last executing test programs: 17m29.036102745s ago: executing program 2 (id=292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 17m27.147838471s ago: executing program 2 (id=295): semtimedop(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17m24.71747313s ago: executing program 2 (id=299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0x5ab7, &(0x7f0000000180)={0x0, 0xe14c, 0x0, 0x3, 0x299}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000010", @ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="05000a000000000008000400010000"], 0x2c}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) 17m23.508321069s ago: executing program 2 (id=302): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02"], 0x20) read$msr(r1, 0x0, 0x0) r2 = io_uring_setup(0x5ab7, &(0x7f0000000180)={0x0, 0xe14c, 0x0, 0x3, 0x299}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000010", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) 17m17.725744949s ago: executing program 2 (id=311): connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'geneve0\x00', 0x6}, 0x18) 17m17.22414592s ago: executing program 2 (id=315): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) sched_setparam(r0, &(0x7f00000006c0)=0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d267300", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) 17m1.504110861s ago: executing program 32 (id=315): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) sched_setparam(r0, &(0x7f00000006c0)=0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d267300", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) 10m18.930311652s ago: executing program 1 (id=1053): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) listen(r6, 0xffffffff) getsockopt$inet_tcp_int(r5, 0x6, 0x4, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) lseek(r7, 0x4692bd86, 0x3) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x4, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000140)={0x1, @pix={0xffffffff, 0x0, 0x34565348, 0x7, 0x0, 0x0, 0x9, 0xfeedcafe, 0xe7, 0xffffff80}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r9, 0x400, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000003100)=0x15, 0x4) 10m17.77809701s ago: executing program 1 (id=1056): r0 = io_uring_setup(0xe67, &(0x7f0000000000)={0x0, 0xa14a, 0x40, 0x2, 0x3bd}) r1 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x8000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {0x0}], 0x3}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 10m16.482889062s ago: executing program 1 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) socket(0x2, 0xa, 0x300) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r5, 0xa, 0x21) fcntl$setlease(r5, 0x400, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, 0x0}, 0x94) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x40) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 10m14.788570792s ago: executing program 1 (id=1062): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), &(0x7f00000004c0)}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x40047452, &(0x7f0000000380)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 10m12.020517209s ago: executing program 1 (id=1068): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x2, 0x3, 0xff) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x3c}}, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052a", 0xe, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) 10m6.820295715s ago: executing program 1 (id=1078): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone3(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0x70000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x10}, {0x6000, 0xd000, 0xc, 0xb, 0x0, 0x3, 0x6, 0xb2, 0x8, 0x7, 0x0, 0xf1}, {0x3000, 0x0, 0x9, 0x0, 0x7, 0x4, 0x4, 0x0, 0x3, 0x0, 0xfd}, {0x3000, 0x41000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xddddf000, 0xd000, 0xd, 0x0, 0xff, 0x4, 0x6, 0xe, 0x1, 0x3c, 0x80}, {0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x1, 0x0, 0x0, 0x80}, {0x7000, 0x0, 0xd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x8}, {0x4000}, {0xdddd1000, 0xff}, 0x0, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0x6800, 0x0, [0x4, 0x3, 0x1]}) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r6) close(0x4) socket(0x6, 0x5, 0x1) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r8, 0x0, 0x2f, 0x0, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) 9m51.990173623s ago: executing program 33 (id=1078): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone3(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0x70000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x10}, {0x6000, 0xd000, 0xc, 0xb, 0x0, 0x3, 0x6, 0xb2, 0x8, 0x7, 0x0, 0xf1}, {0x3000, 0x0, 0x9, 0x0, 0x7, 0x4, 0x4, 0x0, 0x3, 0x0, 0xfd}, {0x3000, 0x41000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xddddf000, 0xd000, 0xd, 0x0, 0xff, 0x4, 0x6, 0xe, 0x1, 0x3c, 0x80}, {0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x1, 0x0, 0x0, 0x80}, {0x7000, 0x0, 0xd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x8}, {0x4000}, {0xdddd1000, 0xff}, 0x0, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0x6800, 0x0, [0x4, 0x3, 0x1]}) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r6) close(0x4) socket(0x6, 0x5, 0x1) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r8, 0x0, 0x2f, 0x0, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) 5.199873377s ago: executing program 6 (id=3914): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x100, 0x404300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7}, 0x14) 5.032983001s ago: executing program 6 (id=3918): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x482, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = signalfd4(r4, &(0x7f0000000140)={[0x7ff]}, 0x8, 0x80000) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x9, 0x3, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x3, 0x8, 0x81, 0x4, 0x5, 0x66, "c2383605"}, 0x1, 0x4, {&(0x7f0000000680)=[{0x9, 0x1, {r7}, 0x7}, {0x3, 0x81, {}, 0x2}]}, 0x7f}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) 4.967797462s ago: executing program 4 (id=3920): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000001700000008000300", @ANYRES32=r2], 0x54}}, 0x0) 4.843161535s ago: executing program 4 (id=3922): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x2, 0x5, 'syz1\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_usb_connect(0x6, 0xffffffffffffff7d, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r5, 0xe04, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0xc, 0x0, @l2={'ib', 0x3a, 'team_slave_1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) ioctl$SG_BLKTRACESTART(r6, 0x1274, 0x0) 4.613957581s ago: executing program 0 (id=3924): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f0000009e40), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000026c0)='\\', 0x1) 3.653442604s ago: executing program 0 (id=3925): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)={0x3, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x1, 0x101, 0x6, 0x8000, 0x27, 0x7, 0x9}]}) 3.620966944s ago: executing program 6 (id=3926): r0 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x8000) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.411878269s ago: executing program 0 (id=3928): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000a40)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRES64=r2, @ANYRESOCT=r1, @ANYRES64=0x0, @ANYRESOCT=r3], 0xc1, 0x14ff, &(0x7f00000082c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 3.411252109s ago: executing program 3 (id=3929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x28a, 0x0, 0x7fffffffffffffff}]}) 2.628166888s ago: executing program 6 (id=3930): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885f", 0x2}], 0x1}}], 0x1, 0x24008001) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x18000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(r8, r8, 0xee01) write$FUSE_CREATE_OPEN(r6, &(0x7f0000002640)={0xa0, 0x0, 0x0, {{0x2, 0x3, 0x4, 0xffffffff, 0x4, 0x9, {0x8, 0xf4, 0x659d, 0x3ff, 0x40, 0xffffffff80000000, 0x5, 0x7, 0xd90, 0x2000, 0x9, r8, 0x0, 0x5, 0xfffffffb}}, {0x0, 0x11}}}, 0xa0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x136) 2.627916608s ago: executing program 3 (id=3931): r0 = io_uring_setup(0xe67, &(0x7f0000000000)={0x0, 0xa14a, 0x40, 0x2, 0x3bd}) r1 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x8000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x2, 0x40000102, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.614907408s ago: executing program 4 (id=3932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0xc1, 0x0, 0x0}) 2.572514179s ago: executing program 0 (id=3933): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.51230521s ago: executing program 5 (id=3934): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket(0x2, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) 2.455286752s ago: executing program 4 (id=3935): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x3, 0xc6b, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) write$P9_RREADDIR(r0, &(0x7f0000000280)={0xb, 0x29, 0x1, {0x6}}, 0xb) 2.397663423s ago: executing program 0 (id=3936): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x482, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = signalfd4(r4, &(0x7f0000000140)={[0x7ff]}, 0x8, 0x80000) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x9, 0x3, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x3, 0x8, 0x81, 0x4, 0x5, 0x66, "c2383605"}, 0x1, 0x4, {&(0x7f0000000680)=[{0x9, 0x1, {r7}, 0x7}, {0x3, 0x81, {}, 0x2}]}, 0x7f}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) 2.053100761s ago: executing program 5 (id=3937): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}}, 0x0) 1.593586662s ago: executing program 3 (id=3938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x3, 0x0, [{0x1, 0x3, 0x7, 0x4, 0x1ff}, {0xd, 0x9f, 0x0, 0x2, 0x58}, {0x80000000, 0xfffff000, 0x48b, 0x5, 0x5}]}) 1.533996824s ago: executing program 4 (id=3939): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.488075855s ago: executing program 3 (id=3940): r0 = io_uring_setup(0xe67, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x8000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.463508765s ago: executing program 5 (id=3941): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) recvmsg(r1, &(0x7f00000012c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x10023) 717.227863ms ago: executing program 4 (id=3942): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x2, 0x5, 'syz1\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_usb_connect(0x6, 0xffffffffffffff7d, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r5, 0xe04, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0xc, 0x0, @l2={'ib', 0x3a, 'team_slave_1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) ioctl$SG_BLKTRACESTART(r6, 0x1274, 0x0) 628.354155ms ago: executing program 0 (id=3943): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc714, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0x1, 0x18, {0x18, 0x21, "3e93a392952907ea9da927c26fc35e61ba32b6df2886"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 592.393036ms ago: executing program 3 (id=3944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000002, 0x0, 0x7}]}) 488.886998ms ago: executing program 6 (id=3945): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 424.22238ms ago: executing program 3 (id=3946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) socket(0x2, 0xa, 0x300) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r5, 0xa, 0x21) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r5, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, 0x0}, 0x94) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x40) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 417.05312ms ago: executing program 5 (id=3947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000092, 0x0, 0x6}]}) 395.790161ms ago: executing program 6 (id=3948): r0 = io_uring_setup(0xe67, &(0x7f0000000000)={0x0, 0xa14a, 0x40, 0x2, 0x3bd}) r1 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x8000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 362.204502ms ago: executing program 5 (id=3949): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f00000002c0)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc6f6322cbfac4973cf2be3f656d8f63", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4002}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 0s ago: executing program 5 (id=3950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) kernel console output (not intermixed with test programs): parsing attributes in process `syz.4.1200'. [ 751.529600][ T9837] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.1199: corrupted xattr entries [ 751.672450][ T9335] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.686020][ T9837] EXT4-fs (loop3): Remounting filesystem read-only [ 751.718708][ T9837] EXT4-fs (loop3): 1 truncate cleaned up [ 751.784292][ T9837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 752.757046][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 753.101630][ T9203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.141351][ T9203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.323452][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 753.477967][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'. [ 755.634220][ T9864] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 756.885491][ T9875] loop5: detected capacity change from 0 to 8192 [ 757.101695][ T9875] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 757.184877][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1211'. [ 757.871137][ T9875] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 758.300725][ T9875] REISERFS (device loop5): using ordered data mode [ 758.366292][ T9875] reiserfs: using flush barriers [ 758.431812][ T9875] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 758.472710][ T9337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 758.502982][ T9337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 758.541097][ T9875] REISERFS (device loop5): checking transaction log (loop5) [ 758.926174][ T9914] using random self ethernet address [ 758.932145][ T9914] using random host ethernet address [ 759.248615][ T26] audit: type=1800 audit(1789054538.504:815): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1213" name="host_addr" dev="configfs" ino=52331 res=0 errno=0 [ 759.272034][ T9337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 759.280074][ T9337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.287818][ T9337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 759.295264][ T9337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 759.367521][ T9912] Bluetooth: MGMT ver 1.22 [ 759.380251][ T9875] REISERFS (device loop5): Using r5 hash to sort names [ 759.511363][ T9875] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 759.607411][ T9917] Cannot find del_set index 4 as target [ 759.994398][ T9917] overlayfs: conflicting options: nfs_export=on,index=off [ 760.809988][ T9927] x_tables: duplicate underflow at hook 3 [ 760.826940][ T9927] blktrace: Concurrent blktraces are not allowed on sg0 [ 761.370805][ T9337] Bluetooth: hci3: command 0x0409 tx timeout [ 762.876725][ T9211] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.741660][ T9337] Bluetooth: hci3: command 0x041b tx timeout [ 764.891644][ T9211] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.939228][ T9945] device dummy0 entered promiscuous mode [ 765.013111][ T9948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1220'. [ 765.060655][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 765.141700][ T9953] loop3: detected capacity change from 0 to 512 [ 765.148857][ T9953] EXT4-fs: Ignoring removed orlov option [ 765.184496][ T9953] ext4: Bad value for 'data' [ 765.225408][ T9211] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.457360][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1223'. [ 765.832362][ T9337] Bluetooth: hci3: command 0x040f tx timeout [ 766.201551][ T9211] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.241179][ T9964] loop5: detected capacity change from 0 to 1024 [ 766.266938][ T9964] hfsplus: unable to parse mount options [ 766.663792][ T9972] loop5: detected capacity change from 0 to 16 [ 766.677038][ T9972] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 767.227904][ T9966] loop4: detected capacity change from 0 to 8192 [ 767.249266][ T9972] cramfs: root is not a directory [ 767.267603][ T9902] chnl_net:caif_netlink_parms(): no params data found [ 767.280534][ T8626] udevd[8626]: incorrect cramfs checksum on /dev/loop5 [ 767.301696][ T9966] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 767.351381][ T9966] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 767.487691][ T9966] REISERFS (device loop4): using ordered data mode [ 767.532022][ T9966] reiserfs: using flush barriers [ 767.549852][ T9966] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 767.581484][ T9966] REISERFS (device loop4): checking transaction log (loop4) [ 767.608646][ T9966] REISERFS (device loop4): Using r5 hash to sort names [ 767.694220][ T9981] x_tables: duplicate underflow at hook 3 [ 767.725935][ T9981] blktrace: Concurrent blktraces are not allowed on sg0 [ 767.770204][ T9966] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 767.850600][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 769.606762][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.621280][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.797695][ T9902] device bridge_slave_0 entered promiscuous mode [ 769.835482][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.885094][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.903856][ T9902] device bridge_slave_1 entered promiscuous mode [ 770.712055][T10002] Cannot find add_set index 0 as target [ 770.908903][T10003] overlayfs: conflicting options: nfs_export=on,index=off [ 771.173998][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.332384][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.396746][ T9902] team0: Port device team_slave_0 added [ 772.421706][ T9902] team0: Port device team_slave_1 added [ 772.762120][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.776947][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.555244][ T9902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.880375][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 774.625446][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.815819][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.860796][ T9902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.921438][T10037] loop5: detected capacity change from 0 to 8192 [ 774.945349][T10045] loop4: detected capacity change from 0 to 512 [ 774.951848][T10037] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 774.962356][T10045] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 774.964885][T10037] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 774.984677][T10037] REISERFS (device loop5): using ordered data mode [ 774.991716][T10037] reiserfs: using flush barriers [ 775.006961][T10037] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 775.041588][T10037] REISERFS (device loop5): checking transaction log (loop5) [ 775.100232][T10037] REISERFS (device loop5): Using r5 hash to sort names [ 775.162169][T10037] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 775.219839][ T9902] device hsr_slave_0 entered promiscuous mode [ 775.221616][T10045] EXT4-fs (loop4): 1 truncate cleaned up [ 775.237326][ T9902] device hsr_slave_1 entered promiscuous mode [ 775.260083][T10045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 776.032129][T10054] x_tables: duplicate underflow at hook 3 [ 776.082903][T10054] blktrace: Concurrent blktraces are not allowed on sg0 [ 776.300866][ T9902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.310092][ T9902] Cannot create hsr debugfs directory [ 776.954344][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 779.867444][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1251'. [ 782.011272][T10116] loop3: detected capacity change from 0 to 512 [ 782.026490][T10116] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 782.163784][T10125] x_tables: duplicate underflow at hook 3 [ 782.235334][ T26] audit: type=1326 audit(1789054561.794:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.5.1256" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19e159 code=0x0 [ 782.261330][T10116] EXT4-fs (loop3): 1 truncate cleaned up [ 782.335649][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1253'. [ 782.348706][T10116] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 783.313491][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 783.338181][ T9211] device hsr_slave_0 left promiscuous mode [ 784.522505][ T9211] device hsr_slave_1 left promiscuous mode [ 784.638174][ T9211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.796202][ T9211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.851980][T10151] loop3: detected capacity change from 0 to 512 [ 784.899606][ T9211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.926438][T10151] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 784.944510][ T9211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.963644][T10151] EXT4-fs (loop3): 1 truncate cleaned up [ 784.971380][ T9211] device bridge_slave_1 left promiscuous mode [ 784.977618][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.995828][T10151] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 785.048470][ T9211] device bridge_slave_0 left promiscuous mode [ 785.113774][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.137199][T10165] loop4: detected capacity change from 0 to 1024 [ 785.674389][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 785.708282][ T26] audit: type=1800 audit(1789054565.264:817): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1262" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 785.741887][ T9211] device veth1_macvtap left promiscuous mode [ 785.747961][ T9211] device veth0_macvtap left promiscuous mode [ 785.769777][ T9211] device veth1_vlan left promiscuous mode [ 785.782994][ T9211] device veth0_vlan left promiscuous mode [ 788.357201][T10186] loop3: detected capacity change from 0 to 512 [ 788.386943][T10186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 788.586780][T10186] EXT4-fs (loop3): 1 truncate cleaned up [ 788.594107][T10186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 788.780347][T10191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1268'. [ 789.327040][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 789.486400][T10195] loop3: detected capacity change from 0 to 4096 [ 789.586709][ T9211] team0 (unregistering): Port device team_slave_1 removed [ 789.782480][ T9211] team0 (unregistering): Port device team_slave_0 removed [ 789.834950][ T9211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.216494][ T9211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.595921][ T9211] bond0 (unregistering): Released all slaves [ 792.223669][T10214] loop3: detected capacity change from 0 to 512 [ 792.329543][T10214] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 792.461715][T10222] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 792.470039][T10222] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 792.480700][T10222] udc dummy_udc.0: failed to start g1: -22 [ 792.486549][T10222] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 792.494194][T10214] EXT4-fs (loop3): 1 truncate cleaned up [ 792.494223][T10214] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 792.509488][T10222] UDC core: g1: couldn't find an available UDC or it's busy [ 793.390296][T10225] tipc: MTU too low for tipc bearer [ 793.443215][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 793.575457][T10228] loop5: detected capacity change from 0 to 512 [ 793.584167][T10228] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 793.714901][T10228] EXT4-fs (loop5): 1 truncate cleaned up [ 793.720831][T10228] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 795.108916][ T5889] EXT4-fs (loop5): unmounting filesystem. [ 796.054656][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 796.097907][ T9902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 796.152399][ T9902] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 796.175666][ T9902] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 796.206497][ T9902] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 798.029405][ T9902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.087074][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 798.097651][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 798.137358][ T9902] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.198119][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.219690][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 798.606635][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 799.933587][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.940755][ T9161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.987880][ T8626] udevd[8626]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 800.390117][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 800.426597][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 800.476613][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 800.516294][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.523510][ T9161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.627177][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 800.690095][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 800.946953][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 801.232749][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 801.315272][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 801.433177][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 801.480206][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 801.515329][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 801.534271][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 801.548218][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 801.586460][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 801.611194][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 802.039721][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 802.049430][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 802.068815][ T9902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.445276][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 802.454216][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 802.474191][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 802.482658][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 802.494243][ T9902] device veth0_vlan entered promiscuous mode [ 802.501030][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 802.508918][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 802.525010][ T9902] device veth1_vlan entered promiscuous mode [ 802.544752][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 802.554257][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 802.562552][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 802.572021][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 802.582087][ T9902] device veth0_macvtap entered promiscuous mode [ 802.591742][ T9902] device veth1_macvtap entered promiscuous mode [ 802.605311][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.615970][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.626599][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.637334][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.647428][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.658187][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.669548][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.679781][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.690898][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.700963][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.711673][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.721560][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.732102][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.743200][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.752392][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 802.766741][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 802.774975][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 802.784012][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 802.792872][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 802.801953][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 802.813439][ T9902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.822551][ T9902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.831529][ T9902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.845166][ T9902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.914827][ T9211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.928055][ T9211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.938748][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 802.958974][ T9211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.968007][ T9211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.976082][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 803.082065][T10327] loop4: detected capacity change from 0 to 16 [ 803.158353][T10329] Bluetooth: ISO socket layer initialized [ 803.294129][T10327] erofs: (device loop4): mounted with root inode @ nid 36. [ 803.437002][T10332] 9pnet_fd: p9_fd_create_tcp (10332): problem connecting socket to 127.0.0.1 [ 808.012985][T10366] loop5: detected capacity change from 0 to 512 [ 808.050019][T10366] EXT4-fs: Mount option(s) incompatible with ext2 [ 808.914161][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.921415][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.970030][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1310'. [ 815.052114][T10430] input: syz0 as /devices/virtual/input/input14 [ 815.487185][T10439] tipc: Failed to remove unknown binding: 66,0,0/0:2577154838/2577154839 [ 822.326854][T10499] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1324'. [ 824.314716][T10517] loop6: detected capacity change from 0 to 512 [ 824.462394][T10517] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1330: missing EA_INODE flag [ 824.474671][T10526] binder: 10525:10526 ioctl c0306201 200000000080 returned -14 [ 824.598454][T10517] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1330: error while reading EA inode 2 err=-117 [ 824.661403][T10517] EXT4-fs (loop6): 1 orphan inode deleted [ 824.667234][T10517] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 824.755467][T10532] binder: 10525:10532 ioctl c0306201 2000000003c0 returned -14 [ 826.203490][T10542] loop4: detected capacity change from 0 to 512 [ 826.229348][T10542] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 827.323609][T10542] EXT4-fs (loop4): 1 truncate cleaned up [ 827.413433][T10542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 827.731951][ T9902] EXT4-fs (loop6): unmounting filesystem. [ 828.624860][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 828.906779][T10575] loop6: detected capacity change from 0 to 512 [ 829.108864][T10581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1339'. [ 829.763464][T10575] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 829.889453][T10575] EXT4-fs (loop6): 1 truncate cleaned up [ 829.929082][T10575] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 832.155117][ T9902] EXT4-fs (loop6): unmounting filesystem. [ 834.403697][T10640] loop5: detected capacity change from 0 to 512 [ 834.545351][T10645] x_tables: duplicate underflow at hook 3 [ 834.553357][T10645] blktrace: Concurrent blktraces are not allowed on sg0 [ 834.836579][T10640] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 834.870605][T10640] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 834.900739][T10640] System zones: 0-1, 15-15, 18-18, 34-34 [ 834.921501][T10640] EXT4-fs (loop5): orphan cleanup on readonly fs [ 834.927994][T10640] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 835.061699][T10640] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 835.362985][T10640] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 835.924798][T10640] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.1352: bad orphan inode 16 [ 836.043522][T10640] ext4_test_bit(bit=15, block=18) = 1 [ 836.138527][T10640] is_bad_inode(inode)=0 [ 836.307069][T10629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.860683][T10640] NEXT_ORPHAN(inode)=0 [ 836.864817][T10640] max_ino=32 [ 836.868035][T10640] i_nlink=2 [ 836.930768][T10640] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 838.260373][T10677] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 838.617420][T10680] loop3: detected capacity change from 0 to 1024 [ 838.687976][ T5889] EXT4-fs (loop5): unmounting filesystem. [ 838.742893][ T26] audit: type=1800 audit(1789054618.304:818): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1361" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 841.117038][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 841.141885][T10709] device macsec0 entered promiscuous mode [ 841.732337][T10708] x_tables: duplicate underflow at hook 3 [ 841.755259][T10710] overlayfs: failed to clone upperpath [ 842.269672][T10708] blktrace: Concurrent blktraces are not allowed on sg0 [ 843.637025][T10736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 843.645487][T10736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 843.652952][T10736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 843.908982][T10732] x_tables: duplicate underflow at hook 3 [ 844.674908][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1369'. [ 845.660564][T10770] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1377'. [ 845.669635][T10770] device bridge0 entered promiscuous mode [ 849.302156][T10799] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 849.309179][T10799] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 849.410714][T10799] udc dummy_udc.0: failed to start g1: -22 [ 849.452109][T10803] x_tables: duplicate underflow at hook 3 [ 849.479837][ T26] audit: type=1800 audit(1789054629.034:819): pid=10805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1373" name="id" dev="configfs" ino=54958 res=0 errno=0 [ 849.566897][T10806] autofs4:pid:10806:autofs_fill_super: called with bogus options [ 850.165766][T10799] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 850.185593][T10799] UDC core: g1: couldn't find an available UDC or it's busy [ 850.721579][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 851.162296][T10831] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1391'. [ 851.910126][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1394'. [ 853.438642][T10853] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 854.188992][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 854.217154][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 854.734896][T10877] x_tables: duplicate underflow at hook 3 [ 854.748780][T10877] blktrace: Concurrent blktraces are not allowed on sg0 [ 854.764751][T10866] syz.6.1399 (10866) used greatest stack depth: 18176 bytes left [ 854.777499][T10872] syz.6.1399 (10872) used greatest stack depth: 18112 bytes left [ 855.111150][ T4278] Bluetooth: hci5: Malformed Event: 0x2f [ 856.208997][T10897] loop6: detected capacity change from 0 to 1024 [ 856.374105][T10897] hfsplus: unable to parse mount options [ 858.688846][T10924] Cannot find add_set index 0 as target [ 859.591222][T10923] loop5: detected capacity change from 0 to 8192 [ 859.759864][T10923] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 860.590738][T10923] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 860.628070][T10923] REISERFS (device loop5): using ordered data mode [ 860.640921][T10923] reiserfs: using flush barriers [ 860.703964][T10923] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 860.729434][T10947] x_tables: duplicate underflow at hook 3 [ 860.801153][T10923] REISERFS (device loop5): checking transaction log (loop5) [ 860.830666][T10923] REISERFS (device loop5): Using r5 hash to sort names [ 860.850884][T10923] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 860.869984][T10922] loop4: detected capacity change from 0 to 4096 [ 861.398572][T10959] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1420'. [ 862.250729][T10922] NILFS (loop4): error -4 creating segctord thread [ 862.453062][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1422'. [ 863.979797][T10990] tmpfs: Unknown parameter 'usrquota' [ 864.029921][T10993] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 864.049672][T10988] IPVS: stopping master sync thread 10993 ... [ 864.085796][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1429'. [ 865.407964][ T26] audit: type=1326 audit(1789054644.964:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x0 [ 866.067262][T11026] x_tables: duplicate underflow at hook 3 [ 866.088326][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 866.107354][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 866.122863][T11026] blktrace: Concurrent blktraces are not allowed on sg0 [ 868.062322][T11053] netlink: 'syz.3.1445': attribute type 10 has an invalid length. [ 868.285218][T11064] overlayfs: failed to clone upperpath [ 868.353802][T11066] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 868.412076][T11067] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 869.610885][T11071] Invalid ELF header type: 3 != 1 [ 869.753511][T11047] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1441'. [ 869.790357][T11083] loop4: detected capacity change from 0 to 512 [ 870.340622][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.350971][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.382162][T11083] FAT-fs (loop4): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 870.827692][T11093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 870.835538][T11093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 870.850534][T11093] device dummy0 left promiscuous mode [ 870.938809][T11093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 873.365085][T11108] x_tables: duplicate underflow at hook 3 [ 873.654142][T11111] loop4: detected capacity change from 0 to 8192 [ 873.721435][T11111] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 873.763781][T11111] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 873.835562][T11111] REISERFS (device loop4): using ordered data mode [ 873.854855][T11111] reiserfs: using flush barriers [ 873.874052][T11111] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 873.929996][T11111] REISERFS (device loop4): checking transaction log (loop4) [ 873.948479][T11111] REISERFS (device loop4): Using r5 hash to sort names [ 873.959509][T11111] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 875.366326][T11133] x_tables: duplicate underflow at hook 3 [ 875.389922][T11137] tipc: Started in network mode [ 875.395155][T11137] tipc: Node identity , cluster identity 4711 [ 875.401866][T11137] tipc: Failed to obtain node identity [ 875.407904][T11137] tipc: Enabling of bearer rejected, failed to enable media [ 877.376741][ T26] audit: type=1800 audit(1789054656.924:821): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1466" name="memory_backed" dev="configfs" ino=56442 res=0 errno=0 [ 878.165727][T11163] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1468'. [ 878.180883][T11163] loop4: detected capacity change from 0 to 128 [ 878.412068][ T26] audit: type=1800 audit(1789054656.924:822): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1466" name="zone_nr_conv" dev="configfs" ino=56443 res=0 errno=0 [ 879.706474][ T26] audit: type=1800 audit(1789054656.934:823): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1466" name="power" dev="configfs" ino=56444 res=0 errno=0 [ 879.706526][T11177] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 880.848943][ T9337] Bluetooth: hci5: ACL packet too small [ 882.058538][T11211] bridge0: port 3(netdevsim0) entered blocking state [ 882.306022][T11211] bridge0: port 3(netdevsim0) entered disabled state [ 882.316152][T11211] device netdevsim0 entered promiscuous mode [ 882.330755][ T9337] Bluetooth: hci3: command 0x0406 tx timeout [ 882.333921][T11211] bridge0: port 3(netdevsim0) entered blocking state [ 882.343623][T11211] bridge0: port 3(netdevsim0) entered forwarding state [ 882.721474][T11223] SET target dimension over the limit! [ 883.728680][T11211] netlink: 'syz.6.1484': attribute type 10 has an invalid length. [ 883.871055][T11211] bridge0: port 3(netdevsim0) entered disabled state [ 883.877963][T11211] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.885454][T11211] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.898200][T11211] device bridge0 left promiscuous mode [ 883.917959][T11211] bridge0: port 3(netdevsim0) entered blocking state [ 883.924807][T11211] bridge0: port 3(netdevsim0) entered forwarding state [ 883.931926][T11211] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.939067][T11211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.946555][T11211] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.953756][T11211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.999024][T11237] loop4: detected capacity change from 0 to 16 [ 884.061042][T11237] erofs: (device loop4): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 884.113990][T11211] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 884.269585][T11246] loop5: detected capacity change from 0 to 512 [ 884.306115][T11246] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 886.022672][T11246] EXT4-fs (loop5): 1 truncate cleaned up [ 886.177151][T11246] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 887.184739][ T9337] Bluetooth: hci1: unexpected cc 0x202f length: 2 < 9 [ 888.438404][ T5889] EXT4-fs (loop5): unmounting filesystem. [ 888.574094][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 888.583947][T11276] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 888.950419][T11287] loop4: detected capacity change from 0 to 16 [ 888.958031][T11287] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 888.965979][T11287] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 888.974566][T11287] erofs: DAX unsupported by block device. Turning off DAX. [ 888.998230][T11287] erofs: (device loop4): mounted with root inode @ nid 36. [ 889.046530][T11289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.835243][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1510'. [ 890.932491][T11301] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 890.947483][T11301] syzkaller1: linktype set to 780 [ 890.962836][T11301] loop5: detected capacity change from 0 to 7 [ 890.984676][ T8626] Dev loop5: unable to read RDB block 7 [ 890.990461][ T8626] loop5: AHDI p3 p4 [ 890.998858][ T8626] loop5: partition table partially beyond EOD, truncated [ 891.008665][ T8626] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 891.202722][T11301] Dev loop5: unable to read RDB block 7 [ 891.235154][T11301] loop5: AHDI p3 p4 [ 891.369220][T11301] loop5: partition table partially beyond EOD, truncated [ 891.616967][T11301] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 891.921718][T11296] Dev loop5: unable to read RDB block 7 [ 891.946710][T11296] loop5: AHDI p3 p4 [ 891.951584][T11296] loop5: partition table partially beyond EOD, truncated [ 891.958858][T11296] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 892.001783][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'. [ 892.022245][T11324] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 892.388668][ T8626] udevd[8626]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 892.442518][ T8626] udevd[8626]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 894.626948][ T127] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 894.758604][T11363] loop5: detected capacity change from 0 to 1024 [ 894.791194][T11363] hfsplus: wrong filesystem version [ 894.994529][ T127] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 895.004064][ T127] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 895.014426][ T127] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 895.028167][ T127] usb 5-1: config 150 has no interface number 0 [ 895.034548][ T127] usb 5-1: config 150 interface 204 has no altsetting 0 [ 895.043696][ T127] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 895.711006][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.719509][ T127] usb 5-1: Product: syz [ 895.725097][ T127] usb 5-1: Manufacturer: syz [ 895.729988][ T127] usb 5-1: SerialNumber: syz [ 895.868598][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1531'. [ 895.877883][T11371] loop5: detected capacity change from 0 to 8192 [ 895.915110][T11371] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 895.933121][T11371] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 895.942947][T11371] REISERFS (device loop5): using ordered data mode [ 895.949612][T11371] reiserfs: using flush barriers [ 895.996695][ T4316] usb 5-1: USB disconnect, device number 2 [ 896.021793][T11371] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 896.364433][T11371] REISERFS (device loop5): checking transaction log (loop5) [ 896.524419][T11371] REISERFS (device loop5): Using r5 hash to sort names [ 896.787714][T11371] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 897.713824][T11396] x_tables: duplicate underflow at hook 3 [ 898.016636][T11406] loop4: detected capacity change from 0 to 8 [ 898.940642][T11408] input: syz1 as /devices/virtual/input/input15 [ 900.589728][T11406] SQUASHFS error: zlib decompression failed, data probably corrupt [ 900.682287][T11406] SQUASHFS error: Failed to read block 0x9b: -5 [ 900.698827][T11406] SQUASHFS error: Unable to read metadata cache entry [99] [ 900.713743][T11406] SQUASHFS error: Unable to read inode 0x127 [ 900.879184][T11406] loop4: detected capacity change from 0 to 4096 [ 900.902982][T11420] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 901.479136][T11422] loop5: detected capacity change from 0 to 512 [ 901.504105][T11422] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 901.608106][T11422] EXT4-fs (loop5): 1 truncate cleaned up [ 901.613919][T11422] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 902.310968][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 902.321988][T11440] x_tables: duplicate underflow at hook 3 [ 902.375284][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1547'. [ 902.445866][T11442] device macsec0 entered promiscuous mode [ 902.453651][ T5889] EXT4-fs (loop5): unmounting filesystem. [ 902.552164][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.610090][ T4316] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 902.646131][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.655120][ T4316] usb 5-1: Product: syz [ 902.659841][ T4316] usb 5-1: Manufacturer: syz [ 902.670400][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 902.680655][ T4316] usb 5-1: SerialNumber: syz [ 902.700690][ T4316] usb 5-1: config 0 descriptor?? [ 902.802736][T11456] x_tables: duplicate underflow at hook 3 [ 902.917590][ T4318] usb 5-1: USB disconnect, device number 3 [ 902.954381][T11459] loop5: detected capacity change from 0 to 164 [ 905.037557][T11483] loop4: detected capacity change from 0 to 128 [ 905.359194][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 905.367461][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 905.621886][ T9337] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 905.631290][ T9337] Bluetooth: hci3: Injecting HCI hardware error event [ 905.644473][ T4278] Bluetooth: hci3: hardware error 0x00 [ 906.287792][T11493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 906.358539][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1563'. [ 906.388701][T11491] x_tables: duplicate underflow at hook 3 [ 906.422710][T11491] blktrace: Concurrent blktraces are not allowed on sg0 [ 906.457677][T11496] device macsec0 entered promiscuous mode [ 906.639914][T11507] loop5: detected capacity change from 0 to 16 [ 906.677960][T11507] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 906.710767][T11507] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 906.747540][T11507] erofs: (device loop5): erofs_read_inode: bogus i_mode (0) @ nid 4 [ 907.936688][T11524] x_tables: duplicate underflow at hook 3 [ 907.947219][T11524] blktrace: Concurrent blktraces are not allowed on sg0 [ 908.764063][ T4278] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 909.223330][T11523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 909.238352][T11523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 909.273311][T11523] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 909.337968][T11523] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 909.358007][T11523] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 909.366212][T11523] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 909.375051][T11523] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 910.774236][T11552] x_tables: duplicate underflow at hook 3 [ 910.792579][ T4278] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 911.049199][T11563] loop4: detected capacity change from 0 to 1024 [ 911.094443][ T26] audit: type=1800 audit(1789054690.654:824): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1586" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 911.290798][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 911.368710][T11568] loop4: detected capacity change from 0 to 8192 [ 911.375167][ T9337] Bluetooth: hci5: command 0x0c1a tx timeout [ 911.401544][T11557] loop5: detected capacity change from 0 to 40427 [ 911.409091][T11568] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 911.422520][T11568] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 911.434858][T11572] x_tables: duplicate underflow at hook 3 [ 911.443656][T11568] REISERFS (device loop4): using ordered data mode [ 911.451004][T11568] reiserfs: using flush barriers [ 911.498931][T11568] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 911.524138][T11557] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 911.592977][ T4278] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 911.631074][T11568] REISERFS (device loop4): checking transaction log (loop4) [ 912.030838][T11568] REISERFS (device loop4): Using r5 hash to sort names [ 912.210116][ T4278] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 912.211282][T11568] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 913.087232][T11589] loop5: detected capacity change from 0 to 4096 [ 913.141048][T11589] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 913.450778][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 913.489637][T11603] x_tables: duplicate underflow at hook 3 [ 913.625117][T11604] tipc: MTU too low for tipc bearer [ 913.681841][T11609] loop4: detected capacity change from 0 to 512 [ 913.713939][T11609] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 913.749827][T11609] EXT4-fs (loop4): 1 truncate cleaned up [ 913.756026][T11609] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 914.961752][T11628] loop5: detected capacity change from 0 to 256 [ 914.972465][T11628] exfat: Deprecated parameter 'namecase' [ 914.978424][T11628] exfat: Deprecated parameter 'namecase' [ 915.086775][T11628] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 915.422503][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 915.569715][T11630] loop5: detected capacity change from 0 to 8 [ 916.632313][T11630] SQUASHFS error: zlib decompression failed, data probably corrupt [ 916.640301][T11630] SQUASHFS error: Failed to read block 0x9b: -5 [ 916.646959][T11630] SQUASHFS error: Unable to read metadata cache entry [99] [ 916.654842][T11630] SQUASHFS error: Unable to read inode 0x127 [ 916.844507][T11630] loop5: detected capacity change from 0 to 4096 [ 916.866631][T11637] netlink: 'syz.0.1610': attribute type 10 has an invalid length. [ 916.890556][T11646] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 917.466862][T11649] loop4: detected capacity change from 0 to 1024 [ 917.525833][ T26] audit: type=1800 audit(1789054697.084:825): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1613" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 918.491653][T11660] tipc: MTU too low for tipc bearer [ 918.768802][T11667] x_tables: duplicate underflow at hook 3 [ 918.967205][T11680] xt_TCPMSS: Only works on TCP SYN packets [ 918.986632][T11678] loop5: detected capacity change from 0 to 512 [ 919.029506][T11678] EXT4-fs: Ignoring removed nobh option [ 919.081585][T11678] EXT4-fs (loop5): orphan cleanup on readonly fs [ 919.120081][T11678] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.1623: EA inode hash validation failed [ 919.141475][T11678] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 919.231985][T11678] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1623: corrupted inode contents [ 919.263225][T11678] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.1623: mark_inode_dirty error [ 919.277886][T11678] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1623: corrupted inode contents [ 919.291612][T11678] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2950: inode #15: comm syz.5.1623: mark_inode_dirty error [ 919.875069][T11674] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 919.875565][T11678] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2953: inode #15: comm syz.5.1623: mark inode dirty (error -117) [ 919.908039][T11674] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 919.931480][T11674] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 919.937531][T11678] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 919.974933][T11678] EXT4-fs (loop5): 1 orphan inode deleted [ 919.994166][T11678] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 920.511346][T11695] x_tables: duplicate underflow at hook 3 [ 920.674464][ T5889] EXT4-fs (loop5): unmounting filesystem. [ 920.855375][T11704] loop4: detected capacity change from 0 to 4096 [ 920.967863][T11704] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 921.115975][ T4318] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 921.725690][T11704] ntfs3: loop4: mft corrupted [ 921.736566][T11704] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 921.783556][T11704] ntfs3: loop4: Failed to load $Bitmap. [ 921.810366][T11717] x_tables: duplicate underflow at hook 3 [ 921.882924][ T4318] usb 6-1: unable to get BOS descriptor or descriptor too short [ 921.903671][ T4318] usb 6-1: not running at top speed; connect to a high speed hub [ 921.925087][ T4318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.932419][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 921.975604][ T4318] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 922.010782][ T9337] Bluetooth: hci5: command 0x0c1a tx timeout [ 922.040790][ T4318] usb 6-1: config 1 interface 1 has no altsetting 0 [ 922.161068][ T4318] usb 6-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 922.178104][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.187821][ T4318] usb 6-1: Product: syz [ 922.367360][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 922.820298][ T4318] usb 6-1: Manufacturer: syz [ 922.834594][ T4318] usb 6-1: SerialNumber: syz [ 922.859071][T11734] loop4: detected capacity change from 0 to 64 [ 922.927711][T11734] Unable to read inode block [ 922.950768][T11734] MINIX-fs: get root inode failed [ 923.110054][ T4318] usb 6-1: selecting invalid altsetting 1 [ 923.116218][ T4318] snd-usb-caiaq 6-1:1.1: can't set alt interface. [ 923.137656][ T4318] usb 6-1: unable to init card! (ret=-5) [ 923.157795][ T4318] snd-usb-caiaq: probe of 6-1:1.1 failed with error -5 [ 923.179906][ T4318] usb 6-1: USB disconnect, device number 3 [ 923.369968][T11746] x_tables: duplicate underflow at hook 3 [ 924.260879][ T8626] udevd[8626]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 924.328541][ T4278] Bluetooth: hci1: Malformed LE Event: 0x02 [ 924.473591][T11759] loop4: detected capacity change from 0 to 512 [ 924.517718][T11759] EXT4-fs: inline encryption not supported [ 924.544092][T11759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 924.554386][T11759] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 924.595737][T11763] x_tables: duplicate underflow at hook 3 [ 924.619421][T11757] loop5: detected capacity change from 0 to 8192 [ 924.661213][T11757] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 924.742015][T11757] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 924.840949][T11757] REISERFS (device loop5): using ordered data mode [ 924.866860][T11767] x_tables: duplicate underflow at hook 3 [ 924.877634][T11757] reiserfs: using flush barriers [ 924.896705][T11757] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 925.028368][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1658'. [ 925.091947][T11757] REISERFS (device loop5): checking transaction log (loop5) [ 925.118363][T11757] REISERFS (device loop5): Using r5 hash to sort names [ 925.170380][T11757] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 926.685056][T11792] x_tables: duplicate underflow at hook 3 [ 926.702447][T11792] blktrace: Concurrent blktraces are not allowed on sg0 [ 927.210633][ T4278] Bluetooth: hci5: command 0x0405 tx timeout [ 931.234536][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 931.358050][T11818] x_tables: duplicate underflow at hook 3 [ 931.454155][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.464648][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.801935][T11836] x_tables: duplicate underflow at hook 3 [ 932.881875][T11840] x_tables: duplicate underflow at hook 3 [ 932.952818][T11840] blktrace: Concurrent blktraces are not allowed on sg0 [ 933.552519][T11860] loop5: detected capacity change from 0 to 512 [ 933.593777][T11860] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 933.673072][T11860] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 933.781460][T11860] EXT4-fs (loop5): 1 truncate cleaned up [ 933.788092][T11860] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 933.823028][T11866] loop4: detected capacity change from 0 to 8 [ 933.891868][T11866] SQUASHFS error: lzo decompression failed, data probably corrupt [ 933.976744][T11866] SQUASHFS error: Failed to read block 0x91: -5 [ 934.120905][T11866] SQUASHFS error: Unable to read metadata cache entry [8f] [ 934.155287][T11866] SQUASHFS error: Unable to read inode 0x11f [ 934.583690][ T5889] EXT4-fs (loop5): unmounting filesystem. [ 935.899477][T11891] x_tables: duplicate underflow at hook 3 [ 935.918418][T11890] x_tables: duplicate underflow at hook 3 [ 935.947694][T11891] blktrace: Concurrent blktraces are not allowed on sg0 [ 938.126811][T11912] loop5: detected capacity change from 0 to 2048 [ 938.287039][T11912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 938.996993][T11917] loop4: detected capacity change from 0 to 8 [ 939.411852][T11917] SQUASHFS error: zlib decompression failed, data probably corrupt [ 939.419828][T11917] SQUASHFS error: Failed to read block 0x9b: -5 [ 939.495649][T11917] SQUASHFS error: Unable to read metadata cache entry [99] [ 939.535917][T11917] SQUASHFS error: Unable to read inode 0x127 [ 939.797064][T11917] loop4: detected capacity change from 0 to 4096 [ 940.072608][T11933] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1720'. [ 940.086064][T11931] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 941.517068][T11937] x_tables: duplicate underflow at hook 3 [ 941.702880][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1724'. [ 941.911900][T11956] loop5: detected capacity change from 0 to 512 [ 942.051626][T11957] overlayfs: failed to clone upperpath [ 942.799209][T11956] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 942.898444][T11956] EXT4-fs (loop5): 1 truncate cleaned up [ 942.910550][T11956] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 943.822069][T11963] x_tables: duplicate underflow at hook 3 [ 943.976688][ T5889] EXT4-fs (loop5): unmounting filesystem. [ 944.182228][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 944.190585][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 944.197972][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 944.209313][T11974] device hsr0 left promiscuous mode [ 946.775601][T11984] x_tables: duplicate underflow at hook 3 [ 946.853234][T11989] loop5: detected capacity change from 0 to 512 [ 946.981007][T11989] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 948.710237][T11989] EXT4-fs (loop5): 1 truncate cleaned up [ 948.720791][T11989] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 950.185153][ T9337] Bluetooth: hci0: unexpected event for opcode 0x203b [ 950.222206][ T5889] EXT4-fs (loop5): unmounting filesystem. [ 950.277922][T12017] loop4: detected capacity change from 0 to 512 [ 950.308798][T12017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 950.641584][T12029] IPVS: rr: FWM 3 0x00000003 - no destination available [ 951.396558][T12017] EXT4-fs (loop4): 1 truncate cleaned up [ 951.466089][T12017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 951.720986][ T9337] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 951.809323][T12042] x_tables: duplicate underflow at hook 3 [ 952.946080][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 952.956569][T12047] x_tables: duplicate underflow at hook 3 [ 952.965517][T12047] blktrace: Concurrent blktraces are not allowed on sg0 [ 953.869544][T12057] loop4: detected capacity change from 0 to 512 [ 953.910330][T12057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 953.933389][T12057] EXT4-fs (loop4): 1 truncate cleaned up [ 953.939073][T12057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 954.803543][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 955.889876][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 956.380143][T12067] loop5: detected capacity change from 0 to 40427 [ 957.227124][T12067] F2FS-fs (loop5): inline encryption not supported [ 957.259652][T12067] F2FS-fs (loop5): build fault injection attr: rate: 7, type: 0x3ffff [ 957.333774][T12067] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x19 [ 957.783391][T12067] F2FS-fs (loop5): invalid crc value [ 957.919116][T12067] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-12) [ 958.786396][T12106] loop4: detected capacity change from 0 to 128 [ 958.811107][T12106] FAT-fs (loop4): bogus number of reserved sectors [ 958.817657][T12106] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 958.840713][T12106] FAT-fs (loop4): Can't find a valid FAT filesystem [ 958.872851][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200d [ 959.424329][T12123] autofs4:pid:12123:autofs_fill_super: called with bogus options [ 960.977028][T12136] loop4: detected capacity change from 0 to 8 [ 961.265755][T12136] SQUASHFS error: zlib decompression failed, data probably corrupt [ 961.288986][T12136] SQUASHFS error: Failed to read block 0x9b: -5 [ 961.298436][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 961.313815][T12136] SQUASHFS error: Unable to read metadata cache entry [99] [ 961.324036][T12136] SQUASHFS error: Unable to read inode 0x127 [ 961.335173][T12140] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 961.816286][T12149] Cannot find set identified by id 0 to match [ 962.500380][T12153] loop4: detected capacity change from 0 to 512 [ 962.530293][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 962.556872][T12153] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.1767: missing EA_INODE flag [ 962.624433][T12153] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1767: error while reading EA inode 2 err=-117 [ 962.638058][T12153] EXT4-fs (loop4): 1 orphan inode deleted [ 962.644091][T12153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 964.147873][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 965.147988][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1773'. [ 967.453233][ T9337] Bluetooth: hci5: hcon ffff888055de0000 sent 1 < count 2 [ 967.700709][ T9337] Bluetooth: hci1: unexpected event for opcode 0x202f [ 968.679515][T12210] loop5: detected capacity change from 0 to 512 [ 968.686875][T12210] ext4: Bad value for 'journal' [ 968.705719][T12211] Cannot find set identified by id 0 to match [ 968.734863][T11985] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 969.195833][T12226] loop5: detected capacity change from 0 to 64 [ 969.337129][T12229] overlayfs: failed to clone upperpath [ 970.256557][T12226] hfs: unable to load codepage "macuit" [ 970.270036][T12226] hfs: unable to parse mount options [ 970.431083][ T9337] Bluetooth: hci0: unexpected event for opcode 0x200c [ 971.434636][T12251] x_tables: duplicate underflow at hook 3 [ 972.336234][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1786'. [ 972.351635][ T9337] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 972.366813][T12256] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 973.395760][T12273] loop5: detected capacity change from 0 to 512 [ 973.661758][T12273] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.1801: missing EA_INODE flag [ 973.694350][T12279] loop4: detected capacity change from 0 to 1024 [ 973.728150][T12273] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1801: error while reading EA inode 2 err=-117 [ 973.901880][T12273] EXT4-fs (loop5): 1 orphan inode deleted [ 973.989502][T12273] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 975.532701][ T5889] EXT4-fs (loop5): unmounting filesystem. [ 975.815156][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1806'. [ 975.835762][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1806'. [ 976.026386][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 976.106967][T12299] x_tables: duplicate underflow at hook 3 [ 976.123423][T12299] blktrace: Concurrent blktraces are not allowed on sg0 [ 982.747300][T12350] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1822'. [ 983.737499][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 984.535470][T12365] x_tables: duplicate underflow at hook 3 [ 986.278565][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 986.443231][T12383] loop5: detected capacity change from 0 to 8 [ 986.466121][T12383] SQUASHFS error: Unable to read inode 0x11f [ 988.261348][T12405] overlayfs: failed to clone upperpath [ 989.948474][T12422] loop4: detected capacity change from 0 to 256 [ 989.986503][T12422] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 990.040341][T12422] UBIFS error (pid: 12422): cannot open "ubi:0", error -19 [ 990.044662][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 991.035486][T12441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1852'. [ 992.095002][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1853'. [ 992.803156][ T9337] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 992.840688][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 992.893737][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.900118][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.915867][T12465] device bond1 entered promiscuous mode [ 992.921684][T12465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 993.032331][ T14] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 993.055815][ T14] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 993.088952][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.099068][ T14] usb 5-1: Product: syz [ 993.109184][ T14] usb 5-1: Manufacturer: syz [ 993.114098][ T14] usb 5-1: SerialNumber: syz [ 993.136944][ T14] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 993.145123][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 993.203713][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 993.231257][ T14] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 993.244098][ T14] usb 5-1: media controller created [ 993.272705][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 993.374675][ T14] DVB: Unable to find symbol mt352_attach() [ 993.382625][ T14] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 993.392414][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 993.426358][ T14] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 993.476588][ T14] usb 5-1: USB disconnect, device number 4 [ 993.532063][ T14] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 993.937199][ T9337] Bluetooth: hci0: unexpected event for opcode 0x200c [ 995.639383][T12504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1867'. [ 996.237226][T12508] x_tables: duplicate underflow at hook 3 [ 996.611317][T12520] SET target dimension over the limit! [ 997.256454][T12518] device bond1 entered promiscuous mode [ 997.262456][T12518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 997.437453][ T26] audit: type=1326 audit(1789054776.994:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.5.1875" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc19e159 code=0x0 [ 997.641504][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1875'. [ 997.838695][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1875'. [ 999.936763][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1000.667695][T12571] SET target dimension over the limit! [ 1000.734941][T12573] x_tables: duplicate underflow at hook 3 [ 1000.796901][T12574] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1887'. [ 1001.512108][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'. [ 1001.602652][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1002.811242][T12610] xt_SECMARK: invalid mode: 4 [ 1002.819515][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1003.151935][T12623] autofs4:pid:12623:autofs_fill_super: called with bogus options [ 1003.833785][ T9337] Bluetooth: hci0: unexpected event for opcode 0x200c [ 1004.055791][T12637] x_tables: duplicate underflow at hook 3 [ 1005.005423][T12655] autofs4:pid:12655:autofs_fill_super: called with bogus options [ 1005.389635][T12656] overlayfs: failed to clone upperpath [ 1005.719050][T12658] netlink: 'syz.6.1921': attribute type 4 has an invalid length. [ 1006.157517][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1006.191801][T12659] netlink: 'syz.6.1921': attribute type 4 has an invalid length. [ 1006.477958][T12676] x_tables: duplicate underflow at hook 3 [ 1006.586721][ T26] audit: type=1326 audit(1789054786.144:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12685 comm="syz.4.1931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x0 [ 1007.898497][T12701] autofs4:pid:12701:autofs_fill_super: called with bogus options [ 1008.688080][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1009.199883][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1009.974277][T12733] x_tables: duplicate underflow at hook 3 [ 1010.244291][T12742] autofs4:pid:12742:autofs_fill_super: called with bogus options [ 1010.983780][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1011.010824][ T9337] Bluetooth: hci0: hardware error 0x04 [ 1011.229717][ T26] audit: type=1107 audit(1789054790.784:828): pid=12757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1011.490890][ T4278] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1013.060596][ T9337] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1013.128610][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1013.734368][T12786] x_tables: duplicate underflow at hook 3 [ 1014.153974][T12794] autofs4:pid:12794:autofs_fill_super: called with bogus options [ 1014.346840][T12796] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1973'. [ 1015.107672][T12809] x_tables: duplicate underflow at hook 3 [ 1016.739507][T12830] autofs4:pid:12830:autofs_fill_super: called with bogus options [ 1017.227920][T12840] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1987'. [ 1017.997626][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1018.304818][T12864] x_tables: duplicate underflow at hook 3 [ 1018.486500][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 1020.181851][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2011'. [ 1022.517213][ T9337] Bluetooth: hci5: unexpected event for opcode 0x0404 [ 1024.318296][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1025.836374][T13026] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2054'. [ 1027.139596][T13055] x_tables: duplicate underflow at hook 3 [ 1028.605382][ T9337] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 1029.164394][T13098] overlayfs: failed to clone upperpath [ 1029.831650][T13098] netlink: 'syz.3.2084': attribute type 4 has an invalid length. [ 1030.368130][T13102] netlink: 'syz.3.2084': attribute type 4 has an invalid length. [ 1033.137816][T13151] netlink: 'syz.3.2105': attribute type 2 has an invalid length. [ 1033.146106][T13151] netlink: 'syz.3.2105': attribute type 2 has an invalid length. [ 1033.155761][T13151] netlink: 'syz.3.2105': attribute type 1 has an invalid length. [ 1033.163877][T13151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2105'. [ 1033.407448][T13162] tmpfs: Bad value for 'mpol' [ 1035.505510][T13197] x_tables: duplicate underflow at hook 3 [ 1035.905493][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1038.249319][T13244] overlayfs: failed to clone upperpath [ 1038.542721][T13244] netlink: 'syz.4.2138': attribute type 4 has an invalid length. [ 1038.943190][T13246] netlink: 'syz.4.2138': attribute type 4 has an invalid length. [ 1039.125742][T13253] x_tables: duplicate underflow at hook 3 [ 1039.685208][T13271] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2147'. [ 1040.436015][T13275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1040.445287][T13275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1041.946430][T13307] autofs4:pid:13307:autofs_fill_super: called with bogus options [ 1042.118369][T13309] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2163'. [ 1042.682771][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1042.737601][T13314] x_tables: duplicate underflow at hook 3 [ 1042.748118][T13315] netlink: 'syz.0.2166': attribute type 2 has an invalid length. [ 1042.765586][T13315] netlink: 'syz.0.2166': attribute type 2 has an invalid length. [ 1042.776736][T13315] netlink: 'syz.0.2166': attribute type 1 has an invalid length. [ 1042.788882][T13315] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2166'. [ 1042.884927][T13318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1042.905270][T13318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1044.447364][T13344] autofs4:pid:13344:autofs_fill_super: called with bogus options [ 1045.087787][T13348] sctp: [Deprecated]: syz.4.2180 (pid 13348) Use of int in max_burst socket option deprecated. [ 1045.087787][T13348] Use struct sctp_assoc_value instead [ 1045.409426][T13359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2179'. [ 1046.083111][T13360] overlayfs: failed to clone upperpath [ 1046.224712][T13362] netlink: 'syz.5.2178': attribute type 4 has an invalid length. [ 1046.297997][T13361] autofs4:pid:13361:autofs_fill_super: called with bogus options [ 1046.800293][T13363] netlink: 'syz.5.2178': attribute type 4 has an invalid length. [ 1046.966956][T13371] x_tables: duplicate underflow at hook 3 [ 1047.896249][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2193'. [ 1048.210042][T13398] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2194'. [ 1048.849971][T13406] overlayfs: failed to clone upperpath [ 1049.011584][T13407] netlink: 'syz.0.2197': attribute type 4 has an invalid length. [ 1049.176141][T13408] netlink: 'syz.0.2197': attribute type 4 has an invalid length. [ 1050.980322][T13426] x_tables: duplicate underflow at hook 3 [ 1051.398789][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2206'. [ 1051.409341][T13434] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1052.094116][T13443] autofs4:pid:13443:autofs_fill_super: called with bogus options [ 1053.902721][T13461] x_tables: duplicate underflow at hook 3 [ 1054.333528][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.348093][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.771300][T13479] autofs4:pid:13479:autofs_fill_super: called with bogus options [ 1055.064284][T13483] x_tables: duplicate underflow at hook 3 [ 1056.859322][T13503] netlink: 'syz.0.2232': attribute type 13 has an invalid length. [ 1056.870822][T13503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2232'. [ 1056.910161][T13503] syz_tun: refused to change device tx_queue_len [ 1056.934611][T13503] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1057.111453][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200d [ 1057.164966][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1058.331561][T13529] x_tables: duplicate underflow at hook 3 [ 1058.573716][T13539] Cannot find add_set index 0 as target [ 1058.602977][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1058.706105][ T9337] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 1059.013679][T13558] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2252'. [ 1060.104145][T13572] autofs4:pid:13572:autofs_fill_super: called with bogus options [ 1060.874712][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1061.036949][ T9337] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 1061.193698][T13584] x_tables: duplicate underflow at hook 3 [ 1062.518610][T13614] netlink: 'syz.3.2276': attribute type 13 has an invalid length. [ 1062.586184][T13615] autofs4:pid:13615:autofs_fill_super: called with bogus options [ 1063.172906][T13614] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2276'. [ 1063.205886][T13614] syz_tun: refused to change device tx_queue_len [ 1063.292374][T13614] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1064.227874][T13648] autofs4:pid:13648:autofs_fill_super: called with bogus options [ 1064.544307][T13650] x_tables: duplicate underflow at hook 3 [ 1065.269037][T13681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2305'. [ 1065.557229][T13689] autofs4:pid:13689:autofs_fill_super: called with bogus options [ 1066.506983][T13701] x_tables: duplicate underflow at hook 3 [ 1066.518033][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1066.887290][T13719] autofs4:pid:13719:autofs_fill_super: called with bogus options [ 1069.505886][T13758] x_tables: duplicate underflow at hook 3 [ 1069.833876][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 1069.843263][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 1070.817383][T13785] netlink: 'syz.5.2348': attribute type 10 has an invalid length. [ 1070.852999][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1070.902948][T13785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.934004][T13785] bond0: (slave team0): Enslaving as an active interface with an up link [ 1072.287432][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2356'. [ 1072.455662][T13817] x_tables: duplicate underflow at hook 3 [ 1072.468546][T13819] netlink: 'syz.0.2360': attribute type 21 has an invalid length. [ 1072.480252][T13819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2360'. [ 1072.563831][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 1072.658020][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2367'. [ 1072.695322][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1072.758991][T13835] x_tables: duplicate underflow at hook 3 [ 1073.094416][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2370'. [ 1073.325267][ T9337] Bluetooth: hci1: unknown advertising packet type: 0xff [ 1073.628201][T13862] x_tables: duplicate underflow at hook 3 [ 1073.950025][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2384'. [ 1074.442006][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1074.567343][T13880] x_tables: duplicate underflow at hook 3 [ 1074.977175][T13893] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2394'. [ 1075.206677][T13899] autofs4:pid:13899:autofs_fill_super: called with bogus options [ 1076.076201][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2397'. [ 1076.216655][T13913] x_tables: duplicate underflow at hook 3 [ 1076.785975][T13931] autofs4:pid:13931:autofs_fill_super: called with bogus options [ 1077.597366][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1077.739556][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2410'. [ 1077.888426][T13950] netlink: zone id is out of range [ 1078.239648][T13968] autofs4:pid:13968:autofs_fill_super: called with bogus options [ 1079.218747][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2427'. [ 1079.306389][T13983] Driver unsupported XDP return value 0 on prog (id 154) dev N/A, expect packet loss! [ 1079.345771][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2429'. [ 1079.362137][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2429'. [ 1080.144803][T14002] autofs4:pid:14002:autofs_fill_super: called with bogus options [ 1081.126823][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 1081.740484][T14040] autofs4:pid:14040:autofs_fill_super: called with bogus options [ 1083.322599][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 1083.479212][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1084.573020][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1084.749737][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2471'. [ 1086.439820][T14123] x_tables: duplicate underflow at hook 3 [ 1086.804554][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 1087.073000][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2479'. [ 1087.082588][T14143] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1087.980471][ T4278] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1089.206220][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 1091.491885][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2507'. [ 1091.504719][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2516'. [ 1093.066391][ T4278] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1095.586003][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 1095.595766][T14279] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1096.715856][ T4278] Bluetooth: hci1: unexpected event for opcode 0x203c [ 1098.675182][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1099.347176][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2554'. [ 1104.275936][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'. [ 1105.146879][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'. [ 1105.157094][T14426] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1106.248096][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2598'. [ 1108.806759][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2609'. [ 1109.790392][ T4278] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1110.604140][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2617'. [ 1110.624209][T14512] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1111.532549][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 1114.765791][ T4278] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1115.746146][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2636'. [ 1115.772502][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.779097][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.416300][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 1117.662334][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2649'. [ 1117.672076][T14615] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1119.301307][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2661'. [ 1120.200248][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 1120.209936][T14652] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1121.687134][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2673'. [ 1121.775475][T14681] Cannot find del_set index 4 as target [ 1121.835446][T14683] overlayfs: conflicting options: nfs_export=on,index=off [ 1122.122852][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 1122.132686][T14688] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1122.903652][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2679'. [ 1123.651049][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2685'. [ 1124.705250][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2688'. [ 1124.714985][T14731] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1124.931343][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2690'. [ 1126.435724][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2697'. [ 1126.949543][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2701'. [ 1127.535039][ T4278] Bluetooth: hci5: unexpected event for opcode 0x0407 [ 1128.959548][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 1129.626173][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2719'. [ 1129.685140][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2716'. [ 1129.694923][T14819] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1132.805746][ T26] audit: type=1326 audit(1789054912.427:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.6.2736" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb879e159 code=0x7ffc0000 [ 1132.841745][ T26] audit: type=1326 audit(1789054912.457:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.6.2736" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb879e159 code=0x7ffc0000 [ 1132.841953][T14858] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1132.885144][ T26] audit: type=1326 audit(1789054912.457:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.6.2736" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3fb879e159 code=0x7ffc0000 [ 1133.050721][ T26] audit: type=1326 audit(1789054912.457:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.6.2736" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb879e159 code=0x7ffc0000 [ 1133.076928][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2734'. [ 1133.087701][T14862] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1133.136130][ T26] audit: type=1326 audit(1789054912.457:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.6.2736" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb879e159 code=0x7ffc0000 [ 1136.772669][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2751'. [ 1137.007280][T14911] autofs4:pid:14911:autofs_fill_super: called with bogus options [ 1137.767012][ T4278] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1140.376616][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2763'. [ 1140.850834][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2768'. [ 1141.161218][T14951] autofs4:pid:14951:autofs_fill_super: called with bogus options [ 1141.935721][T14958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2772'. [ 1144.522849][T14994] autofs4:pid:14994:autofs_fill_super: called with bogus options [ 1145.211751][T14993] x_tables: duplicate underflow at hook 3 [ 1145.412366][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2785'. [ 1146.574024][T15022] Cannot find del_set index 4 as target [ 1146.666917][T15023] autofs4:pid:15023:autofs_fill_super: called with bogus options [ 1147.321863][T15019] x_tables: duplicate underflow at hook 3 [ 1147.459526][T15022] overlayfs: conflicting options: nfs_export=on,index=off [ 1148.076760][T15053] Cannot find del_set index 4 as target [ 1148.809205][T15056] overlayfs: conflicting options: nfs_export=on,index=off [ 1148.852473][T15055] x_tables: duplicate underflow at hook 3 [ 1148.935050][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2811'. [ 1148.992129][T15069] device wlan0 entered promiscuous mode [ 1148.999831][T15069] mac80211_hwsim hwsim9 wlan0: refused to change device tx_queue_len [ 1149.187894][T15066] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 1149.356142][T15090] x_tables: duplicate underflow at hook 3 [ 1149.388749][T15092] x_tables: duplicate underflow at hook 3 [ 1149.575527][T15097] x_tables: duplicate underflow at hook 3 [ 1150.447230][T15104] Cannot find add_set index 0 as target [ 1150.511988][T15106] overlayfs: conflicting options: nfs_export=on,index=off [ 1150.748262][T15113] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2826'. [ 1150.874687][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2830'. [ 1151.086627][T15129] netlink: 'syz.5.2835': attribute type 3 has an invalid length. [ 1151.106840][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2835'. [ 1151.117442][T15128] x_tables: duplicate underflow at hook 3 [ 1151.130807][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2835'. [ 1151.904868][T15137] x_tables: duplicate underflow at hook 3 [ 1151.984322][T15142] x_tables: duplicate underflow at hook 3 [ 1152.246862][ T4278] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1152.488323][T15164] autofs4:pid:15164:autofs_fill_super: called with bogus options [ 1153.262399][T15169] unsupported nla_type 37 [ 1153.514253][T15185] x_tables: duplicate underflow at hook 3 [ 1153.528999][T15188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 1153.629087][T15194] x_tables: duplicate underflow at hook 3 [ 1153.807631][T15198] x_tables: duplicate underflow at hook 3 [ 1154.511910][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1154.782682][T15210] autofs4:pid:15210:autofs_fill_super: called with bogus options [ 1155.578580][T15217] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2870'. [ 1155.620804][T15217] 0ªX¹¦À: renamed from caif0 [ 1155.629428][T15217] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1155.915481][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2873'. [ 1155.925915][T15230] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1156.980146][T15232] x_tables: duplicate underflow at hook 3 [ 1156.988678][T15238] x_tables: duplicate underflow at hook 3 [ 1157.024508][T15239] x_tables: duplicate underflow at hook 3 [ 1157.178232][ T4278] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1157.812722][T15251] x_tables: duplicate underflow at hook 3 [ 1158.137178][ T4278] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 1158.147292][T15257] netlink: 'syz.6.2885': attribute type 3 has an invalid length. [ 1158.184225][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2885'. [ 1158.200928][T15257] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2885'. [ 1158.465646][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2888'. [ 1158.476642][T15269] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1159.420004][T15283] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1160.526967][T15286] x_tables: duplicate underflow at hook 3 [ 1160.535996][T15287] x_tables: duplicate underflow at hook 3 [ 1160.616755][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1160.626278][T15292] x_tables: duplicate underflow at hook 3 [ 1161.128332][T15303] x_tables: duplicate underflow at hook 3 [ 1161.592141][T15319] netlink: 'syz.5.2907': attribute type 16 has an invalid length. [ 1161.600155][T15319] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2907'. [ 1162.765441][T15329] x_tables: duplicate underflow at hook 3 [ 1162.815224][T15331] autofs4:pid:15331:autofs_fill_super: called with bogus options [ 1162.836907][T15334] x_tables: duplicate underflow at hook 3 [ 1162.847748][T15336] x_tables: duplicate underflow at hook 3 [ 1163.484755][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1163.774500][T15353] x_tables: duplicate underflow at hook 3 [ 1164.392226][T15367] autofs4:pid:15367:autofs_fill_super: called with bogus options [ 1164.445486][T15373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.710468][T15377] x_tables: duplicate underflow at hook 3 [ 1164.737266][T15380] x_tables: duplicate underflow at hook 3 [ 1166.158632][T15398] x_tables: duplicate underflow at hook 3 [ 1166.727159][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2943'. [ 1167.470622][T15416] autofs4:pid:15416:autofs_fill_super: called with bogus options [ 1168.392621][T15426] x_tables: duplicate underflow at hook 3 [ 1168.620831][T15438] x_tables: duplicate underflow at hook 3 [ 1168.848140][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1169.093625][T15446] x_tables: duplicate underflow at hook 3 [ 1169.715861][T15458] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1169.725236][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1169.734635][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1170.566609][T15476] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1170.705121][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 1170.887644][T15483] Cannot find del_set index 4 as target [ 1170.965065][T15490] x_tables: duplicate underflow at hook 3 [ 1171.159316][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1172.133189][T15505] tipc: Started in network mode [ 1172.138121][T15505] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 1172.158920][T15505] tipc: Enabled bearer , priority 10 [ 1172.515809][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'. [ 1172.934401][T15527] ip_tables: iptables: counters copy to user failed while replacing table [ 1173.004232][T15529] x_tables: duplicate underflow at hook 3 [ 1173.160141][ T8303] tipc: Node number set to 9480874 [ 1173.557634][T15554] device vlan2 entered promiscuous mode [ 1173.564224][T15554] device bond0 entered promiscuous mode [ 1173.570030][T15554] device bond_slave_0 entered promiscuous mode [ 1173.577611][T15554] device bond_slave_1 entered promiscuous mode [ 1173.589534][T15554] device netdevsim0 entered promiscuous mode [ 1173.596173][T15554] device team0 entered promiscuous mode [ 1173.603458][T15554] device team_slave_0 entered promiscuous mode [ 1173.610415][T15554] device team_slave_1 entered promiscuous mode [ 1174.971456][T15585] x_tables: duplicate underflow at hook 3 [ 1175.158291][T15594] Cannot find del_set index 4 as target [ 1176.663629][T15624] autofs4:pid:15624:autofs_fill_super: called with bogus options [ 1176.886538][T15627] x_tables: duplicate underflow at hook 3 [ 1177.136335][T15636] Cannot find add_set index 0 as target [ 1177.203800][T15636] overlayfs: conflicting options: nfs_export=on,index=off [ 1177.216556][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.223952][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.435312][T15641] x_tables: duplicate underflow at hook 3 [ 1178.473410][T15659] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1178.833155][T15670] autofs4:pid:15670:autofs_fill_super: called with bogus options [ 1179.093318][T15672] Cannot find del_set index 4 as target [ 1179.151634][T15672] overlayfs: conflicting options: nfs_export=on,index=off [ 1179.170101][T15674] x_tables: duplicate underflow at hook 3 [ 1180.089218][T15699] x_tables: duplicate underflow at hook 3 [ 1180.139056][T15702] x_tables: duplicate underflow at hook 3 [ 1180.399480][T15706] overlayfs: failed to resolve './file0': -2 [ 1180.600031][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1180.715576][T15722] Cannot find add_set index 0 as target [ 1180.792853][T15722] overlayfs: conflicting options: nfs_export=on,index=off [ 1180.834221][T15726] x_tables: duplicate underflow at hook 3 [ 1181.299378][T15747] x_tables: duplicate underflow at hook 3 [ 1182.117408][T15777] x_tables: duplicate underflow at hook 3 [ 1182.200108][T15780] tipc: Started in network mode [ 1182.217028][T15780] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1182.228240][T15780] tipc: Enabling of bearer rejected, failed to enable media [ 1182.349126][T15782] autofs4:pid:15782:autofs_fill_super: called with bogus options [ 1182.466410][T15785] x_tables: duplicate underflow at hook 3 [ 1183.125653][T15810] tipc: Enabling of bearer rejected, failed to enable media [ 1183.148418][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'. [ 1183.293169][T15814] autofs4:pid:15814:autofs_fill_super: called with bogus options [ 1183.624770][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3112'. [ 1184.266952][T15823] x_tables: duplicate underflow at hook 3 [ 1184.305319][T15831] x_tables: duplicate underflow at hook 3 [ 1184.353011][ T4278] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1184.452087][ T26] audit: type=1326 audit(1789054964.077:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15842 comm="syz.4.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1184.515439][ T26] audit: type=1326 audit(1789054964.077:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15842 comm="syz.4.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1184.546403][ T26] audit: type=1326 audit(1789054964.077:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15842 comm="syz.4.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1184.577295][ T26] audit: type=1326 audit(1789054964.077:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15842 comm="syz.4.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1184.610938][ T26] audit: type=1326 audit(1789054964.077:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15842 comm="syz.4.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1184.717728][T15849] autofs4:pid:15849:autofs_fill_super: called with bogus options [ 1184.797382][ T26] audit: type=1326 audit(1789054964.077:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15842 comm="syz.4.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1184.827965][ T26] audit: type=1326 audit(1789054964.077:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15842 comm="syz.4.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1185.111727][ T26] audit: type=1326 audit(1789054964.077:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15842 comm="syz.4.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1185.493073][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3125'. [ 1185.966321][T15881] x_tables: duplicate underflow at hook 3 [ 1186.018457][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1186.078879][T15888] x_tables: duplicate underflow at hook 3 [ 1186.144039][T15891] autofs4:pid:15891:autofs_fill_super: called with bogus options [ 1187.222455][T15915] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1188.689228][T15935] autofs4:pid:15935:autofs_fill_super: called with bogus options [ 1189.006245][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1189.024150][T15940] x_tables: duplicate underflow at hook 3 [ 1189.332126][T15951] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1190.042265][T15956] x_tables: duplicate underflow at hook 3 [ 1190.225809][T15970] tipc: Started in network mode [ 1190.231041][T15970] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 1190.238479][T15970] tipc: Enabled bearer , priority 10 [ 1190.265226][T15974] autofs4:pid:15974:autofs_fill_super: called with bogus options [ 1190.604713][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1190.757088][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1191.422494][ T127] tipc: Node number set to 9349802 [ 1191.842484][T16004] SET target dimension over the limit! [ 1191.857458][T16003] x_tables: duplicate underflow at hook 3 [ 1191.971216][T16010] autofs4:pid:16010:autofs_fill_super: called with bogus options [ 1192.351421][T16024] x_tables: duplicate underflow at hook 3 [ 1193.262621][T16054] x_tables: duplicate underflow at hook 3 [ 1193.438926][T16067] x_tables: duplicate underflow at hook 3 [ 1194.101692][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3220'. [ 1194.434292][T16122] x_tables: duplicate underflow at hook 3 [ 1194.773229][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3236'. [ 1194.828434][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1195.201652][T16161] xt_connbytes: Forcing CT accounting to be enabled [ 1195.499117][T16175] x_tables: duplicate underflow at hook 3 [ 1197.543856][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1197.652195][T16207] x_tables: duplicate underflow at hook 3 [ 1197.673108][T16210] Cannot find del_set index 4 as target [ 1198.495306][T16210] overlayfs: conflicting options: nfs_export=on,index=off [ 1198.566941][T16217] netlink: 'syz.3.3269': attribute type 29 has an invalid length. [ 1198.611070][T16217] netlink: 'syz.3.3269': attribute type 29 has an invalid length. [ 1198.633069][T16217] netlink: 'syz.3.3269': attribute type 29 has an invalid length. [ 1198.650034][T16221] set match dimension is over the limit! [ 1198.753944][T16229] x_tables: duplicate underflow at hook 3 [ 1200.423012][T16253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3283'. [ 1200.626865][ T4278] Bluetooth: hci1: hcon ffff888026ce8000 sent 0 < count 6 [ 1200.830024][T16274] Cannot find del_set index 4 as target [ 1200.886989][T16274] overlayfs: conflicting options: nfs_export=on,index=off [ 1202.060167][T16293] x_tables: duplicate underflow at hook 3 [ 1202.805553][T16312] Cannot find del_set index 4 as target [ 1202.838016][T16312] overlayfs: conflicting options: nfs_export=on,index=off [ 1204.242662][T16341] x_tables: duplicate underflow at hook 3 [ 1204.359848][T16346] Cannot find del_set index 4 as target [ 1204.368220][T16346] overlayfs: conflicting options: nfs_export=on,index=off [ 1204.473834][ T26] audit: type=1326 audit(1789054984.087:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1204.557861][ T26] audit: type=1326 audit(1789054984.137:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1204.690953][ T26] audit: type=1326 audit(1789054984.137:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1205.389771][ T26] audit: type=1326 audit(1789054984.137:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1205.421214][ T26] audit: type=1326 audit(1789054984.137:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.4.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x7ffc0000 [ 1205.498458][ T4278] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1205.545932][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3327'. [ 1205.814521][T16376] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1206.195419][T16389] x_tables: duplicate underflow at hook 3 [ 1206.240241][T16391] x_tables: duplicate underflow at hook 3 [ 1206.424802][ T26] audit: type=1326 audit(1789054986.047:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.0.3340" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1206.449347][ T26] audit: type=1326 audit(1789054986.047:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.0.3340" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1206.476090][ T26] audit: type=1326 audit(1789054986.047:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.0.3340" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1206.502108][ T26] audit: type=1326 audit(1789054986.047:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.0.3340" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1206.526988][ T26] audit: type=1326 audit(1789054986.047:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.0.3340" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1206.582897][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1207.635955][T16437] x_tables: duplicate underflow at hook 3 [ 1208.873287][T16483] autofs4:pid:16483:autofs_fill_super: called with bogus options [ 1209.160045][T16495] tipc: Failed to obtain node identity [ 1209.166056][T16495] tipc: Enabling of bearer rejected, failed to enable media [ 1209.277783][T16498] device vlan2 entered promiscuous mode [ 1209.285073][T16498] device macvlan0 entered promiscuous mode [ 1211.183262][T16570] autofs4:pid:16570:autofs_fill_super: called with bogus options [ 1211.655641][T16581] ip_tables: iptables: counters copy to user failed while replacing table [ 1212.065162][ T9337] Bluetooth: hci5: unexpected event for opcode 0x200c [ 1212.301135][T16599] overlayfs: conflicting options: nfs_export=on,index=off [ 1212.920820][T16624] device syz_tun entered promiscuous mode [ 1212.956463][T16624] device syz_tun left promiscuous mode [ 1213.369100][T16638] overlayfs: conflicting options: nfs_export=on,index=off [ 1213.416541][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3429'. [ 1213.769683][T16654] sctp: [Deprecated]: syz.6.3436 (pid 16654) Use of int in max_burst socket option. [ 1213.769683][T16654] Use struct sctp_assoc_value instead [ 1214.308739][T16664] autofs4:pid:16664:autofs_fill_super: called with bogus options [ 1215.523065][T16678] Cannot find add_set index 0 as target [ 1215.580117][T16678] overlayfs: conflicting options: nfs_export=on,index=off [ 1215.609649][T16680] x_tables: duplicate underflow at hook 3 [ 1216.593756][T16719] netlink: 'syz.3.3457': attribute type 4 has an invalid length. [ 1216.611613][T16719] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3457'. [ 1216.701832][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3454'. [ 1217.299518][T16741] x_tables: duplicate underflow at hook 3 [ 1218.027771][T16760] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (24) [ 1218.794989][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1218.805961][T16794] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1220.107852][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1220.107866][ T26] audit: type=1326 audit(1789054999.727:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.6.3496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb879e159 code=0x7ffc0000 [ 1220.176059][ T26] audit: type=1326 audit(1789054999.727:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.6.3496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fb875e98e code=0x7ffc0000 [ 1220.210721][ T26] audit: type=1326 audit(1789054999.727:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.6.3496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb879e159 code=0x7ffc0000 [ 1220.284661][ T26] audit: type=1326 audit(1789054999.737:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.6.3496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3fb879ddeb code=0x7ffc0000 [ 1220.449075][ T26] audit: type=1326 audit(1789054999.737:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.6.3496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb879e159 code=0x7ffc0000 [ 1220.482982][T16827] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1220.690629][ T26] audit: type=1326 audit(1789054999.737:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.6.3496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb879e159 code=0x7ffc0000 [ 1220.998713][T16839] "syz.0.3503" (16839) uses obsolete ecb(arc4) skcipher [ 1222.000113][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3513'. [ 1222.015024][T16873] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1222.200357][T16879] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1225.385874][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3543'. [ 1225.454024][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3540'. [ 1225.704074][T16957] device sit0 entered promiscuous mode [ 1225.742727][T16957] netlink: 'syz.3.3550': attribute type 1 has an invalid length. [ 1225.776576][T16957] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1228.306978][T17006] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1230.578744][T17045] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3584'. [ 1230.625842][T17049] device gretap0 entered promiscuous mode [ 1230.832239][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3581'. [ 1231.973516][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1232.119423][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3601'. [ 1232.232144][T17093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3603'. [ 1234.129204][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1234.408978][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3604'. [ 1234.959833][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1235.748646][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3622'. [ 1237.182343][T17164] xt_NFQUEUE: number of queues (4096) out of range (got 67070) [ 1237.884075][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1237.894658][T17185] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1238.636162][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 1238.645747][T17203] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1238.766410][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.772838][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.559016][T17212] device batadv0 entered promiscuous mode [ 1239.646671][T17212] device batadv0 left promiscuous mode [ 1239.646739][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1239.690690][T17214] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1239.884503][T17220] Cannot find del_set index 4 as target [ 1239.944835][T17220] overlayfs: conflicting options: nfs_export=on,index=off [ 1241.588023][T17247] netlink: 'syz.6.3661': attribute type 1 has an invalid length. [ 1242.018868][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3665'. [ 1242.337135][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3659'. [ 1242.571602][T17265] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1243.834922][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3680'. [ 1243.845299][T17298] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1243.931477][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1244.263524][T17305] Cannot find del_set index 4 as target [ 1244.316284][T17305] overlayfs: conflicting options: nfs_export=on,index=off [ 1245.665897][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3693'. [ 1246.335225][T17337] Cannot find del_set index 4 as target [ 1246.396916][T17337] overlayfs: conflicting options: nfs_export=on,index=off [ 1246.673923][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3697'. [ 1247.405804][T17369] Cannot find del_set index 4 as target [ 1247.492721][T17370] overlayfs: conflicting options: nfs_export=on,index=off [ 1247.883394][T17382] autofs4:pid:17382:autofs_fill_super: called with bogus options [ 1248.588575][T17384] netlink: 'syz.5.3717': attribute type 10 has an invalid length. [ 1248.607234][T17384] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3717'. [ 1248.785866][T17384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.835892][T17384] device bond_slave_0 left promiscuous mode [ 1248.867207][T17384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.886411][T17384] device bond_slave_1 left promiscuous mode [ 1248.918863][T17384] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1248.933800][T17384] device netdevsim0 left promiscuous mode [ 1248.942748][T17384] bond0 (unregistering): (slave team0): Releasing backup interface [ 1248.952376][T17384] device team0 left promiscuous mode [ 1248.957688][T17384] device team_slave_0 left promiscuous mode [ 1248.969816][T17384] device team_slave_1 left promiscuous mode [ 1248.992203][T17384] bond0 (unregistering): Released all slaves [ 1249.089034][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3715'. [ 1249.131788][T17395] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1249.144791][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 1249.176129][T17396] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1249.536044][T17407] Cannot find del_set index 4 as target [ 1249.619591][T17407] overlayfs: conflicting options: nfs_export=on,index=off [ 1250.060353][T17417] autofs4:pid:17417:autofs_fill_super: called with bogus options [ 1251.847395][T17441] Cannot find del_set index 4 as target [ 1251.918813][T17441] overlayfs: conflicting options: nfs_export=on,index=off [ 1252.182849][T17450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3739'. [ 1252.523699][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3745'. [ 1252.540707][T17459] netlink: 'syz.4.3745': attribute type 15 has an invalid length. [ 1252.548593][T17459] netlink: 'syz.4.3745': attribute type 25 has an invalid length. [ 1252.567126][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3745'. [ 1252.658074][T17462] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3746'. [ 1252.705833][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1252.777790][T17466] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1253.914362][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3755'. [ 1253.958670][T17487] device hsr_slave_0 left promiscuous mode [ 1253.976055][T17487] device hsr_slave_1 left promiscuous mode [ 1254.617663][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'. [ 1254.628342][T17514] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1255.186181][T17521] x_tables: duplicate underflow at hook 3 [ 1255.686123][T17536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3774'. [ 1255.696554][T17536] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1256.540771][T17545] Cannot find del_set index 4 as target [ 1256.619912][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3778'. [ 1257.315939][T17545] overlayfs: conflicting options: nfs_export=on,index=off [ 1257.874010][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3786'. [ 1257.884103][T17567] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1258.660558][T17576] netlink: 'syz.4.3791': attribute type 12 has an invalid length. [ 1258.670270][T17576] netlink: 'syz.4.3791': attribute type 29 has an invalid length. [ 1258.684355][T17576] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1258.716172][T17576] netlink: 'syz.4.3791': attribute type 3 has an invalid length. [ 1258.758975][T17576] netlink: 'syz.4.3791': attribute type 2 has an invalid length. [ 1258.767510][T17576] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1258.883704][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3789'. [ 1259.093274][T17580] 9pnet_fd: Insufficient options for proto=fd [ 1259.382864][T17586] Cannot find del_set index 4 as target [ 1259.473779][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3794'. [ 1260.123620][T17592] overlayfs: conflicting options: nfs_export=on,index=off [ 1260.451288][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3799'. [ 1260.619625][ T9337] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1260.935192][T17607] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3802'. [ 1261.260007][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1261.270573][T17617] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1262.215075][T17627] Cannot find del_set index 4 as target [ 1262.293937][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'. [ 1262.304218][T17629] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1262.963539][T17627] overlayfs: conflicting options: nfs_export=on,index=off [ 1262.985998][ T26] audit: type=1326 audit(1789055042.607:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17631 comm="syz.0.3813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1263.265906][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3812'. [ 1263.889997][ T26] audit: type=1326 audit(1789055042.647:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17631 comm="syz.0.3813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1263.950709][ T26] audit: type=1326 audit(1789055042.647:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17631 comm="syz.0.3813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1264.011997][ T26] audit: type=1326 audit(1789055042.647:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17631 comm="syz.0.3813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1264.090668][ T26] audit: type=1326 audit(1789055042.647:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17631 comm="syz.0.3813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1264.136212][ T26] audit: type=1326 audit(1789055042.647:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17631 comm="syz.0.3813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1264.174328][ T26] audit: type=1326 audit(1789055042.647:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17631 comm="syz.0.3813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1264.290871][ T26] audit: type=1326 audit(1789055042.647:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17631 comm="syz.0.3813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c39e159 code=0x7ffc0000 [ 1264.393370][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3820'. [ 1264.403752][T17656] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1264.690246][T17650] x_tables: duplicate underflow at hook 3 [ 1264.953194][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3823'. [ 1264.963589][T17669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1266.084343][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3828'. [ 1266.771198][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3832'. [ 1267.032567][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3833'. [ 1267.043141][T17694] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1267.506927][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3837'. [ 1267.517343][T17703] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1268.273949][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3844'. [ 1268.694227][T17723] overlayfs: failed to clone upperpath [ 1268.722756][T17725] x_tables: duplicate underflow at hook 3 [ 1268.923387][T17733] autofs4:pid:17733:autofs_fill_super: called with bogus options [ 1269.197407][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3851'. [ 1269.882054][T17743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3852'. [ 1270.296877][T17747] 9pnet_fd: Insufficient options for proto=fd [ 1270.793254][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3858'. [ 1271.224052][T17768] x_tables: duplicate underflow at hook 3 [ 1271.295923][T17770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3865'. [ 1271.598738][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3868'. [ 1271.609255][T17778] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1272.219044][T17788] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3872'. [ 1272.399995][T17788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.446640][T17788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.495731][T17788] bond0 (unregistering): Released all slaves [ 1272.618213][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3874'. [ 1273.278459][T17814] autofs4:pid:17814:autofs_fill_super: called with bogus options [ 1273.451256][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1273.461715][T17818] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1274.220744][T17825] x_tables: duplicate underflow at hook 3 [ 1275.408853][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3890'. [ 1276.356802][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3893'. [ 1276.660793][T17860] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1276.680629][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3891'. [ 1277.140151][T17878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3902'. [ 1277.164505][T17882] x_tables: duplicate underflow at hook 3 [ 1277.464323][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3904'. [ 1278.257281][T17898] Cannot find del_set index 4 as target [ 1278.332209][T17898] overlayfs: conflicting options: nfs_export=on,index=off [ 1278.435392][T17902] autofs4:pid:17902:autofs_fill_super: called with bogus options [ 1278.874834][T17911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3911'. [ 1279.840452][T17929] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3920'. [ 1279.876674][T17932] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3921'. [ 1279.994540][T17934] x_tables: duplicate underflow at hook 3 [ 1280.019786][T17936] Cannot find del_set index 4 as target [ 1280.090488][T17936] overlayfs: conflicting options: nfs_export=on,index=off [ 1281.436717][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3926'. [ 1282.508924][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3931'. [ 1282.519266][T17968] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1283.455217][T17984] autofs4:pid:17984:autofs_fill_super: called with bogus options [ 1283.673840][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1283.683979][T17987] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1284.102825][T17991] x_tables: duplicate underflow at hook 3 [ 1284.824958][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1284.835898][T18010] [ 1284.838266][T18010] ====================================================== [ 1284.845310][T18010] WARNING: possible circular locking dependency detected [ 1284.852328][T18010] syzkaller #0 Not tainted [ 1284.856725][T18010] ------------------------------------------------------ [ 1284.863825][T18010] syz.5.3950/18010 is trying to acquire lock: [ 1284.869877][T18010] ffff88802f2380b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x6e/0x90 [ 1284.880315][T18010] [ 1284.880315][T18010] but task is already holding lock: [ 1284.887673][T18010] ffff88807334a698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 1284.898092][T18010] [ 1284.898092][T18010] which lock already depends on the new lock. [ 1284.898092][T18010] [ 1284.908482][T18010] [ 1284.908482][T18010] the existing dependency chain (in reverse order) is: [ 1284.917500][T18010] [ 1284.917500][T18010] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1284.925754][T18010] __mutex_lock+0x12d/0xae0 [ 1284.931014][T18010] __netlink_dump_start+0x11e/0x6f0 [ 1284.936756][T18010] ip_set_dump+0x152/0x1e0 [ 1284.941764][T18010] nfnetlink_rcv_msg+0xcab/0x1290 [ 1284.947386][T18010] netlink_rcv_skb+0x1ef/0x440 [ 1284.952675][T18010] nfnetlink_rcv+0x2b0/0x2470 [ 1284.957882][T18010] netlink_unicast+0x7ad/0x920 [ 1284.963169][T18010] netlink_sendmsg+0x8ad/0xbd0 [ 1284.968444][T18010] ____sys_sendmsg+0x5ed/0x9a0 [ 1284.973820][T18010] ___sys_sendmsg+0x2a2/0x360 [ 1284.979011][T18010] __se_sys_sendmsg+0x1c3/0x2b0 [ 1284.984384][T18010] do_syscall_64+0x4c/0xa0 [ 1284.989341][T18010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1284.995756][T18010] [ 1284.995756][T18010] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1285.003567][T18010] __mutex_lock+0x12d/0xae0 [ 1285.008583][T18010] ip_set_nfnl_get_byindex+0x63/0x230 [ 1285.014527][T18010] set_target_v1_checkentry+0x88/0x4f0 [ 1285.020543][T18010] xt_check_target+0x49d/0xbf0 [ 1285.025824][T18010] nft_target_init+0x678/0x9c0 [ 1285.031099][T18010] nf_tables_newrule+0x170a/0x2810 [ 1285.036725][T18010] nfnetlink_rcv+0x1119/0x2470 [ 1285.042004][T18010] netlink_unicast+0x7ad/0x920 [ 1285.047283][T18010] netlink_sendmsg+0x8ad/0xbd0 [ 1285.052561][T18010] ____sys_sendmsg+0x5ed/0x9a0 [ 1285.057853][T18010] ___sys_sendmsg+0x2a2/0x360 [ 1285.063136][T18010] __se_sys_sendmsg+0x1c3/0x2b0 [ 1285.068503][T18010] do_syscall_64+0x4c/0xa0 [ 1285.073437][T18010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1285.079847][T18010] [ 1285.079847][T18010] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1285.088092][T18010] __lock_acquire+0x2d18/0x7c40 [ 1285.093488][T18010] lock_acquire+0x1bb/0x4a0 [ 1285.098507][T18010] __mutex_lock+0x12d/0xae0 [ 1285.103522][T18010] nf_tables_dumpreset_obj+0x6e/0x90 [ 1285.109328][T18010] netlink_dump+0x683/0xcd0 [ 1285.114348][T18010] __netlink_dump_start+0x52c/0x6f0 [ 1285.120071][T18010] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1285.126218][T18010] nf_tables_getobj_reset+0x1cb/0x610 [ 1285.132106][T18010] nfnetlink_rcv_msg+0x898/0x1290 [ 1285.137655][T18010] netlink_rcv_skb+0x1ef/0x440 [ 1285.142939][T18010] nfnetlink_rcv+0x2b0/0x2470 [ 1285.148135][T18010] netlink_unicast+0x7ad/0x920 [ 1285.153423][T18010] netlink_sendmsg+0x8ad/0xbd0 [ 1285.158697][T18010] ____sys_sendmsg+0x5ed/0x9a0 [ 1285.163982][T18010] ___sys_sendmsg+0x2a2/0x360 [ 1285.169180][T18010] __se_sys_sendmsg+0x1c3/0x2b0 [ 1285.174552][T18010] do_syscall_64+0x4c/0xa0 [ 1285.179491][T18010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1285.185901][T18010] [ 1285.185901][T18010] other info that might help us debug this: [ 1285.185901][T18010] [ 1285.196113][T18010] Chain exists of: [ 1285.196113][T18010] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 1285.196113][T18010] [ 1285.210527][T18010] Possible unsafe locking scenario: [ 1285.210527][T18010] [ 1285.217965][T18010] CPU0 CPU1 [ 1285.223316][T18010] ---- ---- [ 1285.228671][T18010] lock(nlk_cb_mutex-NETFILTER); [ 1285.233688][T18010] lock(nfnl_subsys_ipset); [ 1285.240786][T18010] lock(nlk_cb_mutex-NETFILTER); [ 1285.248319][T18010] lock(&nft_net->commit_mutex); [ 1285.253333][T18010] [ 1285.253333][T18010] *** DEADLOCK *** [ 1285.253333][T18010] [ 1285.261464][T18010] 1 lock held by syz.5.3950/18010: [ 1285.266577][T18010] #0: ffff88807334a698 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 1285.277286][T18010] [ 1285.277286][T18010] stack backtrace: [ 1285.283158][T18010] CPU: 1 PID: 18010 Comm: syz.5.3950 Not tainted syzkaller #0 [ 1285.290609][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1285.300655][T18010] Call Trace: [ 1285.303926][T18010] [ 1285.306849][T18010] dump_stack_lvl+0x188/0x24e [ 1285.311530][T18010] ? load_image+0x410/0x410 [ 1285.316055][T18010] ? show_regs_print_info+0x12/0x12 [ 1285.321254][T18010] ? print_circular_bug+0x12b/0x1a0 [ 1285.326460][T18010] check_noncircular+0x296/0x330 [ 1285.331406][T18010] ? add_chain_block+0x9b0/0x9b0 [ 1285.336343][T18010] ? lockdep_lock+0xf1/0x1f0 [ 1285.340931][T18010] ? _find_first_zero_bit+0xd2/0x100 [ 1285.346235][T18010] __lock_acquire+0x2d18/0x7c40 [ 1285.351084][T18010] ? __lock_acquire+0x7c40/0x7c40 [ 1285.356106][T18010] ? mark_lock+0x94/0x320 [ 1285.360435][T18010] ? verify_lock_unused+0x140/0x140 [ 1285.365630][T18010] ? __lock_acquire+0x138a/0x7c40 [ 1285.370651][T18010] ? stack_trace_save+0xa6/0xf0 [ 1285.375582][T18010] ? stack_trace_snprint+0xe0/0xe0 [ 1285.380695][T18010] lock_acquire+0x1bb/0x4a0 [ 1285.385197][T18010] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 1285.390653][T18010] ? nfnetlink_rcv+0x2b0/0x2470 [ 1285.395500][T18010] ? netlink_unicast+0x7ad/0x920 [ 1285.400441][T18010] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1285.406504][T18010] ? __might_sleep+0xd0/0xd0 [ 1285.411125][T18010] ? read_lock_is_recursive+0x10/0x10 [ 1285.416499][T18010] __mutex_lock+0x12d/0xae0 [ 1285.421006][T18010] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 1285.426474][T18010] ? nft_pernet+0x23/0x230 [ 1285.430880][T18010] ? nf_tables_dumpreset_obj+0x6e/0x90 [ 1285.436339][T18010] ? __lock_acquire+0x7c40/0x7c40 [ 1285.441365][T18010] ? mutex_lock_nested+0x10/0x10 [ 1285.446295][T18010] ? nft_pernet+0x23/0x230 [ 1285.450704][T18010] ? nft_pernet+0x23/0x230 [ 1285.455118][T18010] nf_tables_dumpreset_obj+0x6e/0x90 [ 1285.460422][T18010] netlink_dump+0x683/0xcd0 [ 1285.464927][T18010] ? netlink_lookup+0x200/0x200 [ 1285.469794][T18010] ? nla_strdup+0xaf/0x130 [ 1285.474275][T18010] ? nf_tables_dumpreset_obj_start+0x110/0x170 [ 1285.480428][T18010] __netlink_dump_start+0x52c/0x6f0 [ 1285.485628][T18010] ? nft_netlink_dump_start_rcu+0xbb/0x1a0 [ 1285.491431][T18010] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1285.497068][T18010] nf_tables_getobj_reset+0x1cb/0x610 [ 1285.502437][T18010] ? nf_tables_delobj+0xfc0/0xfc0 [ 1285.507465][T18010] ? nf_tables_getobj_single+0x600/0x600 [ 1285.513097][T18010] ? nf_tables_dumpreset_obj_start+0x170/0x170 [ 1285.519248][T18010] ? nf_tables_dump_obj+0xd00/0xd00 [ 1285.524444][T18010] ? __nla_parse+0x3c/0x50 [ 1285.528859][T18010] ? nf_tables_delobj+0xfc0/0xfc0 [ 1285.533877][T18010] nfnetlink_rcv_msg+0x898/0x1290 [ 1285.538900][T18010] ? nfnetlink_rcv_msg+0x224/0x1290 [ 1285.544098][T18010] ? nfnetlink_unbind+0x160/0x160 [ 1285.549117][T18010] ? kasan_save_free_info+0x27/0x40 [ 1285.554385][T18010] netlink_rcv_skb+0x1ef/0x440 [ 1285.559147][T18010] ? nfnetlink_unbind+0x160/0x160 [ 1285.564169][T18010] ? netlink_ack+0x1160/0x1160 [ 1285.568931][T18010] ? bpf_lsm_capable+0x5/0x10 [ 1285.573648][T18010] ? security_capable+0x85/0xb0 [ 1285.578563][T18010] nfnetlink_rcv+0x2b0/0x2470 [ 1285.583246][T18010] ? __local_bh_enable_ip+0x136/0x1c0 [ 1285.588645][T18010] ? _local_bh_enable+0xa0/0xa0 [ 1285.593491][T18010] ? __dev_queue_xmit+0x281/0x3810 [ 1285.598632][T18010] ? __dev_queue_xmit+0x281/0x3810 [ 1285.603735][T18010] ? __dev_queue_xmit+0x1d84/0x3810 [ 1285.608935][T18010] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1285.614494][T18010] ? ref_tracker_free+0x682/0x830 [ 1285.619573][T18010] ? refcount_inc+0x70/0x70 [ 1285.624072][T18010] ? memcpy+0x3c/0x60 [ 1285.628047][T18010] ? __copy_skb_header+0x3ba/0x4f0 [ 1285.633175][T18010] ? __skb_clone+0x446/0x6c0 [ 1285.637774][T18010] ? netlink_deliver_tap+0x2e/0x1b0 [ 1285.642965][T18010] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 1285.648421][T18010] ? __lock_acquire+0x7c40/0x7c40 [ 1285.653451][T18010] ? netlink_deliver_tap+0x2e/0x1b0 [ 1285.658654][T18010] netlink_unicast+0x7ad/0x920 [ 1285.663431][T18010] netlink_sendmsg+0x8ad/0xbd0 [ 1285.668191][T18010] ? netlink_getsockopt+0x550/0x550 [ 1285.673475][T18010] ? apparmor_socket_sendmsg+0x16c/0x330 [ 1285.679179][T18010] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1285.684491][T18010] ? security_socket_sendmsg+0x7c/0xa0 [ 1285.689944][T18010] ? netlink_getsockopt+0x550/0x550 [ 1285.695134][T18010] ____sys_sendmsg+0x5ed/0x9a0 [ 1285.699919][T18010] ? __sys_sendmsg_sock+0x30/0x30 [ 1285.704944][T18010] ? __import_iovec+0x306/0x510 [ 1285.709800][T18010] ? import_iovec+0x6f/0xa0 [ 1285.714301][T18010] ___sys_sendmsg+0x2a2/0x360 [ 1285.718977][T18010] ? __sys_sendmsg+0x2a0/0x2a0 [ 1285.723770][T18010] __se_sys_sendmsg+0x1c3/0x2b0 [ 1285.728624][T18010] ? __x64_sys_sendmsg+0x80/0x80 [ 1285.733566][T18010] ? lockdep_hardirqs_on+0x94/0x140 [ 1285.738820][T18010] do_syscall_64+0x4c/0xa0 [ 1285.743236][T18010] ? clear_bhb_loop+0x60/0xb0 [ 1285.747910][T18010] ? clear_bhb_loop+0x60/0xb0 [ 1285.752585][T18010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1285.758475][T18010] RIP: 0033:0x7f0cdc19e159 [ 1285.762882][T18010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.782477][T18010] RSP: 002b:00007f0cdd145028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.790884][T18010] RAX: ffffffffffffffda RBX: 00007f0cdc425fa0 RCX: 00007f0cdc19e159 [ 1285.798853][T18010] RDX: 0000000024040808 RSI: 0000200000000180 RDI: 0000000000000003 [ 1285.806815][T18010] RBP: 00007f0cdc23503b R08: 0000000000000000 R09: 0000000000000000 [ 1285.814782][T18010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.822744][T18010] R13: 00007f0cdc426038 R14: 00007f0cdc425fa0 R15: 00007ffc972883e8 [ 1285.830730][T18010] [ 1285.888745][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3948'.