last executing test programs: 19.705452982s ago: executing program 3 (id=1945): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x300060c1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) close(r0) 18.13115197s ago: executing program 3 (id=1947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4c880) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) 15.395651766s ago: executing program 3 (id=1949): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r4, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r5, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x5, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) 12.275216772s ago: executing program 1 (id=1956): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x300060c1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) close(r0) 10.801462577s ago: executing program 1 (id=1959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4c880) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) 8.863869504s ago: executing program 1 (id=1962): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 7.620446214s ago: executing program 3 (id=1964): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x200000, &(0x7f0000000080)=ANY=[], 0x1, 0xb07, &(0x7f0000001380)="$eJzs3V2IXFfhAPBzd3c2u2n7z6T/xK5pbJNW2/rRTbNZ40fQpCQIhqaIL4XiS0jTGowRrKCWQpM8+WZLScEnP/CpL6WKYEEk9EkfCjZQhD5VQR8aIhZ8qNFkJDPnzNw5mdm7s9nd2dn9/eDsmXvPuXPOmb1z536eE4ANa6z5d35+pgjhwhsvH3n/gb9P35hzsJ2j3vw7UZqqhRCKOD2Rvd9746342gfPn+gVF2Gu+TdNh8evtJe9LYRwNuwKF0M97Lhw6aW35h47du7o+d1vv3rg8sq0HgAANpavXTwwv/0vf7p769XX7jkUNrXnp/3zepox1drvPxR3/NP+/1joni5KoWwyyzcRw9h0d77xHvnK5dSyfBN9yp/Myq/1ybcpLFz+eGler3bDKEvrcT0UY7MhhM3t6bGx2dnWMXloHtdPFrNnTp1++tkhVRRYdv+6N4SwqxQOn++eXmvh4BqowxJDYw3UYSTDodUr62qjZehtXqXQ2DLsLRBAS3698CZn8zMLt6b9bhOLK//Ko2O9l4dlsNrr/0DlTw65/KD8X56zxWH5rNe1KbUrfY9uj9P5dYT8/qVXfte9XEd+paN7bn49orbIeva7jjAq1xf61XN8leuxVP3qn68X69WXYpw+hy93pd7b9f3J/6ej8j8GevswP/8vCMsV0sXjYddjvYXuz7R2K+/VGOK2B1jb8vvmGun6aJTf15enb6pIn6pIn65I31yRfltFOmxkv/7ej8OLRed8V35MP+j58HSe7Y4Y/9+A9cnPRw5afn7f76Butfz8fmJYy357/ImTn3/qyUut+/+L9vp/Pa7v6XCjHr9bF2OGdL4wP6/evve/3l3OWJ98d2b1uaNH/ubrbd35im2d9wml7cxN9ZjpXm5Lv3w7u/PVs3zTMUxl9c33TzZny6X9j7RdTZ/XRNbeWtaOyaweabuyNcZ5PWAp0vqY7v/vPA/Quv8/rZ8zoVY8fer0yUfidFpP/zBe23Rj/t5VrjewfPp9/9Pv10zofv7n9vb82lh5u7ClM79obRdej+/XPX+uXU5pfulHLf3OfXN8upl/9sR3Tj+1Au2GjezZHz73reOnT5/8rhdLfvGVtVGNQV6kw5a1Uh8vBn2xa6WLGPKGCVhxe15o7QQ8fOrbx585+czJM/v27983N7f/C/vm9zT36/eU9+7Lzg6htsBy6vzoD7smAAAAAAAAAAAAwGJ9/+iRS++8+bl3W8//d57/S8//pzt/0/P/P8qe/8+fk0/PwafnALf2SG/myTpYnczy1WL4/6y+qRuA4oVWvD1b7iMxbo/jF5//T8Xl/bqm+tyVza/1mcy6E7ipv5TJrA+SfLzA+2J8Psa/CDBExXTv2TFeoH/r4sPSup76pyg9wtvQP/DoSP+3vP+i9Px3z36dejyvzWhZjScWh91GoLd/jEz/3+PL8B7/7DR86O0R+oeJ1S3vJxt3nWj03Utf7Ag2AMtj2ON//i20yk3nP8/8/qtTN0LKduXR7u1l3n8pDOLP73RPr/XxJ1e6/HzcvuT22uqUP+z2r/b4n+3x7+L2L233+m//shHz6ksr998/vfxuqdiwY7Hl5+1P/UBvG6z8q7H81JoHw+LKb/w8Kz+/IFTSbFKf3ev/ZOVvXmT5N7V/Z3Vbe/lvLD99bA/dv9jyWzUuxrrrMZ21I13/y88bJ9ey9qe+PRco/+vP9Wr/EgdqvB7Lh41sVMaZHVS2H9HeCleN/zvo7/+tjv/brmy2Wcvvw/hsnE4b4nSfQz7eSaveC4xCktU/3V+Rfge2Z+9fLPD7FirG/y2nrdVxUTb6+L9fjHHV9yGN/5vWx3r8yS9NNz/LNF3r8dmu120NjKr3Rub63yiFy63DoKUtPzX8+gsDhMb4EpZr7w8Nuf6NRmNlT2hVGGrhLO3z/+PyXRse9tXnYd+jet+Qy6+Sj/+b78Pn4//m6fn4v3l6Pv5vnj4d/0Pvd2Z1dTyej/+br8/5+L95+l1Zufn4wDMV6R/tkV6ETvqO3su3D9vvrnj/nRXpH6tI391OP9iVI6Xfs+DynXz93v/OivT7K9I/XpH+iYr0ByrSHyqll8eATumfzJYvsvT1Lm1/+n1+wPqVP5/n+w8bR7r+0+/7v62TPlnOsrq1BFbCK6/tPfzkr75Rbz3/P9k+H5Ku4x2K07V4bPSDOJ1f9w6l6Rtpb8bpv2bpzvfB2pH3n5H//j9YkQ6MrnSfl+83bEDFVO/ZMa7qt6rffj6j5VMx/nSMPxPjh2M8G+M9Md4b47lVqh8r4/DrvznwYtE53t+SpS/2fvj8eaCufqJCCPsWWZ/8/MCg9+Pn/fgN6lbLr7hdHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM0Za/6dn58pQrjwxstHnjh2as+NOQfbOerNvxOlqVp7uRAeifF4jH8WX1z74PkT5fh6jIswF4pQtOeHx6+0S7othHA27AoXQz3suHDppbfmHjt27uj53W+/euDyyn0CAAAAsP79LwAA//9SPQWu") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x70b}, 0x14}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="0800180003000400fdff1400000046890020006900006002907800000000ffffffff44045b1014f3305280f1"], 0x2e) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000002000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xac, r2, 0x410, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x1) write$UHID_INPUT(r0, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) 6.236939118s ago: executing program 0 (id=1965): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, 0x0, 0x0, r0) 6.065211942s ago: executing program 2 (id=1967): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) syz_emit_ethernet(0x125, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb884700000000000000000000000061ed09f000e33a00fc010000000000000000000000000000fc010000000000000000000000000001ff00032965000000ff007501640000000bb08812dd0b002a039a1ab2e31a133a3115c8c28eac69ee023ce572eb262874baccdcfb5e7d10c43c1b3a1ac62102e45f98e6d7ec1951719a0c26e43f97388c237a9dad4951120aa83aa69cbcd43202d0932aa0bd23b8df9d9b6a28063f8d67a95e42ffb93dab026d930ac3824097ee02d9d3820b3c46e15db5220998"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x2}) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, &(0x7f0000000100)) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="390200000200000005f8"], 0x239) modify_ldt$write2(0x11, &(0x7f0000000040)={0x651, 0x0, 0x3ffe, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) 5.711555981s ago: executing program 0 (id=1968): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) bind$802154_dgram(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957", 0x1a}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1", 0xab}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x1b4}], 0x1}}], 0x2, 0x42054) 4.787280533s ago: executing program 2 (id=1969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) bind$802154_dgram(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957", 0x1a}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1", 0xab}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x1b4}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.289367445s ago: executing program 3 (id=1970): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000028, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x8002, 0xffff, @mcast2, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) r4 = open(0x0, 0x80242, 0x0) write$FUSE_CREATE_OPEN(r4, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 3.842514587s ago: executing program 1 (id=1971): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0)="1400000009", 0x5) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x2000e3f, @mcast2, 0x7}}}, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x81}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x163, 0x80, 0x5, 0x4, 0x4, 0x2, 0xfc, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1}}}, 0x87e8, 0x9, 0x1, 0x10000, 0x4}}, &(0x7f00000001c0)=0xb0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x20, r5, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 3.66358008s ago: executing program 2 (id=1972): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x5, 0x20, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) 2.348412483s ago: executing program 1 (id=1973): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xd0, 0x48, 0xfffffffe}}, 0x44) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r6, 0x0, 0x0, 0x7, 0x1) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5d800"}}, 0x48}}, 0x410) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x290, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) writev(r3, 0x0, 0x0) 2.087643899s ago: executing program 0 (id=1974): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) syz_emit_ethernet(0x125, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb884700000000000000000000000061ed09f000e33a00fc010000000000000000000000000000fc010000000000000000000000000001ff00032965000000ff007501640000000bb08812dd0b002a039a1ab2e31a133a3115c8c28eac69ee023ce572eb262874baccdcfb5e7d10c43c1b3a1ac62102e45f98e6d7ec1951719a0c26e43f97388c237a9dad4951120aa83aa69cbcd43202d0932aa0bd23b8df9d9b6a28063f8d67a95e42ffb93dab026d930ac3824097ee02d9d3820b3c46e15db5220998f788609f722351ba91ae"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x2}) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, &(0x7f0000000100)) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="390200000200000005f8"], 0x239) modify_ldt$write2(0x11, &(0x7f0000000040)={0x651, 0x0, 0x3ffe, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) 1.979063142s ago: executing program 2 (id=1975): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 1.893156984s ago: executing program 0 (id=1976): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) bind$802154_dgram(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957", 0x1a}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1", 0xab}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x1b4}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.722656128s ago: executing program 2 (id=1977): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) syz_emit_ethernet(0x125, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb884700000000000000000000000061ed09f000e33a00fc010000000000000000000000000000fc010000000000000000000000000001ff00032965000000ff007501640000000bb08812dd0b002a039a1ab2e31a133a3115c8c28eac69ee023ce572eb262874baccdcfb5e7d10c43c1b3a1ac62102e45f98e6d7ec1951719a0c26e43f97388c237a9dad4951120aa83aa69cbcd43202d0932aa0bd23b8df9d9b6a28063f8d67a95e42ffb93dab026d930ac3824097ee02d9d3820b3c46e15db5220998f788609f722351"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x2}) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, &(0x7f0000000100)) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="390200000200000005f8"], 0x239) modify_ldt$write2(0x11, &(0x7f0000000040)={0x651, 0x0, 0x3ffe, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) 1.486295064s ago: executing program 0 (id=1978): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f0000000300)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @private1, 0x10002}, 0x1c, &(0x7f0000000340)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2e}}}], 0x18}}], 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x9c0000, 0x1, 0x6844, r1, 0x0, &(0x7f0000000140)={0x9c0909, 0x3ff, '\x00', @p_u16=&(0x7f0000000100)=0xf}}) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f00000000c0)={0x3ff, 0xffffffffffffffb2}) sendmsg$nl_xfrm(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4) landlock_create_ruleset(&(0x7f0000000040)={0x880, 0x0, 0x2, 0x1001, 0x6, 0x1}, 0x30, 0x3) io_submit(r0, 0x20000000000002fb, &(0x7f0000004540)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x3f00) 453.007479ms ago: executing program 3 (id=1979): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0x17b3', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000280), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='AC', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r5) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @mcast1={0xff, 0x5}, 0x0, 0x4, 0x0, 0x600, 0xfc8, 0x20c200a2}) 7.53538ms ago: executing program 0 (id=1980): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) bind$802154_dgram(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957", 0x1a}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1", 0xab}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x1b4}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.03078ms ago: executing program 1 (id=1981): syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@noblock_validity}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r4, &(0x7f0000000180)=0x4b6e, 0xfffffdcb) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = gettid() tkill(r5, 0x12) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={[0x3]}, 0x8}) 0s ago: executing program 2 (id=1982): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) kernel console output (not intermixed with test programs): ace with an up link [ 81.636185][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.649956][ T5775] team0: Port device team_slave_0 added [ 81.664066][ T5775] team0: Port device team_slave_1 added [ 81.707150][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.757490][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.769275][ T5779] team0: Port device team_slave_0 added [ 81.787176][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.794140][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.820273][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.833729][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.840752][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.866780][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.878168][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.885316][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.894943][ T5778] bridge_slave_0: entered allmulticast mode [ 81.901942][ T5778] bridge_slave_0: entered promiscuous mode [ 81.912483][ T5779] team0: Port device team_slave_1 added [ 81.941358][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.948713][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.956210][ T5778] bridge_slave_1: entered allmulticast mode [ 81.963229][ T5778] bridge_slave_1: entered promiscuous mode [ 81.993358][ T5780] team0: Port device team_slave_0 added [ 82.022552][ T5780] team0: Port device team_slave_1 added [ 82.030844][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.043457][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.050569][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.076874][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.122400][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.132103][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.139247][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.165318][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.200253][ T5775] hsr_slave_0: entered promiscuous mode [ 82.206941][ T5775] hsr_slave_1: entered promiscuous mode [ 82.254948][ T5778] team0: Port device team_slave_0 added [ 82.262710][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.270092][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.296121][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.308736][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.315707][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.341841][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.360414][ T5778] team0: Port device team_slave_1 added [ 82.372319][ T5779] hsr_slave_0: entered promiscuous mode [ 82.378947][ T5779] hsr_slave_1: entered promiscuous mode [ 82.385117][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.392962][ T5779] Cannot create hsr debugfs directory [ 82.469968][ T5780] hsr_slave_0: entered promiscuous mode [ 82.476556][ T5780] hsr_slave_1: entered promiscuous mode [ 82.482718][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.490707][ T5777] Bluetooth: hci0: command tx timeout [ 82.497351][ T5780] Cannot create hsr debugfs directory [ 82.518863][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.525839][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.552058][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.599886][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.607196][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.633257][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.646520][ T5777] Bluetooth: hci2: command tx timeout [ 82.726653][ T5777] Bluetooth: hci3: command tx timeout [ 82.726675][ T5086] Bluetooth: hci1: command tx timeout [ 82.782438][ T5778] hsr_slave_0: entered promiscuous mode [ 82.788820][ T5778] hsr_slave_1: entered promiscuous mode [ 82.795088][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.802869][ T5778] Cannot create hsr debugfs directory [ 83.025912][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.058384][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.070452][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.098903][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.168809][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.187612][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.199606][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.210146][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.288886][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.307645][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.319598][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.331056][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.431210][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.457951][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.468404][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.482860][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.533809][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.544547][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.583657][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.622584][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.632348][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.639591][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.653757][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.660887][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.715909][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.723083][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.755675][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.762849][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.791676][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.873310][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.883664][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.930891][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.938123][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.958978][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.966163][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.984709][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.060282][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.067545][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.086132][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.093313][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.342443][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.448897][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.502908][ T5775] veth0_vlan: entered promiscuous mode [ 84.560242][ T5775] veth1_vlan: entered promiscuous mode [ 84.568988][ T5777] Bluetooth: hci0: command tx timeout [ 84.609742][ T5780] veth0_vlan: entered promiscuous mode [ 84.655301][ T5775] veth0_macvtap: entered promiscuous mode [ 84.678869][ T5780] veth1_vlan: entered promiscuous mode [ 84.698130][ T5775] veth1_macvtap: entered promiscuous mode [ 84.712647][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.727096][ T5777] Bluetooth: hci2: command tx timeout [ 84.762871][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.785869][ T5780] veth0_macvtap: entered promiscuous mode [ 84.807320][ T5777] Bluetooth: hci3: command tx timeout [ 84.808044][ T5086] Bluetooth: hci1: command tx timeout [ 84.829625][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.848225][ T5780] veth1_macvtap: entered promiscuous mode [ 84.884282][ T5778] veth0_vlan: entered promiscuous mode [ 84.898819][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.919832][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.931178][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.942478][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.951410][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.962464][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.972067][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.981046][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.992384][ T5779] veth0_vlan: entered promiscuous mode [ 84.998879][ T5778] veth1_vlan: entered promiscuous mode [ 85.015072][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.026044][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.040949][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.069315][ T5779] veth1_vlan: entered promiscuous mode [ 85.087420][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.096160][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.107058][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.115783][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.225349][ T5778] veth0_macvtap: entered promiscuous mode [ 85.272170][ T5778] veth1_macvtap: entered promiscuous mode [ 85.279444][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.300291][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.325556][ T5779] veth0_macvtap: entered promiscuous mode [ 85.355923][ T5779] veth1_macvtap: entered promiscuous mode [ 85.377258][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.385117][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.410501][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.421088][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.431872][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.442410][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.455446][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.473315][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.496112][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.508158][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.524792][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.535558][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.550074][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.561809][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.585059][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.599467][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.611599][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.622310][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.634805][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.656335][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.676173][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.686738][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.698475][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.709160][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.720306][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.731953][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.745842][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.760879][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.770521][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.779750][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.818777][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.832425][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.842236][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.855637][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.907796][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.915664][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.987952][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.101227][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.647084][ T5086] Bluetooth: hci0: command tx timeout [ 86.785247][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.823853][ T5086] Bluetooth: hci2: command tx timeout [ 86.840436][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.928697][ T5086] Bluetooth: hci3: command tx timeout [ 86.939572][ T5086] Bluetooth: hci1: command tx timeout [ 88.690507][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.727618][ T5777] Bluetooth: hci0: command tx timeout [ 88.766693][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.887374][ T5777] Bluetooth: hci2: command tx timeout [ 88.900937][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.928745][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.963792][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.972590][ T5777] Bluetooth: hci1: command tx timeout [ 88.978300][ T5086] Bluetooth: hci3: command tx timeout [ 89.035633][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.066762][ T5847] syz.3.4[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.207360][ T5847] loop3: detected capacity change from 0 to 1024 [ 89.228005][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'. [ 91.646679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.058491][ T27] cfg80211: failed to load regulatory.db [ 96.730606][ T5888] loop1: detected capacity change from 0 to 8 [ 97.082266][ T5888] syz.1.13: attempt to access beyond end of device [ 97.082266][ T5888] loop1: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 97.096989][ T5888] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 97.104519][ T5888] unable to read xattr id index table [ 97.381367][ T5769] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.609011][ T5894] mmap: syz.0.14 (5894) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.296453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.617123][ T5914] Bluetooth: MGMT ver 1.22 [ 102.622464][ T5914] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 103.201826][ T5921] ptrace attach of ""[5924] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5921] [ 109.936143][ T5939] loop2: detected capacity change from 0 to 2048 [ 110.083254][ T5939] NILFS (loop2): unrecognized mount option "ÈÍÜÊûä¬V°l [ 110.083254][ T5939] ´šnorecovery" [ 112.126608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.536470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.295488][ T5966] loop2: detected capacity change from 0 to 128 [ 115.991132][ T5971] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 115.999256][ T5971] FAT-fs (loop2): Filesystem has been set read-only [ 118.157054][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.489479][ T5997] loop2: detected capacity change from 0 to 4096 [ 119.396936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 121.155874][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 121.181249][ T6022] syzkaller0: entered promiscuous mode [ 121.194389][ T6022] syzkaller0: entered allmulticast mode [ 122.741427][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.076854][ T6036] loop1: detected capacity change from 0 to 32768 [ 123.103942][ T6036] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.156319][ T6036] XFS (loop1): Ending clean mount [ 123.173765][ T6036] XFS (loop1): Quotacheck needed: Please wait. [ 123.239094][ T6036] XFS (loop1): Quotacheck: Done. [ 124.146868][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.408707][ T5815] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.838056][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 124.966525][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 125.033949][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.059262][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.087066][ T5815] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.106645][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.130615][ T5815] usb 3-1: config 0 descriptor?? [ 125.158744][ T5815] hub 3-1:0.0: bad descriptor, ignoring hub [ 125.159840][ T28] audit: type=1804 audit(1785303281.581:2): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.52" name="bus" dev="ramfs" ino=8373 res=1 errno=0 [ 125.188314][ T5815] hub: probe of 3-1:0.0 failed with error -5 [ 125.203857][ T6059] loop0: detected capacity change from 0 to 256 [ 125.221644][ T5815] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 125.356895][ T28] audit: type=1804 audit(1785303281.611:3): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.52" name="bus" dev="ramfs" ino=8373 res=1 errno=0 [ 125.931670][ T6064] loop1: detected capacity change from 0 to 512 [ 125.938888][ T6064] ======================================================= [ 125.938888][ T6064] WARNING: The mand mount option has been deprecated and [ 125.938888][ T6064] and is ignored by this kernel. Remove the mand [ 125.938888][ T6064] option from the mount to silence this warning. [ 125.938888][ T6064] ======================================================= [ 126.027984][ T6064] EXT4-fs: test_dummy_encryption requires encrypt feature [ 126.946391][ C1] sched: RT throttling activated [ 129.957885][ T5875] usb 3-1: USB disconnect, device number 2 [ 130.499865][ T5086] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 132.273641][ T6107] loop1: detected capacity change from 0 to 128 [ 133.016422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.507006][ T6112] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 133.515483][ T6112] FAT-fs (loop1): Filesystem has been set read-only [ 134.009304][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.016021][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.576493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 138.408294][ T6135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.69'. [ 144.997010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 145.394452][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.400879][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.407033][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.413141][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.419258][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.425355][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.431447][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.437531][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.443603][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.449698][ T6171] tc action pedit 'at' offset 2 out of bounds [ 145.455880][ T6171] TC_ACT_REPEAT abuse ? [ 145.673785][ T6179] syz_tun: entered allmulticast mode [ 145.715854][ T6179] bond0: entered promiscuous mode [ 145.756731][ T6179] bond_slave_0: entered promiscuous mode [ 145.762939][ T6179] bond_slave_1: entered promiscuous mode [ 147.440818][ T6182] syzkaller0: entered promiscuous mode [ 147.491188][ T6182] syzkaller0: entered allmulticast mode [ 148.053639][ T6194] xt_CONNSECMARK: invalid mode: 0 [ 148.627990][ T6194] tty tty3: ldisc open failed (-12), clearing slot 2 [ 151.486961][ T5086] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 153.086574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 153.496457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.281548][ T6246] syz_tun: entered allmulticast mode [ 155.305861][ T6246] bond0: entered promiscuous mode [ 155.316405][ T6246] bond_slave_0: entered promiscuous mode [ 155.323360][ T6246] bond_slave_1: entered promiscuous mode [ 158.879918][ T6274] loop3: detected capacity change from 0 to 2048 [ 158.955221][ T6274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.971812][ T6278] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 160.295729][ T6282] EXT4-fs error (device loop3) in ext4_setattr:5683: error 28 [ 161.661602][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.751675][ T6295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.191065][ T6317] loop0: detected capacity change from 0 to 128 [ 167.210400][ T6317] UDF-fs: bad mount option "" or missing value [ 168.467496][ T6324] loop0: detected capacity change from 0 to 128 [ 170.520599][ T6330] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 170.528557][ T6330] FAT-fs (loop0): Filesystem has been set read-only [ 172.553928][ T6337] syz_tun: entered allmulticast mode [ 172.574111][ T6337] bond0: entered promiscuous mode [ 172.584480][ T6337] bond_slave_0: entered promiscuous mode [ 172.604804][ T6337] bond_slave_1: entered promiscuous mode [ 174.955180][ T6353] loop1: detected capacity change from 0 to 2048 [ 175.057799][ T6354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.708232][ T6353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.425755][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 177.590115][ T6362] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 177.635743][ T6362] EXT4-fs error (device loop1) in ext4_setattr:5683: error 28 [ 179.860403][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.649221][ T6380] loop3: detected capacity change from 0 to 128 [ 181.972731][ T6390] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 181.980782][ T6390] FAT-fs (loop3): Filesystem has been set read-only [ 183.719212][ T6400] loop1: detected capacity change from 0 to 512 [ 183.747091][ T6400] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.814311][ T6400] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 183.929208][ T6400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 183.977713][ T6400] System zones: 1-12 [ 183.983179][ T6400] EXT4-fs (loop1): orphan cleanup on readonly fs [ 184.010166][ T6400] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.135: bg 0: block 361: padding at end of block bitmap is not set [ 184.077603][ T6400] EXT4-fs (loop1): Remounting filesystem read-only [ 184.101030][ T6400] EXT4-fs (loop1): 1 truncate cleaned up [ 184.359621][ T6400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 185.725174][ T6424] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.135: error -117 reading directory block [ 185.964912][ T6426] loop3: detected capacity change from 0 to 1024 [ 186.386256][ T6428] Zero length message leads to an empty skb [ 186.827511][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 193.587459][ T5086] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 194.274200][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.297953][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.826947][ T6471] syzkaller0: entered promiscuous mode [ 197.832467][ T6471] syzkaller0: entered allmulticast mode [ 198.282165][ T6482] xt_CONNSECMARK: invalid mode: 0 [ 199.158376][ T5086] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 205.055112][ T6519] loop0: detected capacity change from 0 to 1024 [ 205.094703][ T6519] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.762456][ T6519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.808599][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 206.814612][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 207.241256][ T6528] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 207.628181][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.458167][ T6553] autofs4:pid:6553:autofs_fill_super: called with bogus options [ 215.827843][ T6571] syzkaller0: entered promiscuous mode [ 215.833371][ T6571] syzkaller0: entered allmulticast mode [ 215.871754][ T6571] tipc: Started in network mode [ 215.881621][ T6571] tipc: Node identity 8e50c27cd6c8, cluster identity 4711 [ 215.902138][ T6571] tipc: Enabled bearer , priority 0 [ 215.948575][ T6571] tipc: Resetting bearer [ 215.999733][ T6570] tipc: Resetting bearer [ 216.097587][ T6570] tipc: Disabling bearer [ 216.122242][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.184'. [ 216.527926][ T6590] autofs4:pid:6590:autofs_fill_super: called with bogus options [ 216.586179][ T6592] loop1: detected capacity change from 0 to 512 [ 216.752874][ T6592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.027020][ T6597] loop2: detected capacity change from 0 to 128 [ 217.243706][ T6597] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.259639][ T6597] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.295993][ T6597] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.849250][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.000704][ T6614] loop3: detected capacity change from 0 to 1024 [ 219.041044][ T6614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.089532][ T6614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.548146][ T6628] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 219.990547][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.371412][ T6634] autofs4:pid:6634:autofs_fill_super: called with bogus options [ 221.188979][ T6645] loop3: detected capacity change from 0 to 128 [ 221.277061][ T6645] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.638286][ T6645] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.661249][ T6645] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.081441][ T6650] ubi0: attaching mtd0 [ 222.099581][ T6650] ubi0: scanning is finished [ 222.104571][ T6650] ubi0: empty MTD device detected [ 222.675056][ T6650] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 223.008953][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 229.481896][ T6727] loop0: detected capacity change from 0 to 128 [ 229.749010][ T6727] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.770173][ T6727] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.792502][ T6727] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.231064][ T6824] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.288488][ T6819] sctp: failed to load transform for md5: -2 [ 240.155151][ T6840] loop0: detected capacity change from 0 to 512 [ 240.206224][ T6840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 240.251090][ T6840] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 240.329688][ T6840] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 240.396591][ T6840] EXT4-fs (loop0): 1 truncate cleaned up [ 240.419107][ T6840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.466414][ T28] audit: type=1326 audit(1785303396.861:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 240.509280][ T6848] loop2: detected capacity change from 0 to 1024 [ 240.533020][ T28] audit: type=1326 audit(1785303396.861:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 240.556777][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.620569][ T28] audit: type=1326 audit(1785303396.861:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 240.746631][ T28] audit: type=1326 audit(1785303396.861:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 240.812604][ T28] audit: type=1326 audit(1785303396.861:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 240.840399][ T28] audit: type=1326 audit(1785303396.861:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 240.865626][ T28] audit: type=1326 audit(1785303396.881:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 240.889488][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.905103][ T28] audit: type=1326 audit(1785303396.891:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 241.236874][ T28] audit: type=1326 audit(1785303396.891:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0192d5e6ce code=0x7ffc0000 [ 241.342204][ T28] audit: type=1326 audit(1785303396.891:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 241.533677][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.644003][ T23] Process accounting resumed [ 246.579695][ T6881] Process accounting resumed [ 246.791434][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 249.257831][ T6906] veth1_to_bond: entered allmulticast mode [ 249.277620][ T6906] veth1_to_bond: entered promiscuous mode [ 249.352765][ T6906] veth1_to_bond: left promiscuous mode [ 249.366612][ T6906] veth1_to_bond: left allmulticast mode [ 253.118545][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'. [ 253.133238][ T6940] lo speed is unknown, defaulting to 1000 [ 253.140788][ T6940] lo speed is unknown, defaulting to 1000 [ 253.149975][ T6940] lo speed is unknown, defaulting to 1000 [ 253.307392][ T6940] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 254.810734][ T6940] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 254.856879][ T6950] syz_tun: entered allmulticast mode [ 254.898780][ T6950] bond0: entered promiscuous mode [ 254.910560][ T6950] bond_slave_0: entered promiscuous mode [ 254.926600][ T6950] bond_slave_1: entered promiscuous mode [ 254.973732][ T6940] lo speed is unknown, defaulting to 1000 [ 255.008824][ T6940] lo speed is unknown, defaulting to 1000 [ 255.047694][ T6940] lo speed is unknown, defaulting to 1000 [ 255.056021][ T6940] lo speed is unknown, defaulting to 1000 [ 255.690519][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.708497][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.720019][ T6981] netlink: 'syz.3.293': attribute type 1 has an invalid length. [ 257.748195][ T6981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.923659][ T6983] gretap1: entered promiscuous mode [ 257.987854][ T6983] bond1: (slave gretap1): making interface the new active one [ 258.004537][ T6983] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 258.235292][ T6981] macvlan2: entered promiscuous mode [ 258.240903][ T6981] macvlan2: entered allmulticast mode [ 258.254812][ T6981] bond1: entered promiscuous mode [ 258.260815][ T6981] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 258.272755][ T6981] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 258.297543][ T6981] bond1: left promiscuous mode [ 258.514674][ T6987] syzkaller0: entered promiscuous mode [ 258.548843][ T6987] syzkaller0: entered allmulticast mode [ 258.817885][ T7000] loop2: detected capacity change from 0 to 512 [ 258.841006][ T7000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 258.874249][ T7000] EXT4-fs (loop2): 1 truncate cleaned up [ 259.008552][ T7000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.883205][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.218498][ T7059] tipc: Enabled bearer , priority 0 [ 264.377821][ T7065] syzkaller0: entered promiscuous mode [ 264.387566][ T7065] syzkaller0: entered allmulticast mode [ 264.496197][ T7058] tipc: Resetting bearer [ 264.761022][ T7058] tipc: Disabling bearer [ 265.086689][ T5777] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 265.665839][ T7075] loop3: detected capacity change from 0 to 512 [ 265.756386][ T7075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.866526][ T7075] EXT4-fs (loop3): 1 truncate cleaned up [ 265.886123][ T7075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.712758][ T7087] veth1_to_bond: entered allmulticast mode [ 266.724364][ T7087] veth1_to_bond: entered promiscuous mode [ 266.879401][ T7087] veth1_to_bond: left promiscuous mode [ 266.885117][ T7087] veth1_to_bond: left allmulticast mode [ 266.913336][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.179962][ T7101] syzkaller0: entered promiscuous mode [ 268.185915][ T7101] syzkaller0: entered allmulticast mode [ 268.978411][ T7109] ubi16: attaching mtd0 [ 268.984091][ T7109] ubi16: scanning is finished [ 269.102328][ T7109] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 269.112848][ T7109] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 269.120356][ T7109] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 269.128068][ T7109] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 269.135678][ T7109] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 269.142600][ T7109] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 269.150728][ T7109] ubi16: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3281072058 [ 269.160916][ T7109] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 269.196030][ T7116] ubi16: background thread "ubi_bgt16d" started, PID 7116 [ 269.585702][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 270.507582][ T5777] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 271.499935][ T7136] loop1: detected capacity change from 0 to 512 [ 271.899049][ T5777] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 271.962450][ T7136] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.034342][ T7136] EXT4-fs (loop1): 1 truncate cleaned up [ 272.047168][ T7136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.463985][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.333'. [ 275.488452][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.500115][ T7172] lo speed is unknown, defaulting to 1000 [ 276.047281][ T7172] lo speed is unknown, defaulting to 1000 [ 276.054989][ T7172] lo speed is unknown, defaulting to 1000 [ 277.779828][ T7172] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 277.908441][ T7172] lo speed is unknown, defaulting to 1000 [ 277.950025][ T7172] lo speed is unknown, defaulting to 1000 [ 278.039627][ T5777] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 278.052641][ T7172] lo speed is unknown, defaulting to 1000 [ 278.232846][ T7172] lo speed is unknown, defaulting to 1000 [ 281.049239][ T7198] se_device not configured yet, cannot port link [ 282.417935][ T7210] batman_adv: batadv0: Adding interface: vxlan0 [ 282.424262][ T7210] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.538589][ T7214] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 282.545799][ T7210] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 283.556830][ T5777] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 284.834466][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 284.943284][ T5777] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 286.569306][ T7253] loop3: detected capacity change from 0 to 2048 [ 286.690096][ T7253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.524409][ T7274] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 287.560407][ T7274] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 287.567965][ T7274] overlayfs: failed to verify upper root origin [ 287.843559][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.777078][ T7302] "syz.1.365" (7302) uses obsolete ecb(arc4) skcipher [ 289.796506][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 291.298924][ T7315] overlay: Unknown parameter '/' [ 291.357116][ T7316] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 294.091958][ T7337] syz.3.371 uses obsolete (PF_INET,SOCK_PACKET) [ 295.339830][ T7349] ubi: mtd0 is already attached to ubi16 [ 296.290174][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 297.607408][ T7365] syzkaller0: entered promiscuous mode [ 297.676271][ T7365] syzkaller0: entered allmulticast mode [ 302.289237][ T5777] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 306.484512][ T5777] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 308.480680][ T5777] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 309.222829][ T7479] warning: `syz.1.400' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 311.084998][ T7501] loop3: detected capacity change from 0 to 512 [ 311.189848][ T7501] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.209724][ T5777] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 311.582918][ T7501] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.409: iget: bad i_size value: 38620345925642 [ 311.830061][ T7501] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.409: couldn't read orphan inode 15 (err -117) [ 311.848194][ T7501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.764618][ T7522] loop0: detected capacity change from 0 to 256 [ 312.861918][ T7522] tipc: Started in network mode [ 312.867388][ T7522] tipc: Node identity ac14140f, cluster identity 4711 [ 312.882694][ T7522] tipc: Enabled bearer , priority 10 [ 313.489290][ T7527] loop0: detected capacity change from 0 to 128 [ 313.556192][ T3515] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:10: bg 0: block 5: invalid block bitmap [ 313.604117][ T3515] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 313.656383][ T3515] EXT4-fs (loop3): This should not happen!! Data will be lost [ 313.656383][ T3515] [ 313.666076][ T3515] EXT4-fs (loop3): Total free blocks count 0 [ 313.675104][ T3515] EXT4-fs (loop3): Free/Dirty block details [ 313.689172][ T3515] EXT4-fs (loop3): free_blocks=0 [ 313.694236][ T3515] EXT4-fs (loop3): dirty_blocks=65 [ 313.702053][ T3515] EXT4-fs (loop3): Block reservation details [ 313.708877][ T3515] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 313.803115][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.921701][ T2130] tipc: Node number set to 2886997007 [ 314.944652][ T7542] loop1: detected capacity change from 0 to 128 [ 315.620284][ T7542] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.655810][ T7542] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.142033][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.148454][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.377270][ T7565] syzkaller1: entered promiscuous mode [ 317.382813][ T7565] syzkaller1: entered allmulticast mode [ 317.407765][ T7565] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 317.436757][ T7565] xt_CONNSECMARK: invalid mode: 254 [ 317.564497][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.727852][ T7571] loop1: detected capacity change from 0 to 512 [ 317.758201][ T7571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.890889][ T7571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.324669][ T7571] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.800191][ T7578] Need at least one configuration in g1. [ 318.831810][ T7578] udc dummy_udc.0: failed to start g1: -22 [ 318.876722][ T7578] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 318.892468][ T7578] UDC core: g1: couldn't find an available UDC or it's busy [ 320.162201][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.345116][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 320.526525][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 320.578660][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 320.639175][ T5815] usb 3-1: no configurations [ 320.661234][ T5815] usb 3-1: can't read configurations, error -22 [ 327.169050][ T7652] loop3: detected capacity change from 0 to 256 [ 327.289220][ T7649] tipc: Enabled bearer , priority 10 [ 328.305096][ T23] tipc: Node number set to 1486406268 [ 329.362999][ T7684] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.372401][ T7684] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.381165][ T7684] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.389912][ T7684] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.111839][ T7684] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.122139][ T7684] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.131448][ T7684] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.141318][ T7684] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.323642][ T7709] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 334.510034][ T7712] bond1: (slave gretap1): making interface the new active one [ 334.560361][ T7712] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 334.600348][ T7723] gretap2: entered promiscuous mode [ 334.605679][ T7723] gretap2: entered allmulticast mode [ 334.614982][ T7723] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 334.628714][ T7721] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.675439][ T7721] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 334.697582][ T7721] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.713311][ T7712] syz.2.465 (7712) used greatest stack depth: 20056 bytes left [ 334.721458][ T7721] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 334.777879][ T7721] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.787496][ T7721] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 334.864646][ T7721] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.883404][ T7721] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 336.698847][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 337.346501][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 337.352597][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 337.359122][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 337.424535][ T5086] Bluetooth: hci1: unexpected event for opcode 0x040d [ 337.584132][ T7763] loop3: detected capacity change from 0 to 512 [ 337.625369][ T7759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 337.646446][ T7763] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.768737][ T7763] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.477: iget: bad i_size value: 38620345925642 [ 337.795344][ T7753] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3574616936 (457550967808 ns) > initial count (31031043456 ns). Using initial count to start timer. [ 337.813294][ T7763] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.477: couldn't read orphan inode 15 (err -117) [ 337.828983][ T7763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.507004][ T7768] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 339.851795][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 339.858729][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 339.858734][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 339.937541][ T3486] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 339.967649][ T3486] EXT4-fs (loop3): This should not happen!! Data will be lost [ 339.967649][ T3486] [ 339.979764][ T3486] EXT4-fs (loop3): Total free blocks count 0 [ 339.985898][ T3486] EXT4-fs (loop3): Free/Dirty block details [ 339.992172][ T3486] EXT4-fs (loop3): free_blocks=0 [ 339.997325][ T3486] EXT4-fs (loop3): dirty_blocks=65 [ 340.002578][ T3486] EXT4-fs (loop3): Block reservation details [ 340.008805][ T3486] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 340.020069][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.399764][ T7794] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.408921][ T7794] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.417693][ T7794] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.426517][ T7794] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.507905][ T7794] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.516926][ T7794] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.525818][ T7794] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.534759][ T7794] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.374413][ T5086] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 346.200009][ T7839] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.749133][ T7852] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.758158][ T7852] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.766957][ T7852] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.776894][ T7852] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.803119][ T7852] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.812747][ T7852] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.822142][ T7852] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.831077][ T7852] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.222174][ T5086] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 355.243726][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 355.275452][ T28] audit: type=1326 audit(1785303511.661:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 355.975646][ T28] audit: type=1326 audit(1785303511.661:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 356.008071][ T28] audit: type=1326 audit(1785303511.661:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 356.220676][ T28] audit: type=1326 audit(1785303511.661:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 356.252217][ T28] audit: type=1326 audit(1785303511.661:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 356.348726][ T28] audit: type=1326 audit(1785303511.661:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 356.407376][ T28] audit: type=1326 audit(1785303511.661:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 356.499511][ T28] audit: type=1326 audit(1785303511.661:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 356.553976][ T28] audit: type=1326 audit(1785303511.661:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 356.855705][ T28] audit: type=1326 audit(1785303511.661:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 357.540363][ T7911] tipc: Started in network mode [ 357.545380][ T7911] tipc: Node identity 6293457cef7e, cluster identity 4711 [ 357.557994][ T7911] tipc: Enabled bearer , priority 0 [ 357.569000][ T7911] syzkaller0: entered promiscuous mode [ 357.574516][ T7911] syzkaller0: entered allmulticast mode [ 357.597674][ T7911] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 357.657471][ T7911] tipc: Resetting bearer [ 357.696588][ T7910] tipc: Resetting bearer [ 357.798756][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 357.832710][ T7910] tipc: Disabling bearer [ 358.247832][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 360.723145][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 371.457979][ T8014] batman_adv: batadv0: Adding interface: dummy0 [ 371.464283][ T8014] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.489605][ T8014] batman_adv: batadv0: Interface activated: dummy0 [ 371.523438][ T8017] batadv0: mtu less than device minimum [ 371.544966][ T8017] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.557794][ T8017] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.570155][ T8017] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.582464][ T8017] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.594656][ T8017] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.607162][ T8017] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.619457][ T8017] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.631829][ T8017] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.644415][ T8017] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.911403][ T5086] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 374.353581][ T5086] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 375.305840][ T8064] loop2: detected capacity change from 0 to 1024 [ 375.327662][ T8064] EXT4-fs: Ignoring removed bh option [ 375.356668][ T8064] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 375.428972][ T8064] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 375.477210][ T8064] System zones: 0-1, 3-12 [ 375.499201][ T8064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.848151][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 377.808377][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.572724][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.579301][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.029580][ T27] IPVS: starting estimator thread 0... [ 382.167797][ T8144] IPVS: using max 19 ests per chain, 45600 per kthread [ 385.042737][ T8181] afs: Bad value for 'source' [ 385.080859][ T8181] loop3: detected capacity change from 0 to 512 [ 393.708774][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 412.322645][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 415.337978][ T8385] syz.1.626: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 415.357392][ T8385] CPU: 0 PID: 8385 Comm: syz.1.626 Not tainted syzkaller #0 [ 415.364725][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 415.374852][ T8385] Call Trace: [ 415.378159][ T8385] [ 415.380167][ T27] IPVS: starting estimator thread 0... [ 415.381097][ T8385] dump_stack_lvl+0x18c/0x250 [ 415.391278][ T8385] ? show_regs_print_info+0x20/0x20 [ 415.396521][ T8385] ? load_image+0x420/0x420 [ 415.401072][ T8385] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 415.407526][ T8385] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 415.414084][ T8385] warn_alloc+0x246/0x340 [ 415.418467][ T8385] ? zone_watermark_ok_safe+0x230/0x230 [ 415.424060][ T8385] ? _raw_spin_unlock+0x28/0x40 [ 415.428946][ T8385] ? netlink_unicast+0x7b1/0x930 [ 415.433910][ T8385] __vmalloc_node_range+0x661/0x1320 [ 415.439227][ T8385] ? __asan_memset+0x22/0x40 [ 415.443869][ T8385] ? free_vm_area+0x50/0x50 [ 415.448402][ T8385] ? kvmalloc_node+0x70/0x180 [ 415.453097][ T8385] ? rcu_is_watching+0x15/0xb0 [ 415.457908][ T8385] ? kvmalloc_node+0x70/0x180 [ 415.462607][ T8385] ? trace_kmalloc+0x1f/0xa0 [ 415.467220][ T8385] kvmalloc_node+0x13f/0x180 [ 415.471850][ T8385] ? hash_netport4_resize+0x24e/0x19f0 [ 415.477329][ T8385] hash_netport4_resize+0x24e/0x19f0 [ 415.482643][ T8385] ? hash_netport4_uadt+0xf70/0xf70 [ 415.487856][ T8385] ? hash_netport4_kadt+0x5b0/0x5b0 [ 415.493074][ T8385] ? lockdep_hardirqs_on+0x98/0x150 [ 415.498307][ T8385] call_ad+0x42a/0xb30 [ 415.502410][ T8385] ? ip_set_ad+0x9c0/0x9c0 [ 415.506857][ T8385] ? __nla_parse+0x40/0x50 [ 415.511300][ T8385] ip_set_ad+0x81a/0x9c0 [ 415.515572][ T8385] ? ip_set_dump_done+0x320/0x320 [ 415.520616][ T8385] ? rcu_is_watching+0x15/0xb0 [ 415.525436][ T8385] nfnetlink_rcv_msg+0xcaf/0x1290 [ 415.530495][ T8385] ? nfnetlink_rcv_msg+0x228/0x1290 [ 415.535731][ T8385] ? nfnetlink_unbind+0x160/0x160 [ 415.540783][ T8385] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 415.546824][ T8385] ? __schedule+0x15b6/0x4660 [ 415.551554][ T8385] ? netlink_unicast+0x77b/0x930 [ 415.556514][ T8385] ? netlink_sendmsg+0x8d0/0xbf0 [ 415.561467][ T8385] ? mark_lock+0x94/0x320 [ 415.565829][ T8385] netlink_rcv_skb+0x235/0x4c0 [ 415.570622][ T8385] ? nfnetlink_unbind+0x160/0x160 [ 415.575677][ T8385] ? netlink_ack+0x1160/0x1160 [ 415.580477][ T8385] ? apparmor_capable+0x137/0x1a0 [ 415.585520][ T8385] ? bpf_lsm_capable+0x9/0x10 [ 415.590326][ T8385] ? security_capable+0x89/0xb0 [ 415.595204][ T8385] nfnetlink_rcv+0x2c9/0x2490 [ 415.599924][ T8385] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 415.605928][ T8385] ? __lock_acquire+0x7d80/0x7d80 [ 415.610981][ T8385] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 415.616901][ T8385] ? lockdep_hardirqs_on+0x98/0x150 [ 415.622115][ T8385] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 415.627682][ T8385] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 415.633615][ T8385] ? _raw_spin_unlock+0x40/0x40 [ 415.638487][ T8385] ? __dev_queue_xmit+0x275/0x3630 [ 415.643646][ T8385] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 415.650277][ T8385] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 415.655926][ T8385] ? __skb_clone+0x5c/0x6c0 [ 415.660471][ T8385] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.665698][ T8385] ? __lock_acquire+0x7d80/0x7d80 [ 415.670750][ T8385] ? __rcu_read_unlock+0x7c/0xd0 [ 415.675699][ T8385] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.680917][ T8385] netlink_unicast+0x7b1/0x930 [ 415.685813][ T8385] netlink_sendmsg+0x8d0/0xbf0 [ 415.690618][ T8385] ? netlink_getsockopt+0x590/0x590 [ 415.695842][ T8385] ? apparmor_socket_sendmsg+0x8e/0x330 [ 415.701499][ T8385] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 415.706808][ T8385] ? security_socket_sendmsg+0x80/0xa0 [ 415.712288][ T8385] ? netlink_getsockopt+0x590/0x590 [ 415.717501][ T8385] ____sys_sendmsg+0x61b/0x980 [ 415.722322][ T8385] ? __asan_memset+0x22/0x40 [ 415.727219][ T8385] ? __sys_sendmsg_sock+0x30/0x30 [ 415.732289][ T8385] ? __import_iovec+0x5f2/0x850 [ 415.737165][ T8385] ? import_iovec+0x73/0xa0 [ 415.741694][ T8385] ___sys_sendmsg+0x2a6/0x360 [ 415.746401][ T8385] ? __sys_sendmsg+0x2b0/0x2b0 [ 415.751226][ T8385] __se_sys_sendmsg+0x1d0/0x2c0 [ 415.756104][ T8385] ? __x64_sys_sendmsg+0x80/0x80 [ 415.761181][ T8385] ? lockdep_hardirqs_on+0x98/0x150 [ 415.766414][ T8385] do_syscall_64+0x55/0xb0 [ 415.770865][ T8385] ? clear_bhb_loop+0x40/0x90 [ 415.775566][ T8385] ? clear_bhb_loop+0x40/0x90 [ 415.780272][ T8385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.786234][ T8385] RIP: 0033:0x7fd93f79de99 [ 415.790698][ T8385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.810341][ T8385] RSP: 002b:00007fd94063f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.818774][ T8385] RAX: ffffffffffffffda RBX: 00007fd93fa26180 RCX: 00007fd93f79de99 [ 415.826789][ T8385] RDX: 0000000004008010 RSI: 00002000000001c0 RDI: 000000000000000a [ 415.834778][ T8385] RBP: 00007fd93f833eaf R08: 0000000000000000 R09: 0000000000000000 [ 415.842778][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.850767][ T8385] R13: 00007fd93fa26218 R14: 00007fd93fa26180 R15: 00007ffc68be42e8 [ 415.858777][ T8385] [ 415.863084][ T8385] Mem-Info: [ 415.866328][ T8385] active_anon:13046 inactive_anon:0 isolated_anon:0 [ 415.866328][ T8385] active_file:18509 inactive_file:40071 isolated_file:0 [ 415.866328][ T8385] unevictable:768 dirty:139 writeback:0 [ 415.866328][ T8385] slab_reclaimable:10287 slab_unreclaimable:95138 [ 415.866328][ T8385] mapped:28320 shmem:8201 pagetables:736 [ 415.866328][ T8385] sec_pagetables:0 bounce:0 [ 415.866328][ T8385] kernel_misc_reclaimable:0 [ 415.866328][ T8385] free:1334329 free_pcp:11847 free_cma:0 [ 415.911687][ T8385] Node 0 active_anon:52316kB inactive_anon:0kB active_file:74036kB inactive_file:160092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113480kB dirty:584kB writeback:0kB shmem:31460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11792kB pagetables:3008kB sec_pagetables:0kB all_unreclaimable? no [ 415.944134][ T8385] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 415.974836][ T8385] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.002084][ T8385] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 416.007941][ T8385] Node 0 DMA32 free:1426904kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:52976kB inactive_anon:0kB active_file:74036kB inactive_file:159272kB unevictable:1536kB writepending:584kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:28164kB local_pcp:16584kB free_cma:0kB [ 416.038557][ T8385] lowmem_reserve[]: 0 0 0 0 0 [ 416.043337][ T8385] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 416.070734][ T8385] lowmem_reserve[]: 0 0 0 0 0 [ 416.075496][ T8385] Node 1 Normal free:3894044kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19640kB local_pcp:11480kB free_cma:0kB [ 416.105443][ T8385] lowmem_reserve[]: 0 0 0 0 0 [ 416.110275][ T8385] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 416.123060][ T8385] Node 0 DMA32: 209*4kB (UE) 335*8kB (UE) 356*16kB (UME) 1609*32kB (UME) 561*64kB (UME) 105*128kB (UME) 111*256kB (UME) 40*512kB (UM) 26*1024kB (UM) 12*2048kB (M) 297*4096kB (M) = 1426652kB [ 416.142050][ T8385] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 416.154086][ T8385] Node 1 Normal: 155*4kB (UM) 46*8kB (UME) 36*16kB (UME) 58*32kB (UME) 19*64kB (UE) 4*128kB (UME) 1*256kB (E) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894044kB [ 416.171865][ T8385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.181479][ T8385] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.190847][ T8385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.200450][ T8385] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.209829][ T8385] 67179 total pagecache pages [ 416.214530][ T8385] 0 pages in swap cache [ 416.218770][ T8385] Free swap = 124464kB [ 416.222948][ T8385] Total swap = 124996kB [ 416.227189][ T8385] 2097051 pages RAM [ 416.231025][ T8385] 0 pages HighMem/MovableOnly [ 416.235732][ T8385] 416955 pages reserved [ 416.239974][ T8385] 0 pages cma reserved [ 416.252865][ T8399] IPVS: using max 19 ests per chain, 45600 per kthread [ 416.529968][ T8404] netlink: 14 bytes leftover after parsing attributes in process `syz.3.631'. [ 417.142161][ T5086] Bluetooth: hci0: unexpected event for opcode 0x042c [ 417.152702][ T5086] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 419.381992][ T8428] net_ratelimit: 10 callbacks suppressed [ 419.382008][ T8428] sctp: failed to load transform for md5: -2 [ 419.855584][ T8432] ceph: No mds server is up or the cluster is laggy [ 419.864503][ T23] libceph: connect (1)[c::]:6789 error -22 [ 419.876955][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 423.976661][ T8490] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 426.554502][ T8507] loop2: detected capacity change from 0 to 512 [ 426.581477][ T8507] EXT4-fs: Ignoring removed orlov option [ 426.601946][ T8507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 426.708580][ T8507] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #16: comm syz.2.663: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 426.766708][ T8507] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.663: couldn't read orphan inode 16 (err -117) [ 426.797281][ T8507] EXT4-fs (loop2): 1 orphan inode deleted [ 426.812467][ T8507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.860591][ T5086] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 427.253705][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.741372][ T5086] Bluetooth: hci3: unexpected event for opcode 0x042c [ 427.748365][ T5086] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 428.960245][ T8534] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 436.477432][ T5086] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 438.532394][ T5086] Bluetooth: hci1: unexpected event for opcode 0x042c [ 438.546692][ T5086] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 440.037399][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.043865][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.191279][ T8651] sctp: failed to load transform for md5: -2 [ 441.330275][ T8650] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 441.339980][ T8650] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 441.350750][ T8650] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 441.365720][ T8650] syz.1.703 (8650) used greatest stack depth: 17944 bytes left [ 441.384922][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 441.384935][ T28] audit: type=1800 audit(1785303597.751:204): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.703" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 442.807413][ T5086] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 444.684481][ T8702] syz.0.713 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 452.134402][ T8789] loop1: detected capacity change from 0 to 2048 [ 452.149818][ T8789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.730043][ T5086] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 454.853033][ T8824] loop1: detected capacity change from 0 to 512 [ 455.061529][ T8829] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 455.096908][ T8829] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 455.244147][ T8824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.500880][ T8824] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.744392][ T5787] Bluetooth: hci2: hardware error 0x07 [ 457.580503][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.770187][ T5787] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 458.989686][ T5787] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 465.605109][ T5787] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 468.316867][ T8945] netlink: 'syz.3.776': attribute type 3 has an invalid length. [ 469.837447][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 470.220803][ T8969] loop2: detected capacity change from 0 to 512 [ 470.332606][ T8969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 470.452934][ T8969] ext4 filesystem being mounted at /192/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.499478][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 472.759056][ T5787] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 479.725927][ T9083] ubi: mtd0 is already attached to ubi16 [ 483.552612][ T9113] loop3: detected capacity change from 0 to 256 [ 483.701680][ T9113] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 487.974704][ T9145] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 488.090480][ T9145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.223129][ T9147] bond1: (slave veth3): Enslaving as an active interface with a down link [ 488.325436][ T9145] vlan2: entered allmulticast mode [ 488.353212][ T9145] veth0_to_bond: entered allmulticast mode [ 488.373365][ T9145] veth0_to_bond: entered promiscuous mode [ 488.383949][ T9145] veth0_to_bond: left promiscuous mode [ 488.391811][ T9145] bond1: (slave vlan2): making interface the new active one [ 488.400681][ T9145] veth0_to_bond: entered promiscuous mode [ 488.407398][ T9145] vlan2: entered promiscuous mode [ 488.413031][ T9145] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 488.496399][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 488.676547][ T9] usb 3-1: device descriptor read/64, error -71 [ 489.046385][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 489.890152][ T9] usb 3-1: device descriptor read/64, error -71 [ 490.028514][ T9] usb usb3-port1: attempt power cycle [ 493.549257][ T9214] overlayfs: failed to clone upperpath [ 494.725784][ T9221] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 494.955876][ T23] libceph: connect (1)[c::]:6789 error -101 [ 494.962137][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 494.979620][ T9215] ceph: No mds server is up or the cluster is laggy [ 495.561583][ T9221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.586753][ T27] libceph: connect (1)[c::]:6789 error -101 [ 495.602196][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 495.757501][ T9228] bond2: (slave veth3): Enslaving as an active interface with a down link [ 495.834326][ T9230] vlan2: entered allmulticast mode [ 495.871785][ T9230] veth0_to_bond: entered allmulticast mode [ 495.879037][ T9230] veth0_to_bond: entered promiscuous mode [ 495.885771][ T9230] veth0_to_bond: left promiscuous mode [ 495.895454][ T9230] bond2: (slave vlan2): making interface the new active one [ 495.904071][ T9230] veth0_to_bond: entered promiscuous mode [ 495.910920][ T9230] vlan2: entered promiscuous mode [ 495.918459][ T9230] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 496.059292][ T9221] NILFS (nbd2): device size too small [ 502.797935][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.804306][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.757994][ T9320] overlayfs: failed to clone lowerpath [ 509.096732][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 510.906146][ T9385] loop1: detected capacity change from 0 to 256 [ 510.949288][ T9385] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 513.009162][ T7019] vlan2: left promiscuous mode [ 514.086343][ T2968] vlan2: left promiscuous mode [ 518.549218][ T9449] UBIFS error (pid: 9449): cannot open "", error -22 [ 519.286946][ T9463] UBIFS error (pid: 9463): cannot open "", error -22 [ 523.421930][ T9492] loop1: detected capacity change from 0 to 512 [ 523.458591][ T9492] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 523.468014][ T9492] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 527.389959][ T5814] libceph: connect (1)[c::]:6789 error -22 [ 527.406558][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 527.509570][ T9521] ceph: No mds server is up or the cluster is laggy [ 539.721576][ T9632] UBIFS error (pid: 9632): cannot open "", error -22 [ 543.357408][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.979'. [ 552.596493][ T9714] syzkaller0: entered promiscuous mode [ 552.602199][ T9714] syzkaller0: entered allmulticast mode [ 557.662590][ T28] audit: type=1804 audit(1785303714.081:205): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1007" name="bus" dev="ramfs" ino=18142 res=1 errno=0 [ 558.135942][ T28] audit: type=1804 audit(1785303714.101:206): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1007" name="bus" dev="ramfs" ino=18142 res=1 errno=0 [ 563.197034][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.204177][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.918854][ T9853] xt_CT: No such helper "pptp" [ 570.198344][ T9861] tipc: Enabling of bearer rejected, failed to enable media [ 572.431224][ T9878] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1043'. [ 573.122576][ T9879] bridge2: entered promiscuous mode [ 573.167278][ T9879] bridge2: entered allmulticast mode [ 573.179594][ T9879] team0: Port device bridge2 added [ 573.420273][ T9879] bridge0: port 3(team0) entered blocking state [ 573.469565][ T9879] bridge0: port 3(team0) entered disabled state [ 573.548898][ T9879] team0: entered allmulticast mode [ 573.888214][ T9879] team_slave_0: entered allmulticast mode [ 574.185596][ T9879] team_slave_1: entered allmulticast mode [ 574.222870][ T9879] team0: entered promiscuous mode [ 574.243744][ T9879] team_slave_0: entered promiscuous mode [ 574.261270][ T9879] team_slave_1: entered promiscuous mode [ 574.311808][ T9879] bridge0: port 3(team0) entered blocking state [ 574.319097][ T9879] bridge0: port 3(team0) entered forwarding state [ 579.708390][ T9966] sctp: [Deprecated]: syz.1.1063 (pid 9966) Use of int in max_burst socket option. [ 579.708390][ T9966] Use struct sctp_assoc_value instead [ 580.909837][ T9991] overlayfs: missing 'lowerdir' [ 584.795388][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 584.811069][T10021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.819079][T10021] batadv0: mtu less than device minimum [ 584.839008][T10021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.851565][T10021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.863764][T10021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.875376][T10021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.887049][T10021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.899335][T10021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.910954][T10021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.922488][T10021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.933940][T10021] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 585.038268][T10021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.413196][T10079] netlink: 'syz.0.1096': attribute type 13 has an invalid length. [ 597.300059][T10114] C: renamed from team_slave_0 (while UP) [ 597.577734][T10114] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 597.585724][T10114] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1106'. [ 597.597535][T10114] net_ratelimit: 10 callbacks suppressed [ 597.597567][T10114] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 600.901909][T10137] tmpfs: Bad value for 'mpol' [ 604.518245][T10155] loop3: detected capacity change from 0 to 256 [ 604.613491][T10155] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 604.682082][T10155] syz.3.1117: attempt to access beyond end of device [ 604.682082][T10155] loop3: rw=0, sector=184, nr_sectors = 6591 limit=256 [ 604.708415][T10155] syz.3.1117: attempt to access beyond end of device [ 604.708415][T10155] loop3: rw=0, sector=6775, nr_sectors = 2048 limit=256 [ 604.735128][T10155] syz.3.1117: attempt to access beyond end of device [ 604.735128][T10155] loop3: rw=0, sector=8823, nr_sectors = 2048 limit=256 [ 604.772773][T10155] syz.3.1117: attempt to access beyond end of device [ 604.772773][T10155] loop3: rw=0, sector=10871, nr_sectors = 3888 limit=256 [ 604.810436][T10155] syz.3.1117: attempt to access beyond end of device [ 604.810436][T10155] loop3: rw=0, sector=14759, nr_sectors = 4112 limit=256 [ 604.848160][T10155] syz.3.1117: attempt to access beyond end of device [ 604.848160][T10155] loop3: rw=0, sector=18871, nr_sectors = 4112 limit=256 [ 604.902099][T10155] syz.3.1117: attempt to access beyond end of device [ 604.902099][T10155] loop3: rw=0, sector=22983, nr_sectors = 6880 limit=256 [ 604.933548][T10155] syz.3.1117: attempt to access beyond end of device [ 604.933548][T10155] loop3: rw=0, sector=29863, nr_sectors = 3080 limit=256 [ 604.985955][ T28] audit: type=1800 audit(1785303761.061:207): pid=10155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1117" name="file1" dev="loop3" ino=1048603 res=0 errno=0 [ 606.029492][T10164] overlayfs: failed to clone upperpath [ 606.629669][T10167] process 'syz.1.1112' launched './file0' with NULL argv: empty string added [ 610.943814][T10194] xt_CT: No such helper "pptp" [ 611.781930][T10200] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 611.796717][T10200] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 611.804929][T10200] udc dummy_udc.0: failed to start g1: -22 [ 611.826495][T10200] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 611.848113][T10200] UDC core: g1: couldn't find an available UDC or it's busy [ 612.113176][ T5086] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 612.967628][T10211] C: renamed from team_slave_0 (while UP) [ 613.380114][T10211] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 613.388179][T10211] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1130'. [ 613.462098][T10211] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 616.410503][T10242] bridge1: entered promiscuous mode [ 616.450431][T10242] bridge1: entered allmulticast mode [ 616.487963][T10242] team0: Port device bridge1 added [ 616.517499][T10243] bridge0: port 3(team0) entered blocking state [ 616.530504][T10243] bridge0: port 3(team0) entered disabled state [ 616.546335][T10243] team0: entered allmulticast mode [ 616.560857][T10243] team_slave_0: entered allmulticast mode [ 616.596225][T10243] team_slave_1: entered allmulticast mode [ 616.623915][T10243] team0: entered promiscuous mode [ 616.637832][T10243] team_slave_0: entered promiscuous mode [ 616.672038][T10243] team_slave_1: entered promiscuous mode [ 616.716905][T10243] bridge0: port 3(team0) entered blocking state [ 616.723417][T10243] bridge0: port 3(team0) entered forwarding state [ 616.908074][ T5086] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 618.618814][T10259] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 620.357324][ T5086] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 622.439342][T10300] C: renamed from team_slave_0 (while UP) [ 623.010759][T10300] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 623.018717][T10300] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1154'. [ 623.028316][T10300] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 623.421747][T10308] loop3: detected capacity change from 0 to 1024 [ 623.429829][T10308] EXT4-fs: Ignoring removed bh option [ 623.443063][T10308] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 623.851581][T10308] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 623.863204][T10308] System zones: 0-1, 3-12 [ 623.888583][T10308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.366942][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.373574][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.210800][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.958159][ T5086] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 631.821865][T10370] xt_l2tp: unknown flags: 17 [ 635.871678][T10397] pimreg: entered allmulticast mode [ 636.142547][T10398] pimreg: left allmulticast mode [ 637.770983][ T5086] Bluetooth: hci0: Malformed LE Event: 0x1b [ 650.608581][T10491] futex_wake_op: syz.0.1204 tries to shift op by 144; fix this program [ 655.983046][ T28] audit: type=1800 audit(1785303812.401:208): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1213" name="bus" dev="ramfs" ino=20541 res=0 errno=0 [ 656.955102][T10540] pimreg: entered allmulticast mode [ 657.009671][T10540] pimreg: left allmulticast mode [ 658.252339][T10553] syz.0.1221 (10553) used greatest stack depth: 17176 bytes left [ 663.253018][T10576] overlayfs: failed to clone upperpath [ 663.431463][T10582] loop2: detected capacity change from 0 to 1024 [ 668.406604][ T5086] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 668.406709][ T5086] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 668.414158][ T5086] Bluetooth: hci0: Malformed LE Event: 0x02 [ 670.124364][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'. [ 670.133561][T10626] netlink: 'syz.1.1240': attribute type 2 has an invalid length. [ 670.141765][T10626] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 671.811544][T10638] tipc: Enabling of bearer rejected, failed to enable media [ 675.143267][T10676] loop2: detected capacity change from 0 to 32768 [ 675.754879][T10676] (syz.2.1250,10676,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 675.771584][T10676] (syz.2.1250,10676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 675.970729][T10676] (syz.2.1250,10676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 675.987026][T10676] (syz.2.1250,10676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 676.004501][T10676] JBD2: Ignoring recovery information on journal [ 676.062868][T10676] (syz.2.1250,10676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 676.079028][T10676] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 676.093893][T10676] (syz.2.1250,10676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 676.126040][T10676] (syz.2.1250,10676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 676.197215][T10676] (syz.2.1250,10676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 676.220293][T10676] (syz.2.1250,10676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 676.234078][T10676] (syz.2.1250,10676,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 676.246980][T10676] (syz.2.1250,10676,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 676.256443][T10676] (syz.2.1250,10676,0):ocfs2_quota_read:201 ERROR: status = -5 [ 676.264067][T10676] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5 [ 676.273422][T10676] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 676.282920][T10676] (syz.2.1250,10676,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 676.292703][T10676] (syz.2.1250,10676,0):ocfs2_mknod:314 ERROR: status = -5 [ 676.300026][T10676] (syz.2.1250,10676,0):ocfs2_mknod:502 ERROR: status = -5 [ 676.307628][T10676] (syz.2.1250,10676,0):ocfs2_create:676 ERROR: status = -5 [ 676.433443][T10690] syzkaller0: entered promiscuous mode [ 676.445365][T10690] syzkaller0: entered allmulticast mode [ 676.687404][T10693] tipc: Enabled bearer , priority 0 [ 677.111496][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 678.109001][T10690] tipc: Resetting bearer [ 678.162000][T10689] tipc: Resetting bearer [ 678.415009][T10689] tipc: Disabling bearer [ 681.687722][T10732] 8021q: VLANs not supported on ip_vti0 [ 682.236684][T10741] bridge0: entered promiscuous mode [ 682.566017][T10741] vlan3: entered promiscuous mode [ 685.780815][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.787248][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.989470][T10779] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 685.989470][T10779] The task syz.1.1277 (10779) triggered the difference, watch for misbehavior. [ 693.971362][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 693.980385][T10853] IPv6: NLM_F_CREATE should be specified when creating new route [ 698.806363][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 707.985528][T10945] bridge0: entered promiscuous mode [ 707.991979][T10945] vlan3: entered promiscuous mode [ 708.485818][ T28] audit: type=1800 audit(1785303864.891:209): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1321" name="bus" dev="ramfs" ino=21063 res=0 errno=0 [ 709.270499][T10964] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 712.401143][T10983] dummy_hcd dummy_hcd.0: remove, state 4 [ 712.408500][T10983] usb usb1: USB disconnect, device number 1 [ 712.448700][T10983] dummy_hcd dummy_hcd.0: stopped [ 712.454914][T10983] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 713.022547][T10987] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.695311][T10868] Bluetooth: hci0: command 0x0406 tx timeout [ 718.066378][T10868] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 718.162894][T11041] ubi: mtd0 is already attached to ubi16 [ 718.594675][T11049] overlayfs: failed to clone upperpath [ 723.294875][T11088] netlink: 'syz.2.1363': attribute type 4 has an invalid length. [ 727.130824][T10868] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 727.810100][T11133] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 732.660051][T11178] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 733.264084][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 742.092387][T11256] netlink: 'syz.3.1410': attribute type 10 has an invalid length. [ 742.171781][T11256] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 742.257638][T11256] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 742.824975][T11256] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 745.289241][T10868] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 745.289330][T10868] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 745.900203][T10868] Bluetooth: hci3: Malformed LE Event: 0x02 [ 747.224618][T10868] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 748.929042][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.944996][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.951784][T10868] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 748.951821][T10868] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 748.958962][T10868] Bluetooth: hci0: Malformed LE Event: 0x02 [ 750.769602][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'. [ 753.507910][T11366] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 754.788435][T11369] netlink: 'syz.3.1438': attribute type 4 has an invalid length. [ 755.261509][ T23] IPVS: starting estimator thread 0... [ 755.267331][T11381] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.380882][T11382] IPVS: using max 21 ests per chain, 50400 per kthread [ 759.980825][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 763.067789][T11449] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 767.127768][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1471'. [ 773.356260][T11523] tipc: Enabling of bearer rejected, already enabled [ 774.653687][T11536] loop2: detected capacity change from 0 to 1024 [ 774.711193][T11536] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 774.711193][T11536] [ 774.801124][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 775.209832][ T8] IPVS: starting estimator thread 0... [ 775.220673][T11549] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.291722][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 775.300902][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 775.651175][T11550] IPVS: using max 20 ests per chain, 48000 per kthread [ 778.546998][T10868] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 778.547148][T10868] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 778.554544][T10868] Bluetooth: hci0: Malformed LE Event: 0x02 [ 779.916135][T11587] tipc: Enabling of bearer rejected, failed to enable media [ 780.364127][T10868] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 784.431976][T10868] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 784.439518][T10868] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 784.449291][T10868] Bluetooth: hci3: Malformed LE Event: 0x02 [ 785.237611][T11626] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.104837][T10868] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 786.574888][T11639] loop3: detected capacity change from 0 to 16 [ 787.831961][T11646] xt_hashlimit: max too large, truncated to 1048576 [ 791.827784][T11673] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11673] [ 792.100295][T10868] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 792.880464][T11682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 792.895484][T11682] IPv6: NLM_F_CREATE should be set when creating new route [ 792.903047][T11682] IPv6: NLM_F_CREATE should be set when creating new route [ 792.910454][T11682] IPv6: NLM_F_CREATE should be set when creating new route [ 793.542476][T11686] tipc: Enabling of bearer rejected, already enabled [ 795.144882][T11696] netlink: 'syz.3.1526': attribute type 1 has an invalid length. [ 795.455156][T11696] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 797.374804][T11715] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11715] [ 798.971269][T11730] tipc: Enabling of bearer rejected, already enabled [ 800.153925][ C0] hrtimer: interrupt took 51666 ns [ 804.756203][T11772] loop3: detected capacity change from 0 to 40427 [ 804.800380][T11772] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 804.808739][T11772] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 804.827247][T11772] F2FS-fs (loop3): invalid crc value [ 804.847624][T11772] F2FS-fs (loop3): Found nat_bits in checkpoint [ 804.924025][T11772] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 804.931284][T11772] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 805.330403][T11780] syz.3.1547: attempt to access beyond end of device [ 805.330403][T11780] loop3: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 808.974649][T11809] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 809.091640][T11806] loop2: detected capacity change from 0 to 1024 [ 810.814805][T11818] bridge1: entered promiscuous mode [ 813.124234][T11833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1564'. [ 813.343152][T10868] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 813.605535][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 813.636400][T11836] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1565'. [ 813.654693][T11838] overlayfs: missing 'lowerdir' [ 813.881918][T11844] loop2: detected capacity change from 0 to 512 [ 813.968486][T11844] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1567: corrupted inode contents [ 813.992705][T11844] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 814.132075][T11844] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1567: corrupted inode contents [ 814.251319][T11844] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.1567: mark_inode_dirty error [ 814.403818][T11844] EXT4-fs (loop2): 1 orphan inode deleted [ 814.589074][T11844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.650039][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.675421][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.930340][T11852] bridge0: port 4(syz_tun) entered blocking state [ 814.937231][T11852] bridge0: port 4(syz_tun) entered disabled state [ 814.950092][T11852] syz_tun: entered promiscuous mode [ 815.081877][T11852] bridge0: port 4(syz_tun) entered blocking state [ 815.088541][T11852] bridge0: port 4(syz_tun) entered forwarding state [ 815.376675][T11860] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 816.329947][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.076883][T11870] loop3: detected capacity change from 0 to 2048 [ 817.903066][ T28] audit: type=1326 audit(1785303967.342:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 817.973275][T11870] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 818.023297][ T28] audit: type=1326 audit(1785303967.351:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 818.482226][ T28] audit: type=1326 audit(1785303967.351:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 818.622082][ T28] audit: type=1326 audit(1785303967.351:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 818.648754][ T28] audit: type=1326 audit(1785303967.351:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 818.803434][ T28] audit: type=1326 audit(1785303967.351:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 818.828875][ T28] audit: type=1326 audit(1785303967.351:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 818.858113][ T28] audit: type=1326 audit(1785303967.351:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 818.884240][ T28] audit: type=1326 audit(1785303967.351:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 819.613374][ T28] audit: type=1326 audit(1785303967.351:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.3.1574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb9de99 code=0x7ffc0000 [ 823.587649][T11914] loop3: detected capacity change from 0 to 2048 [ 823.725739][T11914] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 825.648652][T11939] capability: warning: `syz.2.1592' uses deprecated v2 capabilities in a way that may be insecure [ 829.704577][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 829.713927][T11979] team0: left allmulticast mode [ 829.718874][T11979] C: left allmulticast mode [ 829.723561][T11979] team_slave_1: left allmulticast mode [ 829.729187][T11979] team0: left promiscuous mode [ 829.734113][T11979] C: left promiscuous mode [ 829.739429][T11979] team_slave_1: left promiscuous mode [ 829.748251][T11979] bridge0: port 3(team0) entered disabled state [ 830.283402][T11979] bridge_slave_1: left allmulticast mode [ 830.289287][T11979] bridge_slave_1: left promiscuous mode [ 830.295971][T11979] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.314096][T11979] bridge_slave_0: left allmulticast mode [ 830.319836][T11979] bridge_slave_0: left promiscuous mode [ 830.326765][T11979] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.211681][T11993] loop2: detected capacity change from 0 to 512 [ 832.358842][T11993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.405956][T11993] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.190883][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 833.190924][ T28] audit: type=1107 audit(1785303982.165:254): pid=11992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 833.483017][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.787845][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 833.852128][T12009] tipc: Enabling of bearer rejected, already enabled [ 836.991315][T12040] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 838.003117][T12056] tipc: Enabled bearer , priority 10 [ 838.027287][T12058] loop3: detected capacity change from 0 to 1024 [ 838.096168][T12058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 838.131609][T12058] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.792596][T12061] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 838.957092][T12069] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.1629: Freeing blocks not in datazone - block = 0, count = 16 [ 839.586217][ T5823] tipc: Node number set to 2381137276 [ 839.674774][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 843.264090][T12094] wg1: entered promiscuous mode [ 843.268981][T12094] wg1: entered allmulticast mode [ 845.761601][T12112] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 847.440215][T12128] xt_TPROXY: Can be used only with -p tcp or -p udp [ 848.679514][T12144] loop3: detected capacity change from 0 to 8 [ 848.907565][T11526] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 860.830753][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 862.032928][T12268] loop2: detected capacity change from 0 to 4096 [ 862.372908][T12268] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 864.729578][T12268] ntfs3: loop2: Failed to read $AttrDef (-4). [ 875.559348][ T5086] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 875.559436][ T5086] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 875.567580][ T5086] Bluetooth: hci1: Malformed LE Event: 0x02 [ 879.502207][T12395] loop2: detected capacity change from 0 to 1024 [ 880.241512][T12398] tipc: Enabling of bearer rejected, already enabled [ 880.306056][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.312556][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.220001][T12405] gfs2: gfs2 mount does not exist [ 881.292529][T12419] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1739'. [ 882.968458][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 883.659873][T12440] lo speed is unknown, defaulting to 1000 [ 886.970849][T12466] 9pnet_fd: Insufficient options for proto=fd [ 890.015445][T12476] loop3: detected capacity change from 0 to 2048 [ 890.043106][T12476] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 891.041665][T12487] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 893.150845][T12506] capability: warning: `syz.1.1763' uses 32-bit capabilities (legacy support in use) [ 894.079813][T12509] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 894.561502][T12519] 9pnet_fd: Insufficient options for proto=fd [ 894.736283][T12519] netlink: 'syz.1.1766': attribute type 10 has an invalid length. [ 894.761320][T12519] team0: Port device netdevsim0 added [ 899.901536][T12547] gfs2: gfs2 mount does not exist [ 902.594820][T12570] loop2: detected capacity change from 0 to 128 [ 902.838920][T12570] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 902.851809][T12570] ext4 filesystem being mounted at /418/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 906.915705][T12593] loop3: detected capacity change from 0 to 64 [ 907.924703][ T5086] Bluetooth: hci0: unexpected event for opcode 0x042c [ 908.008451][ T28] audit: type=1800 audit(1785304052.486:255): pid=12593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1782" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 909.209323][T12603] gfs2: gfs2 mount does not exist [ 909.501973][ T5780] hfs: node 4:3 still has 1 user(s)! [ 910.432669][T12611] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 910.559904][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 910.794513][T12621] tipc: Enabling of bearer rejected, already enabled [ 912.490433][T12638] SET target dimension over the limit! [ 916.182870][ T28] audit: type=1326 audit(1785304059.380:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 916.208586][ T28] audit: type=1326 audit(1785304059.380:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 916.498210][ T28] audit: type=1326 audit(1785304059.464:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 916.566419][ T28] audit: type=1326 audit(1785304059.464:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 916.829788][ T28] audit: type=1326 audit(1785304059.464:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 917.299069][T12674] tipc: Enabling of bearer rejected, already enabled [ 917.318325][ T28] audit: type=1326 audit(1785304059.464:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 917.342928][ T28] audit: type=1326 audit(1785304059.464:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 917.417770][ T28] audit: type=1326 audit(1785304059.473:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 917.714711][ T28] audit: type=1326 audit(1785304059.473:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 918.707117][ T28] audit: type=1326 audit(1785304059.473:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.1803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb39de99 code=0x7ffc0000 [ 919.205833][T12693] tipc: Started in network mode [ 919.210774][T12693] tipc: Node identity 4, cluster identity 4711 [ 919.217462][T12693] tipc: Node number set to 4 [ 922.492014][T12711] tipc: Enabling of bearer rejected, already enabled [ 923.822673][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 924.712987][T12730] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1819'. [ 926.399773][T12741] loop3: detected capacity change from 0 to 32768 [ 926.452823][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1824'. [ 926.485761][T12741] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 926.514839][T12741] XFS (loop3): Ending clean mount [ 926.590181][T12741] XFS (loop3): Quotacheck needed: Please wait. [ 927.140927][T12741] XFS (loop3): Quotacheck: Done. [ 927.725382][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 927.725399][ T28] audit: type=1800 audit(1785304070.923:279): pid=12768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1823" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 928.498051][ T5780] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 928.527437][T12767] tipc: Enabling of bearer rejected, already enabled [ 929.584246][ T5086] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 930.056710][T12785] loop2: detected capacity change from 0 to 128 [ 930.246225][T12785] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 930.484280][T12785] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.837092][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 931.853284][T12807] tipc: Enabling of bearer rejected, already enabled [ 936.661759][T12844] tipc: Enabling of bearer rejected, already enabled [ 939.775379][ T5086] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 939.775427][ T5086] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 939.782662][ T5086] Bluetooth: hci0: Malformed LE Event: 0x02 [ 942.787153][T12898] loop2: detected capacity change from 0 to 16 [ 942.841070][T12898] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 943.322277][T12899] gfs2: gfs2 mount does not exist [ 943.633828][T12903] loop2: detected capacity change from 0 to 128 [ 943.662817][T12903] ext4: Unknown parameter 'fsmagic' [ 944.021171][T12903] loop2: detected capacity change from 0 to 4096 [ 944.030012][T12903] EXT4-fs: Ignoring removed mblk_io_submit option [ 944.594994][T12917] fuse: Bad value for 'fd' [ 944.864944][T12903] EXT4-fs (loop2): Test dummy encryption mode enabled [ 944.929555][T12903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.450725][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.465775][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 946.473771][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 947.764242][T12939] gfs2: gfs2 mount does not exist [ 947.878837][ T5086] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 949.365232][T12968] : renamed from bond_slave_0 (while UP) [ 950.501369][T12970] tty tty2: ldisc open failed (-12), clearing slot 1 [ 950.528604][ T28] audit: type=1326 audit(1785304090.816:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 950.605621][ T28] audit: type=1326 audit(1785304090.816:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 950.642509][ T28] audit: type=1326 audit(1785304090.816:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 950.752387][T12975] loop3: detected capacity change from 0 to 128 [ 950.780005][ T28] audit: type=1326 audit(1785304090.816:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 950.850428][ T28] audit: type=1326 audit(1785304090.816:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 950.891137][ T28] audit: type=1326 audit(1785304090.816:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 951.414346][ T28] audit: type=1326 audit(1785304090.816:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 951.783167][T12975] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 951.795984][ T28] audit: type=1326 audit(1785304090.816:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.1883" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0192d9de99 code=0x7ffc0000 [ 951.918458][T12975] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.175351][T12999] tipc: Enabling of bearer rejected, already enabled [ 953.202288][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 956.758829][T13031] tipc: Enabling of bearer rejected, already enabled [ 959.926464][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 962.348718][T13063] netlink: 'syz.1.1913': attribute type 11 has an invalid length. [ 962.801893][T13071] tipc: Enabling of bearer rejected, already enabled [ 970.766742][T13126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 970.772719][T13126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 970.820104][T13126] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 970.826089][T13126] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 970.861007][T13126] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 974.075505][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 974.081645][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 974.087645][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 976.299123][T10868] Bluetooth: hci1: command 0x0406 tx timeout [ 976.305693][T10868] Bluetooth: hci0: command 0x0406 tx timeout [ 977.213032][T13186] xt_TPROXY: Can be used only with -p tcp or -p udp [ 981.345654][T13215] loop2: detected capacity change from 0 to 4096 [ 981.364065][T13215] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 983.431879][T13215] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 987.246346][T13248] overlayfs: failed to clone upperpath [ 989.472465][T13256] loop3: detected capacity change from 0 to 2048 [ 989.595878][T13261] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 990.688397][T13256] xt_TPROXY: Can be used only with -p tcp or -p udp [ 991.492914][T13261] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 991.546191][T13261] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 991.609491][T13261] Remounting filesystem read-only [ 991.629490][ T7015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 991.645860][ T7015] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 991.653201][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 991.675426][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 991.698230][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 991.714268][ T7015] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 991.736507][ T7015] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 991.748507][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 991.768896][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 991.791508][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 991.816251][ T7015] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 991.823084][ T7015] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 991.852165][ T7015] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 991.953753][ T7015] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 991.972067][ T7015] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 992.051492][ T7015] NILFS (loop3): discard dirty page: offset=4096, ino=18 [ 992.077849][ T7015] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 992.107004][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 992.135558][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 992.144543][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 992.153571][ T7015] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 992.162528][ T7015] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 992.169900][ T7015] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 992.177210][ T7015] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 992.184978][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.325672][ T7015] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 993.334718][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.343750][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.355681][ T7015] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 993.363088][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.373045][ T7015] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 993.382409][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.391985][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.451429][ T7015] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 993.458767][ T7015] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.494749][ T5780] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 993.506823][T13288] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 993.523315][ T5780] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 993.532399][ T5780] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 993.540205][ T5780] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 993.596237][ T5780] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 993.660573][ T5780] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 993.672594][ T5780] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 993.679443][ T5780] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 993.686804][ T5780] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.695691][ T5780] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.704871][ T5780] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.714292][ T5780] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 993.722304][ T5780] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 993.737965][ T5780] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.772191][ T5780] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 993.829727][ T5780] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 995.659919][T13306] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 995.671699][T13306] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 995.680141][T13306] CPU: 0 PID: 13306 Comm: syz.3.1979 Not tainted syzkaller #0 [ 995.687713][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 995.697790][T13306] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 995.703812][T13306] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f ad 25 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 06 ad 25 fb 41 be 78 12 00 00 4d [ 995.723485][T13306] RSP: 0018:ffffc9000c1477e0 EFLAGS: 00010246 [ 995.729618][T13306] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 995.737625][T13306] RDX: ffff88802d628000 RSI: 0000000000000003 RDI: 0000000000000005 [ 995.745623][T13306] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 995.753630][T13306] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 995.761612][T13306] R13: ffff88802277e530 R14: ffff888142fb9280 R15: 0000000000000000 [ 995.769595][T13306] FS: 00007f1ebca566c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 995.778543][T13306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 995.785144][T13306] CR2: 00007ff0fb627dac CR3: 0000000075d56000 CR4: 00000000003506f0 [ 995.793129][T13306] Call Trace: [ 995.796445][T13306] [ 995.799394][T13306] ? dummy_wakeup+0x270/0x270 [ 995.804098][T13306] usb_gadget_set_selfpowered+0x6e/0x230 [ 995.809755][T13306] composite_dev_prepare+0x2fa/0x320 [ 995.815145][T13306] configfs_composite_bind+0xa1/0x13f0 [ 995.820625][T13306] ? kernfs_put+0x309/0x360 [ 995.825146][T13306] ? webusb_landingPage_store+0x1c0/0x1c0 [ 995.830873][T13306] gadget_bind_driver+0x2b3/0x770 [ 995.835922][T13306] ? gadget_match_driver+0x130/0x130 [ 995.841227][T13306] really_probe+0x247/0xae0 [ 995.845761][T13306] ? pm_runtime_barrier+0x14b/0x1c0 [ 995.850998][T13306] __driver_probe_device+0x1f5/0x390 [ 995.856304][T13306] driver_probe_device+0x4f/0x420 [ 995.861362][T13306] __driver_attach+0x444/0x6d0 [ 995.866150][T13306] bus_for_each_dev+0x235/0x2b0 [ 995.871027][T13306] ? driver_attach+0x50/0x50 [ 995.875643][T13306] ? bus_remove_file+0x140/0x140 [ 995.880606][T13306] ? do_raw_spin_unlock+0x121/0x230 [ 995.885828][T13306] bus_add_driver+0x340/0x630 [ 995.890641][T13306] driver_register+0x23a/0x310 [ 995.895417][T13306] usb_gadget_register_driver_owner+0xf9/0x270 [ 995.901592][T13306] gadget_dev_desc_UDC_store+0x1c7/0x2e0 [ 995.907395][T13306] configfs_write_iter+0x312/0x400 [ 995.912521][T13306] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 995.918085][T13306] vfs_write+0x474/0x9a0 [ 995.922356][T13306] ? file_end_write+0x250/0x250 [ 995.927221][T13306] ? __fget_files+0x3fc/0x460 [ 995.931925][T13306] ? __fdget_pos+0x2a3/0x330 [ 995.936540][T13306] ? ksys_write+0x74/0x260 [ 995.940984][T13306] ksys_write+0x151/0x260 [ 995.945373][T13306] ? __ia32_sys_read+0x90/0x90 [ 995.950164][T13306] ? lockdep_hardirqs_on+0x98/0x150 [ 995.955386][T13306] do_syscall_64+0x55/0xb0 [ 995.959944][T13306] ? clear_bhb_loop+0x40/0x90 [ 995.964657][T13306] ? clear_bhb_loop+0x40/0x90 [ 995.969357][T13306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 995.975271][T13306] RIP: 0033:0x7f1ebbb9de99 [ 995.979708][T13306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.999338][T13306] RSP: 002b:00007f1ebca56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 996.007767][T13306] RAX: ffffffffffffffda RBX: 00007f1ebbe25fa0 RCX: 00007f1ebbb9de99 [ 996.015769][T13306] RDX: 000000000000000c RSI: 0000200000000680 RDI: 0000000000000004 [ 996.023772][T13306] RBP: 00007f1ebbc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 996.031753][T13306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.039732][T13306] R13: 00007f1ebbe26038 R14: 00007f1ebbe25fa0 R15: 00007ffcf348f848 [ 996.047724][T13306] [ 996.050766][T13306] Modules linked in: [ 996.064550][T13306] ---[ end trace 0000000000000000 ]--- [ 996.070100][T13306] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 996.077016][T13306] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f ad 25 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 06 ad 25 fb 41 be 78 12 00 00 4d [ 996.102817][T13306] RSP: 0018:ffffc9000c1477e0 EFLAGS: 00010246 [ 996.109333][T13306] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 996.119042][T13306] RDX: ffff88802d628000 RSI: 0000000000000003 RDI: 0000000000000005 [ 996.130404][T13306] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 996.139958][T13306] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 996.148623][T13306] R13: ffff88802277e530 R14: ffff888142fb9280 R15: 0000000000000000 [ 996.169906][T13306] FS: 00007f1ebca566c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 996.222420][T13306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 996.236067][T13306] CR2: 000000110c2a016c CR3: 0000000075d56000 CR4: 00000000003506e0 [ 996.260702][T13306] Kernel panic - not syncing: Fatal exception [ 996.267466][T13306] Kernel Offset: disabled [ 996.271797][T13306] Rebooting in 86400 seconds..