret_from_fork+0x48/0x80 [ 964.535810][ C0] ? kthread_blkcg+0xd0/0xd0 [ 964.540459][ C0] ret_from_fork_asm+0x11/0x20 [ 964.545308][ C0]