last executing test programs: 3m3.996537231s ago: executing program 2 (id=97): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x410083) 3m3.937160452s ago: executing program 2 (id=98): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) read(r0, &(0x7f0000000000)=""/53, 0x35) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @random="d9da1d928cc4", @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}}}}}}}}, 0x0) 3m3.825046475s ago: executing program 2 (id=101): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@errors_remount}]}, 0xfe, 0x469, &(0x7f0000002480)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40100, 0x118) getdents64(r1, 0x0, 0x0) 3m3.435611034s ago: executing program 2 (id=103): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10801, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0xff, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m3.18999654s ago: executing program 2 (id=105): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4048810) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='1', 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000006c0)={'wlan1\x00', &(0x7f0000000700)=@ethtool_stats}) 3m2.534046146s ago: executing program 2 (id=107): socket$inet6(0xa, 0x3, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m2.414432989s ago: executing program 32 (id=107): socket$inet6(0xa, 0x3, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m54.378703035s ago: executing program 0 (id=172): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1200082, &(0x7f0000000600)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x11, 0x1535, &(0x7f0000001940)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpid}, {@resuid}, {@oldalloc}, {@nogrpid}, {@nobh}, {@bh, 0x2e}], [], 0x2e}, 0x1, 0x48f, &(0x7f0000000780)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4011) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 2m53.690600362s ago: executing program 0 (id=179): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x7}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 2m53.35882376s ago: executing program 0 (id=182): socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)}, {0x0}, {&(0x7f0000001000)="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", 0x45d}], 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x18, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r1}, 0x38) 2m53.175449835s ago: executing program 0 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) setuid(0xee00) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0) 2m52.999731259s ago: executing program 0 (id=186): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x694c, 0x4) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="e6d4", 0x2}, {&(0x7f0000000280)='%', 0x1}], 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0xcc0, 0xc) 2m50.752016744s ago: executing program 0 (id=205): openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 2m50.549628549s ago: executing program 33 (id=205): openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 2m21.775105931s ago: executing program 3 (id=374): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001440)={r2, 0x3, 0xab, 0x6, 0x1c00, 0x5}, &(0x7f0000001480)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x8, 0x1, 0x2, 0xfffffc00, r3}, 0x10) 2m21.520292557s ago: executing program 3 (id=376): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x4d) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x4}, 0x1c) listen(r1, 0x50) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d000000198401fa2441ce000000000000000000000002fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 2m21.293267953s ago: executing program 3 (id=377): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xda, 0x3, 0x2b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xf0f, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m21.022844049s ago: executing program 3 (id=389): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10801, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0xff, 0x1f5, &(0x7f0000000600)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m20.608203439s ago: executing program 3 (id=380): close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 2m18.900777391s ago: executing program 3 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 2m18.53294457s ago: executing program 34 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 27.178399487s ago: executing program 6 (id=1052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000080), 0x0}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$xdp(r1, &(0x7f0000002780)={&(0x7f0000000100)={0x2c, 0x0, r6, 0x16}, 0x10, &(0x7f0000002740)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="f1876647d51473e326ef80b9be8cc3318ef28b7c1c38411c6e55b0d73a03ec0d42b703524c60cd0b213d7c6f6b474757f9a9d6abee14f43d79cb54109b4de59a38fc72b59ed29aa86e74d0326bda30367db89ea2dc2f1498b5524c38b2137851e3ea6a544155b24385a3f90007fb1dec6d4fc1d6c41326a182043c7e67d22538361911f3b682d9a75e114023a9e00a977999182e550d2e41f26432be87abd51834a787d8a7da360aa075e4538be9b39e8259c4ff2ec3b6334b86dcecfa3cb75e9ab3bf093c0158631a166241adf3f4", 0xcf}, {&(0x7f0000002640)="e1ddf9e47567d38f18", 0x9}, {&(0x7f0000002680)="436c6f71f3ca8e14690754c593a23de2b9a011309f55da7fd77176171b883af0e75d2ef1efd9749f68f9b6f6f44e357f26be81cf42daba9b9b075f976f7b668a181482e8f4ab0ce5e617aa4bfe0a91c6e0bf23abe2fb81e7baa7ac8713fa3b0c65a6950ab086141a049b05f838c9b0d78b6ac2c3ced9f2889a969b4c3e25e0fe359c83050c069a80e3391015f2cb85947d11074480f93504b2c981e2c9", 0x9d}], 0x4, 0x0, 0x0, 0x810}, 0x804) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x70, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xff}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x81}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xf703}]}}]}, 0x70}}, 0x0) 26.802697606s ago: executing program 6 (id=1064): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) writev(r0, &(0x7f00000017c0)=[{&(0x7f00000011c0)="b99a8d432b67f6fafdfb7cc5265d7bc088790cc74bdaa97ae3802cfb7aa7c8af04f9cbe76a528fa7fe812e3eff2356f4e33c30fa2c1e27eb9ff55610831906c1666663ce983dc27186916e29022528315b776e430124f2485c3f45a2", 0x5c}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xc0240, 0x6ab858183a7ef6ba) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setuid(0xee01) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, 0x0) epoll_create1(0x80000) r2 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r2) pwrite64(r0, &(0x7f0000000100)="335061ce30c888bf41abcb1e46b2ef86e4127ab84c8a709ea0d845a771fb08ad009f20fcebf6d610d9957226aaf90182c24dddfc86c16cc887f6a27b669a9e3837ec03a765e8741460893b8c5bfa23de9d575707ae642bb9a73c0078d4bf878afc1e237e9a6985184d77ff3d8b5929e0e7ae6b4176a2acc3d03f3b3e09662a1622326777f9a603e79e30f6e3a29672a54dd36e975dae443b91d146f0e855c91b9e7ab247d621312e32618f6f88256e8a7e43a004c266972ab7657b22ad4753fc494c0f65cb0eec3dfda3f9f1103ee0c101befab1b4b31c8499ef09e93910f17e29bc6f6d12b61e9e3db47b6539250d4c1820182701c09df1d5952aca98dccdbc4cdd738ae445f18eb0281b32d68be1a5a0e3a2dcbdd770feae6cdd1a4f47716c897c14ef90b5880de4aa3e53edbfe32af6fed5e216738fc32091b777424fe27114e003fbcb36fa64321ee2247b4544614ae57b0fd794721b3837ee16232da3e142d35e353097c44a6251ca93e2a50c21f6bbf82f0250d7d5e955dc65a3852e09abe6190dc70432bd176bf71680cd1eaaad3780b88495882b0b27ae75cf967fff6bf43ed29eb2c382834f95241af2cf13b282b719e8c3e05a6d44a8eba573227e0fe3a867e6a014043d28d91a98129597f1f5e36dae193cbd260b06cc9429454be00f413e0179dbc39146f0566750f60467fa15f8ae3be59aa4651cb174e3b5a3139b81005d6b179a9af212fc669aa19bf69a02a005fb2d37446d5aa069d22327561574e44ea159ce037c88653fddd239f561e5ab8040197ad43b63095fd34fcbec8e1796dcf9c1987a6a3152f2c1bf014be1faa1df7be5f24cab44d8d3687677b1abb4abd86054b4c6045534c912b487f3bd8baabfa1366522a8f93b8eeb530cc017b8e325d961b16b5c7c865fa507f15789e29fcf34cdbab3b9e75eb01f055596b0dfe6a0f8aae8b547b4096ff3741d56c2fbec36ca6b6abe83c769e4a27ccc31d50152836ddb2dd16d813445ce530a2c7b241e0a9264e4437867e380c329b8ca586ddc13b100daee1cefa96206ce931f4ea69fed45b46c94d837d9ab306b957f1941eb1adf6917fb33d5a4d7e36d34e7b4a04466f496cf001515c044ba96ebe70600ceaef1382adb3d5f6bdf4a9325e650c628986a25f2be0c66c175305bfbf565cff7619edf562f50a09d2f6d1f67eb04b6195679ea972ea534ca2ec07d0cdebf6bdee7d00a951b68dd1a63b40d165b54887183495e0220a41ea57b3a7f3d0408ac1c6048ae1a0f61fce6fb7216490a96facf57b59d824222d4bed641161cd25b84aed6c998ffd896de62a3f480503a11c0b77a1313e320a45dd73713d5b7f0b4f82b84fb15cebb8917aa0ef0c373872a0504a25a43c483aed225b973d8fef04688ec223c4f7c503b8fe7b09f6dd6f04a10f1729cdd0c029c91be3fe20639875d214551b0c838bc2afc51cb7b441d18363329aefb3ad75ba41f7a17f9617d178f1b86e57bf9d3f8da30add2d95187e0cb73aee7ebaf5f36e20af39424967434288ec7a1732db739af63cd116c35c2f60a5d7e33473983bc4b011581e41033026d0513856e14858941a29b65d05b74a6e15f70da14084e02760847ec86dc632bcf39d712dc17617fa8095d834e73759feab32d5c79c28356726a5bb94b3d02d8222cd6c8194e18ec7474c780954362fdccfd6329bbbce5aa1c6fb1ca196c32fbeebd9918cec7dae775d826eaeb9ac9747b5fb7cdba603876b4c4a59561fd838a400e2bde040bae21003531cac1652f87d3e55820eff7033537994006b6f50387cf31b1e91c849353b6a601b1b3ff5dfc834a5810bc1a86bc8493e0f4484776f31989b69789280c44ddd864496b048df93cad26184a5f3c4c5fbdb170fc921be04da88760e8c59d7b258b6dfa62b8b5c2dbc77b0d56e0c28f70880ffe7d02b4dc38f6785d9c5e35b791efd8f8ee19f8e7a2b26c081b3d149a9e01e655fcbb437aa7af0e62133ee38c61e1e79180abc2b3f2f7d14138cfd66ee56a7f8ede4a69da6ee115cc3bcff1d4f61099c8d9b229078f3b834fb3b07dbd213fa287fea1212168abe4343451d84d8737d266d82fc886846040e276d1e77e051b546169299fd12197bfff7bd57099729bc018abab071a850f65e07b864ed0f5bf0b73e1dd378a0c81bc21b9eed09a14993c35870630154887abc4fc00a437b18dde14866aef11f4afce53258ad610d32ea2d1b7bccfa0f81e2b10da4eacbb170292d8216af4d48128d06368c6b077db466d50ded38266f13e1a233ef4c73a0de3ca4f019c4013e420182bd58f9cec8cc2548b429b1aeb0f61a4739874bad9d70c07d2596c3087032997e701ee36eecb4cd4c0a6849b0fee5696f9117274c69655750c27f4e0eb42ba99456fef0885d1b37cebc3a1407438ec155d05bf8c3cd60b917ed90cb5960da3c0f164383abe5fbca572e272480281d885f83c82534e56cf2359423c5b97bf5b721cfad8519087639ea2d5dec889844ef439c2ff2be203cd550b55ae842a475bd77f2f9372c244bc3fa1b644db038770ab78de9e99ec09c66455a2b9021fd3e29f7a8bd7e71a10d877c9af4fdf6b71ac7c89b45e018bd479c404ce3a470faf23fc301c886fadf048cd533d51f2c7bad948bf5a6cfce7101c4d2346e25a5297a22837a7d1487de00e957e4f5e98c45d3c31d5465c4c21806db69cd2b98f3474c6f92e9ca5b897b23b5573d6e7656d352942e2473d3a95ab7cbdd052c265e9b775b67fbeaeee9a510350d7c4ddb7bbb2bdc8f026327f780de1b1faee787d786ab04ab2bb3a771d2caf048097d1f458487aabdb2f78d3d9c04611a12d26edefb28f3a9937200fb52f3d60a30505f04d8e919daaecd04736fb07f17dec3fb9366b9a1b2f08b3d321f39d962ebe7eb61365caab8b2fac519402e6433e43d76543af6ca4dfc9b6ec2124dc2c3d856a40877f13c4164c7355ed366439e1f24e20000230abf85e24f77426959170b0d655cc1e140478b66a58646cfcbcaf3175dcfe4976fb01ae2a0610814d51d42976f7a3d9436625374c09f90bbe231ce93f708d742c8f57601d6c204f233e6d58a2598852a0d7d37d4860d09a441477ddcbbbe796058caba9f7b516dc18cd9ca3d5285628d198f57486e8fc7d1c53517405f09bdccbe99d7fc31f0b3a616cf49508648dda0f23e22676144e2934815dedc858f781e061adca65669e269507b826c935db4549894c0cabe6a50aa4498898e6f0320828d70d99f45518e977f2b51e2db3f12280f720ef94f0a92d841c6f3a7414c4b626bc0fc36a6bb150a75926b18bdae71c3564e1621d0442f048366f79e00100e2f130beef9d03dd50d5060ec0bbd8a54ff66a6ef78907fb417ba1e61f34009c28f694340b292d9c21ac9e72f30c78646ef4efd9a047170fd7e6a2f48e2c96cb8579bef2fc1e6619d18288d26cc8aae139f0b544b561a8419913270ca89fb108ac4ed0f35cedf55119689851c8cf9375c1dfc5e717a5dfc532293c137efe27bff8500840c6bc04c90a139aa2b00cc94ed70da12ffacbe49f78f1fe3fad243cd954d33dbf88df0ec6897fa7584552368e21c3c2a9eb04fb121ae4665a7a8bb2ec51fcc848fafa4537a95b7c0e654fa1a3f0d018fd3f186d63fa9b71e12d9ca51ea26c32b35b66b21d593105b3412fcc5d3e6202eb8896432cf86249874d9e7b8d7657ce9c0171d2337f50ec3b75692e9092809b1c8e36d4fee44152f34e7af144406a267322cbaafa99d8aa6065d5486667d482c3e15dbd2f8364eae14a594f28d013d3b88f8d683bec0323285eceb315de4a900a65520c9d7d0a647b218dc9ad12e5e91469add5cfd72b84d8e2fd6cd01db1c7875db452624ed517cac6a5cedcecbde074111db6611283fe668a76a200025f763f8ccfb50f872e3083e2209a3d7a6765014d67eb33c3b65e57e107ad8f792ba7ba08e8afa90b9df68523003acc93ae6e6ba1a01bd72be780092fa3e1dabee9f13ccee3f6c354fcacf01356ea7d6fd96e97c15e24a8c4669007e9922a802dc64f592a6fb4dc52da8ff27c9a264e3d9f10cc51ef356ac1ff1b6f50827ac0d600a3da47e817ddd8c9d98421669b37b8698d3511e44fbd76d7f67120016b14c4388b16081375d87fb548e5d47a9aff8c24e4452e4d0e0dd6dc8a9b6d25406c5d35f436d594cf588322739d0960cf96070f087fa8692f5c7284192536f93218a37c53e09d70a8174b7812a30ce29a94c7b1e5d2b08a51730eed470bd63f093cd0db9681bc292d8d48b5778c922041287ac151725ef3e8869210009c4c8c02d32e30ab1a63f6a98547ebc306f7931059de4a1e03a8fe3ac811a4efbf54b676fbab5995861180664d0168fbfe085662da2bc62ab8f9d2ac01d7ee9f5dfddda4c18b10096863a5fe9c99c3a53e2c266b7e546b85d73838363e5bfa33d444b2284812ff49fbd14c014f4e275995fa036fcbbd9f489ed58d20c03855d73ed3c3098b07d067cd4e7e474959e8b8240dc6200e81f7ece67cba30ce0a84688914a1d7d8628e106cdc717906701f63d73ae8b2b7c32cd1f6a7a8c84fa96f5de80638f06116a32c97b57c68149ec478679f283e7383caef76ac486b42f0f6d97779554902694975c7306dbad4d7f9ce91642668d950a494260e246419916bded65a463620720acbb7c56a906691f68b2229153915b9174414c739c580b0cbc3a50463642e0aa5d17cb7fa61889d296eb664229362b88ccda7a3c7e279d1ffce8574ab576539a106b688aee2332f0772817e971b1f28f01256d04fd9c153f71a8645d9b5e5a9fb268ec0e7e142dc527f56d57f7ebcf6806bea9cec232d37cf318938dbdd2db5aedc1781cb5174bce546eb95be4179657668282b72260cafe9f0a2b737464dd4d1511655319683a99976e5233aef1478725b615b11dc3a068b8eb45ab5a989b7660719debe85a01882f47f4ea26fa8caa3d83d7b043adeec953598690a3c02ac0ee0f7892120eaf738dbadf11354d5264d8fa3143f7b91b162953cb7a592c50f44da69bade7de83b0408e73629dc3d307b897420f5c703eaaa1bc11c5c2edd920cf8e285705111f9c26fd0889ff82bdfef788107096d7075e53545f66e5f633d4f0d89d0d1552a2f498b61a5b6d3d1268b1465aa7134744430a3be0e806b4a4fd40b754c79d421ac16fe121a5632932fc8fece8dfab0", 0xe68, 0x2) 26.633077941s ago: executing program 6 (id=1057): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) 26.554523033s ago: executing program 6 (id=1058): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$eJzs3AuYjtX6MPB1r7Uehia9TXIY1r3uhzcNlkmSHFLJIUmSJMkpSdIkSUJiyClpSEKOkyaHISSnxqRxPh9yTppsaZIkJKdkfdeott3X/rf3/9v7+/tfe+7fda1r1v08z1rv/cz9XO+7nue9Zr7tPqJu83q1mhKR+JfALz+ShRAxQoghQoirhBCBEKJyXOW43P0FFCT/ay/C/r0eTL/cGbDLieuft3H98zauf97G9c/buP55G9c/b+P6521cf8bysq0zi1/NLe82fv6fl/Hn/3+QnAoTv1xf4doe/40hXP+8jeuft3H985Dgj5u4/nkb1z9v4/r/57vjT/Zx/f9Dxfxzh3H9GcvL/vos+Lz3/n/B8+h/d8v/h+84fnsEfflz+9/QLvPlxxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsjzjjL9FCiN/6lzsvxhhjjDHGGGOM/fv4/Jc7A8YYY4wxxhhjjP3/B0IKJbQIRD6RX8SIAqKguELEiitFIXGViIirRZy4RhQW14oioqgoJoqLeFFClBRGoLCCRChKidIiKq4TZcT1IkGUFeVEeeFEBZEobhAVxY2ikrhJVBY3iyriFlFVVBPVRQ1xq6gpbhO3iztELXGnqC3qiLqinrhL1Bd3iwbiHtFQ3CsaiftEY3G/aCIeEE3Fg6KZeEg0Fw+LFuIR0VK0Eq1FG9H2/2n8i6K3eEn0EX1Fsugn+ouXxQAxUAwSg8UQ8YoYKl4Vw8RrIkUMFyPE62KkeEOMEm+K0WKMGCveEuPEeDFBTBSTxGSRKt4WU8Q7Ik28K6aKaWK6mCHSxUwxS7wnZos5Yq54X8wTH4j5YoFYKBaJxeJDkSGWiEzxkVgqPhZZYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIreITsU1sFzvETrFL7BZ7xKdir/hM7BOfi2zxxX9z/On/a3wPECBAggQNGvJBPoiBGCgIBSEWYqEQFIIIRCAO4qAwFIYiUASKQTGIh3goCSUBAYGAoBSUgihEoQyUgQRIgHJQDhw4SIREqAg3QiWoBJWhMlSBKlAVqkE1qAE1oCbUhNvhdqgFtaA21Ia6UBfugrvgbmgADaAhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hNbQGtpCW2gH7aA9tIcO0AE6QkfoBJ0gCZKgM3SGLtAFukJX6AbdoDt0hx7QE3rCi/AivAQvQV+oLftBf+gPA2AADILBMBhegaHwKrwKr0EKDIcR8Dq8Dm/AKDgFo2EMjIWxUFOOhwkwEUhOhlRIhSkwBdIgDabCNJgGMyAdZsIsmAWzYQ7MgfdhHnwAH8ACWACLYDEshgxYApmQCUvhNGTBMlgOK2AlrIKVsAbWwhpYDxtgPWyCTbAFtsAn8Alsh+2wE3bCbtgNn8Kn8Bl8BimQDdmwH/bDATgAB+Eg5EAOHIJDcBgOwxE4AkfhKByD43ACjsNJOAmn4DScgTNwDs7BeXg+/utmu8uuSxEyl5Za5pP5ZIyMkQVlQRkrY2UhWUhGZETGyThZWBaWRWQRWUwWk/EyXpaUJSVKlCRDWUqWklEZlWVkGZkgE2Q5WU466WSiTJQVZUVZSVaSleXNsoq8RVaV1eTjroasIRsHv7z/1JK1ZG1ZR9aV9WQ9WV/Wlw1kA9lQNpSNZCPZWN4vm8h+MAgelLmVaS6HQws5AlrKVrK1bCPfgEdlOzkK2svHZQf5hBwDo6GTbOeS5NOys5wAXeSzciI8J7vJydBdviB7yJ6yl3xR9pbtXR/ZV06FfrK/nAED5EA5SA6Ws6GOzK1YXfmaTJHD5Qj5ulwEb8hR8k05Wo6RY+VbcpwcLyfIiXKSnCxT5dtyinxHpsl35VQ5TU6XM2S6nClnyffkbDlHzpXvy3nyAzlfLpAL5SK5WH4oM+QSmSk/kkvlxzJLLpPL5Qq5Uq6Sq+UauVauk+vlBrlRbpKb5Ra5VX4it8ntcofcKXfJ3XKP/FTulZ/JffJzmS2/kPvlX+QB+aU8KL+SOfJreUh+Iw/Lb+UR+Z08Kr+Xx+RxeUL+IE/KH+UpeVqekWflOfmTPC9/lhekl0KBkkoprQKVT+VXMaqAKqiuULHqSlVIXaUi6moVp65RhdW1qogqqoqp4ipelVAllVGorCIVqlKqtIqq61QZdb1KUGVVOVVeOVVBJaobVEV1o6qkblKV1c2qirpFVVXVVHVVQ92qaqrb1O3qDlVL3alqqzqqrqqn7lL11d2qgbpHNVT3qkbqPtVY3a+aqAdUU/WgaqYeUs3Vw6qFekS1VK1Ua9VGtVWPqnbqMdU+92pST6iO6knVST2lktTTqrN6RnVRz6qu6jnVTT2vuqsXVA/VU/VSP6sLyqs+qq9KVv1Uf/WyGqAGqkFqsBqiXlFD1atqmHpNpajhaoR6XY1Ub6hR6k01Wo1RY9VbapwaryaoiWqSmqxS1dtqinpHpal31VQ1TU1XM1S6mqkG/TrT3H9i/Dt/Z/ywi6++RW1Vn6htarvaoXaqXWq32qP2qL1qr9qn9qlsla32q/3qgDqgDqqDKkflqEPqkDqsDqsj6og6qo6qY+q4Oqt+UCfVj+qUOq1Oq7PqnDqnzv/6OxAatNRKax3ofDq/jtEFdEF9hY7VV+pC+iod0VfrOH2NLqyv1UV0UV1MF9fxuoQuqY1GbTXpUJfSpXVUX6fL6Ot1gi6ry+ny2ukKOlHf8C+P/0f5tdVtdTvdTrfX7XUH3UF31B11J91JJ+kk3Vl31l10F91Vd9XddDfdXXfXPXQP3Uv30r11b91H99HJOln31y/rAXqgHqQH6yH6FT1UD9XD9DCdolP0CD1Cj9Qj9Sg9So/Wo/VYPVaP0+P0BD1BT9KTdKpO1VP0FJ2m0/RUPVVP19N1uk7Xs/QsPVvP1nP1XD1Pz9Pz9Xy9UC/Ui/VinaEzdKbO1Ev1Up2ll+lleoVeoVfpVXqNXqPX6XV6g96gN+lNOktv1Vv1Nr1N79A79C69S+/Re/RevVfv0/t0ts7W+/V+fUAf0Af1QZ2jc/QhfUgf1of1EX1EH9VH9TF9TJ/QJ/RJfVKf0qf0GX1Gn9Pn9Hl9Xl/QF3KXfYEMZKADHeQL8gUxQUxQMCgYxAaxQaGgUBAJIkFcEBcUDq4NigRFg2JB8SA+KBGUDEyAgQ0oCINSQekgGlwXlAmuDxKCskG5oHzgggpBYnBDUDG4MagU3BRUDm4OqgS3BFWDakH1oEZwa1AzuC24PbgjqBXcGdQO6vz2PVRwd9AguCdoGNwbNAruCxoH9wdNggeCpsGDQbPgoaB58HDQIngkaBm0CloHbYK2/+z8Qd2gXnBXUP9P5/f+VNHHXB/T1ySbfqa/edkMMAPNIDPYDDGvmKHmVTPMvGZSzHAzwrxuRpo3zCjzphltxpix5i0zzow3E8xEM8lMNqnmbTPFvGPSzLtmqplmppsZJt3MNLPMe2a2mWPmmvfNPPOBmW8WmIVmkVlsPjQZZonJNB+ZpeZjk2WWmeVmhVlpVpnVZo1Za9aZ9WaD2Wg2mc1mi9lqPjHbzHazw+w0u8xus8d8avaaz8w+87nJNl+Y/eYv5oD50hw0X5kc87U5ZL4xh8235oj5zhw135tj5rg5YX4wJ82P5pQ5bc6Ys+ac+cmcNz+bC8bnLu5zP95Ro8Z8mA9jMAYLYkGMxVgshIUwghGMwzgsjIWxCBbBYlgM4zEeS2JJzEVIWApLYRSjWAbLYAImYDkshw4dJmIiVsSKWAkrYWWsjFWwClbFqlgdq+OteCvehrfhHXgH3ol3Yh2sg/WwHtbH+tgAG2BDbIiNsBE2xsbYBJtgU2yKzbAZNsfm2AJbYEtsia2xNbbFttgO22F7bI8dsAN2xI7YCTthEiZhZ+yMXbALdsWu2A27YXfsjj2wB/bCXtgbe2Ofs30wGZOxP/bHATgAB+EgHIJDcCgOxWE4DFMwBUfgCByJI3EUjsLROAbH4ls4DsfjBJyIk3AypmIqTsEpmIZpOBWn4nScjumYjrNwFs7G2TgX5+I8nIfzcT4uxIW4GBdjBmZgJmbiUlyKWZiFy3E5rsSVuBpX41pci+txPW7EjbgZN+NW3Irb1DbcgTtwF+7CPbgH9+Je3If7MBuzcT/uxwN4AA/iQczBHDyEh/AwHsYjeASP4lE8hsfwBJ7Ak3gST+EpPINn8Bz+hOfxZ7yAHmOsFAXtFTbWXmkL2atsjC1g/zYuZovbeFvClrTGFrFFfxejtTbBlrXlbHnrbAWbaG/4Q1zVVrPVbQ17q61pb7O3/yGub++2Dew9tqG919azd/0ubmTvs43tw7aJfcQ2ta1sM9vGNrcP2xb2EdvStrKtbRvb0T5pO9mnbJJ92na2z/whzrBL7Fq7zq63G+xe+5k9Y8/aw/Zbe87+ZPvYvnaIfcUOta/aYfY1m9Jw+O9jO9yOtW/ZcXa8nWAn2kl28h/i6XaGTbcz7Sz7np1t5/whXmw/tPNspp1vF9iFdtHFODenTPuRXWo/tll2mV1uV9iVdpVdbdf8NdcVdpPdbLfYPfZTu81utzvsTrvL7r4Y557HPvu5zbZf2EP2G3vAfmkP2iM2x359Mc49vyP2O3vUfm+P2eP2hP3BnrQ/2lP29MXzzz33H+zP9oL1VhCQJEWaAspH+SmGClBBuoJi6UoqRFdRhK6mOLqGCtO1VISKUjEqTvFUgkqSISRLRCGVotIUpeuoDF1PCVSWylF5clSBEukGqkg3UiW6iSrTzVSFbqGqVI2qUw26lWrSbXS7FlSL7qTaVIfqUj26i+rT3dSA7qGGdC81ovuoMd1PTegBakoPUjN6iJrTw9SCHqGW1IpaUxtqS49SO3qM2tPj1IGeoI70JHWipyiJnqbO9Ax1oWepKz1H3eh56k4vUA/qSb3oRepNL1Ef6kvJ1I/608s0gAbSIBpMQ+gVGkqv0jB6jVJoOI2g12kkvUGj6E0aTWNoLL1F42g8TaCJNIkmUyq9TVPoHUqjd2kqTaPpNIPSaSbNovdoNs2hufQ+zaMPaD4toIW0iBbTh5RBSyiTPqKl9DFl0TJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSJ7SNttMO2km7aDftoU9pL31G++hzyqYvaD/9hQ7Ql3SQvqIc+poO0Td0mL6lI/QdHaXv6RgdpxP0A52kH+kUnaYzdJbO0U90nn6mC+RJhBDKUIU6DMJ8Yf4wJiwQFgyvCGPDK8NC4VVhJLw6jAuvCQuH14ZFwqJhsbB4GB+WCEuGJsTQhhSGYamwdBgNrwvLhNeHCWHZsFxYPnRhhTAxvCGsGN4YVgpvCiuHN4dVwlvCqmG18OF7a4S3hjXD28LbwzvCWuGdYe2wTlg3rBfeFdYP7w4bhPeEDcN7w0rhfWHj8P6wSfhA2DR8MGwWPhQ2Dx8OW4SPhC3DVmHrsE3YNnw0bBc+FrYPHw87hE+EHcMnw07hU2FS+HTYOXzmH+5PDvuF/cOXw5dD7+9RC6OLooujH0YzokuimdGPokujH0ezosuiy6Mroiujq6Kro2uia6ProuujG6Ibo5uim6Nbot7Xyy8cOOmU0y5w+Vx+F+MKuILuChfrrnSF3FUu4q52ce4aV9hd64q4oq6YK+7iXQlX0hmHzjpyoSvlSruou86Vcde7BFfWlXPlnXMVXKJr49q6tq6de8y1d4+7Du4J94R70j3pnnJPuaddZ/eM6+KedV3dc66be949715wPVxP18u96Hq7l1wf19clu2TX3/V3A9wAN8gNyvfrGswNc8NciktxI9wIN9KNdKPcKDfajXZj3Vg3zo1zE9wEN8lNcqku1U1xU1yaS3NT3VQ33U136S7dzXKz3Gw32811c928hHluvpvvFrqFbrFb7DJchst0mW6pW+qyXJZb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+a2uR1uh9vldrk9bo/b6/a6fW6fy3bZbr/b7w64A+6g+8rluK/dIfeNO+y+dUfcd+6o+94dc8fdCfeDO+l+dKfcaXfGnXXn3E/uvPvZXXDepUbejkyJvBNJi7wbmRqZFpkemRFJj8yMzIq8F5kdmROZG3k/Mi/yQWR+ZEFkYSRGCPFhJCOyJJIZ+SiyNPJxJCuyLLI8siKyMrIq4n2JbaEv5Uv7qL/Ol/HX+wRf1pfz5b3zFXyiv8FX9Df6Sv4mX9nf7Kv4W3xVX81X94/4lr6Vb+3b+Lb+Ud/OP+bb+8d9B/+E7+if9J38Uz7JP+07+2d8F/+s7+qf89388767f8H38D19L/+i7+1f8n18X5/s+/n+/mU/wA/0g/xgP8S/4of6V/0w/5pP8cP9CP+6H+nf8KP8m360H+PH+rf8OD/eT/AT/SQ/2af6t/2UAu/4NP+un+qn+el+hk/3M/0s/56f7ef4uf59P89/4Of7BX6hX+QX+w99hl/iM/1Hfqn/2Gf5ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+k/8Nr/d7/A7/S6/2+/xn/q9/jO/z3/us/0XHn65+pIP+q98jv/aH/Lf+MP+W3/Ef+eP+u/9MX/cn/A/+JP+R3/Kn/Zn/Fl/zv/kz/uf/QX+mzXGGGOMsX9K2sE/39/v72yTv7Zc/YUQV24vnvO3+7UQYmORX/oDZXzHiBDi6b7dH/yt1a6dnJz867FZSgSlFwghIpfGX7wN+TVeJjqIJ0WSeFxU/Lv5DZQ9z9GfzA/HvI/eLETBvxmTu47/Lb40/43/xfyPPjE2o0p4Ju7385//db2Zm390gRAJpS+NKSAuxZfmr/RfzF+03Z/ln6VEgS9ThWj/N2NixaX40vyJ4jHxjEj63ZGMMcYYY4wxxtgvBsrqXf/B/efF+/N4fTG8uDm/+Gv8D+/PGWOMMcYYY4wxdvk917PXU48mJT3elTvc4Q53/tq53O9MjDHGGGOMsX+3S4v+y50JY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWd/1P/Duxy32OjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2OX2fwIAAP//qCEzJQ==") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r2, &(0x7f0000003cc0)=""/4128, 0x1020) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x3) 26.060549765s ago: executing program 6 (id=1062): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000400), 0x4) 23.545893406s ago: executing program 6 (id=1075): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(r1) 23.456155268s ago: executing program 35 (id=1075): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(r1) 6.510802582s ago: executing program 4 (id=1179): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x90) r2 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 5.391795949s ago: executing program 7 (id=1185): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 5.34844216s ago: executing program 8 (id=1187): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000440)={r4, 0x3ff}, 0x8) 4.823605752s ago: executing program 8 (id=1189): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) 4.724874665s ago: executing program 7 (id=1190): r0 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x0, "3d0600"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000000c0)="519703000000", 0x6) ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 3.874006316s ago: executing program 7 (id=1201): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) fchdir(r1) r2 = fanotify_init(0x40, 0x400) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/175, 0xaf}], 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r3, 0x0, 0x0) 3.357068938s ago: executing program 1 (id=1197): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8001, 0x175) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000680)='\xfc\xa5\x13\x9c\xa1\xfdcP\x9a\xf0\x12Eu[2E\x89\xe7\xa0W%\xd2\x8d\xc2\xab\xb9y\xe9\xc0\\\r\x18u\xd4C=\xe9\xee+\xd4J\xfd\x1ew\x99\xe8<\xcdjk(\xfe\xbf\xe9\x81j;\xe7n\bG\xb5<\xcdN.\xd9Y\xee\xbd\a\xa0\xcdv\x81\xaf\x17\xfc\xa3r\xc8m\xa8\xa0t\x02\xf1\f/@\x00\x00\x009\xca\xd1q\xa1`\x99\xad*\x10\xb1\x02\x05\xde:1/N8\x03\xcbe\xb7\x9c\xcf\x15\x90E\x9e\xe06\x85!\xbe\xf3\x9d\xcc`C\x15\x959\xa4\xd0j\xf9l\x82\xe1\xeaL\xc2\xab\xc7F;\x87]\xd7\xda\x98\xddI=;\x13j\xcf\x9cw\xf8\xf7\x17\xdah\x01\x9bL\x00\x969\x8b\x04\x85\xe5\xcc,\xe0\xd3\x02%\xf7\\7\xd7d\xdbX\x9b[\x8b\xb6\xc7\xf7\x00'/223, 0x0) 3.356509418s ago: executing program 4 (id=1198): pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001680)=""/4104, 0x1008}, {&(0x7f0000000140)=""/184, 0xb8}], 0x2}}], 0x1, 0x40030122, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) 3.309697789s ago: executing program 5 (id=1199): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3.308764469s ago: executing program 7 (id=1210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = socket$kcm(0x21, 0x2, 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/61}, {&(0x7f0000000040)=""/37}], 0x0, &(0x7f0000000180)=""/193}}, {{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)=""/22}, {&(0x7f0000000340)=""/122}, {&(0x7f0000000500)=""/4096}, {&(0x7f0000001500)=""/238}, {&(0x7f0000001600)=""/17}, {&(0x7f0000001640)=""/242}, {&(0x7f0000001740)=""/171}, {&(0x7f0000001800)=""/153}, {&(0x7f00000018c0)=""/225}, {&(0x7f00000019c0)=""/44}]}, 0x8}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/66}, {&(0x7f0000001c80)=""/184}, {&(0x7f0000001d40)=""/116}, {&(0x7f0000001dc0)=""/8, 0xfffffffffffffee3}], 0x0, &(0x7f0000001e40)=""/84, 0x48}, 0x6}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x0, &(0x7f0000005480)=[{&(0x7f0000001f40)=""/8}, {&(0x7f0000001f80)=""/43}, {&(0x7f0000001fc0)=""/244}, {&(0x7f00000020c0)=""/54}, {&(0x7f00000000c0)=""/27}, {&(0x7f00000003c0)=""/61}, {&(0x7f0000000400)=""/61}, {&(0x7f0000005340)=""/209}, {&(0x7f0000005440)=""/45}], 0x0, &(0x7f0000002140)=""/59}, 0x401}, {{&(0x7f0000002180)=@tipc, 0x0, &(0x7f0000002300)=[{&(0x7f0000002200)=""/1}, {&(0x7f0000002240)=""/172}], 0x0, &(0x7f0000002340)=""/53}, 0x7fd}, {{&(0x7f0000002380)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x0, &(0x7f0000003880)=[{&(0x7f0000002400)=""/68}, {&(0x7f0000002480)=""/246}, {&(0x7f0000002580)=""/225}, {&(0x7f0000002680)=""/4096}, {&(0x7f0000003680)=""/102}, {&(0x7f0000003700)=""/161}, {&(0x7f00000037c0)=""/135}], 0x0, &(0x7f0000003900)=""/239}, 0x3}, {{&(0x7f0000003a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/32}, {&(0x7f0000003ac0)=""/246}, {&(0x7f0000003bc0)=""/253}, {&(0x7f0000003cc0)=""/212}, {&(0x7f0000003dc0)=""/127}, {&(0x7f0000003e40)=""/190}, {&(0x7f0000003f00)=""/161}, {&(0x7f0000003fc0)=""/4096}, {&(0x7f0000004fc0)=""/42}], 0x0, &(0x7f00000050c0)=""/173}, 0x16}], 0x400000000000213, 0x40002002, 0x0) 3.056677656s ago: executing program 4 (id=1200): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18) 2.942107369s ago: executing program 8 (id=1202): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x78f5, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) 2.821747931s ago: executing program 4 (id=1203): bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8c0c0, 0x2) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.691268845s ago: executing program 7 (id=1204): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) r1 = socket$xdp(0x2c, 0x3, 0x0) close(0x3) syz_clone(0x80100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_dev$MSR(&(0x7f0000002800), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.678245455s ago: executing program 5 (id=1205): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x8480, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="107c70f21f6681b90bea5aaeaf8681826c7a5244f5a3345e013ed2d6a303668e16dca703afafc079c730a07e76e70c41", @ANYRES8, @ANYRESDEC], 0x3, 0x237, &(0x7f0000000d00)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x3c4c) setns(0xffffffffffffffff, 0x8000000) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.915652534s ago: executing program 5 (id=1206): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 1.914148874s ago: executing program 1 (id=1217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x470, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x50deecda08de2091}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x9, 0xe5ae, 0x42, 0x7e71b34}, {0x8, 0x3, 0x7cb, 0x200, 0xf5b, 0x7}, 0x2000007, 0x80000000, 0x1cd9}}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x405af78d, 0x3d93, 0x5, 0x2, 0x5, 0x4d, 0x4, 0x3, 0x5, 0x8001, 0xffff, 0x0, 0x3, 0x1b22, 0x8, 0xc, 0x3, 0xf, 0x3, 0x9, 0x7f, 0x40, 0x3, 0x5, 0x2, 0x3, 0x6, 0x17, 0x3, 0x7f, 0x2, 0x9, 0x0, 0x4, 0xffff, 0x3, 0x5, 0x100, 0xe, 0xfffffc01, 0x9, 0x6, 0x2, 0x949d, 0x3, 0x9, 0x101, 0x79, 0xef, 0xffff, 0x747, 0x356f, 0x2, 0x3, 0x9ca8, 0x5, 0xe6, 0xe, 0x4, 0x7, 0x2, 0xd, 0x5, 0x9, 0xc, 0x5, 0x6, 0x9b99, 0x1, 0x2, 0x4, 0xa63, 0x4, 0x5, 0xd0a4, 0x2, 0x2, 0x5, 0x10000, 0x1, 0x76, 0x6, 0x4, 0x1ff, 0x8604, 0x80000000, 0x2, 0xfffffffd, 0x8, 0xe4e, 0x3, 0xffff, 0x400, 0x9, 0x1, 0x7, 0x0, 0x8, 0x9, 0x2, 0x3000, 0x9, 0x1000, 0x9, 0xe67, 0x4, 0x3, 0xca, 0x2, 0x5, 0x1000, 0x40, 0x2, 0x100000, 0x7f, 0xb37, 0x7, 0x1, 0x2, 0x7, 0x5, 0x8, 0x4, 0x7, 0x9, 0x100, 0xb, 0xed20, 0x8, 0x7, 0x94f, 0x3, 0xb, 0xb, 0x5, 0x80, 0x1000, 0x4, 0xfff, 0x3, 0xbddc, 0x3, 0x8, 0x9, 0x10000, 0xfffffff7, 0x7ff, 0x9, 0x40, 0x7, 0x5, 0x9762, 0x2, 0x9, 0x8, 0x9a6, 0x3, 0x5, 0x9b1, 0xffff, 0x5, 0x7, 0x8, 0xc, 0x2, 0x9, 0x23, 0x5, 0x5, 0x6, 0xa954, 0x9, 0x1, 0x479, 0xff, 0x5, 0xb0, 0x2, 0x13, 0xba2, 0x8, 0x7, 0x5, 0x6, 0x7, 0x7, 0x4000000, 0x1, 0xffffffff, 0x23e, 0xa13, 0x8, 0x6, 0x7, 0xd9bc, 0x1, 0x40, 0x9, 0xffffffba, 0xff, 0x7, 0x80000000, 0x70000000, 0x8ed, 0x0, 0xea, 0x7, 0x80, 0x9, 0x200, 0x0, 0x7, 0x9, 0x1, 0x3, 0x40, 0xb, 0x28f, 0x789e, 0x3, 0x8ff, 0x0, 0x716, 0x80000000, 0xd, 0x9, 0x1, 0x0, 0x8, 0x3, 0x9b, 0x5, 0x9, 0x1, 0x7, 0x1ff, 0x2, 0x5, 0xb33, 0x5, 0x3, 0x80000001, 0x16, 0x8, 0x2, 0x0, 0x1, 0x7, 0x8, 0x6, 0x81, 0x0, 0xfffffffd, 0x3, 0xe]}, @TCA_TBF_PBURST={0x8, 0x7, 0x251}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.64386612s ago: executing program 8 (id=1207): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000001400"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.621696531s ago: executing program 7 (id=1208): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x90) r2 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 733.870943ms ago: executing program 4 (id=1211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}}, 0x0) r3 = eventfd(0x8c66) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) close_range(r0, r3, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x86, 0x0, 0x1, r3, 0x5}) 732.829752ms ago: executing program 8 (id=1222): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$unix(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) sendmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4], 0x30}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 671.944104ms ago: executing program 5 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000001000000080000004000000042"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 666.917384ms ago: executing program 1 (id=1224): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x7, 0x2e, 0x0, &(0x7f0000000200)="24c2afc3a2e0527bea330054165096fe838bfab80e83d34f30beffcc4de894b90e9593746ac3b86e64f70cf614a7", 0x0, 0xffaf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 325.117202ms ago: executing program 1 (id=1213): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32], 0x9) 324.388802ms ago: executing program 4 (id=1226): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 227.550685ms ago: executing program 5 (id=1214): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x4}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9f}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0x4}, 0x80) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 143.524777ms ago: executing program 5 (id=1215): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) 0s ago: executing program 1 (id=1216): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) kernel console output (not intermixed with test programs): 27] netlink: 'syz.1.146': attribute type 10 has an invalid length. [ 87.049933][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.096325][ T4727] bond0: (slave team0): Enslaving as an active interface with an up link [ 87.178050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.185544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.284192][ T4565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.424676][ T4746] overlayfs: failed to resolve './bus': -2 [ 87.518831][ T4737] loop3: detected capacity change from 0 to 2048 [ 87.775716][ T4737] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.877876][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 87.987367][ T4737] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 88.490818][ T4779] Illegal XDP return value 4294967274, expect packet loss! [ 88.592718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.627811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.737626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.802770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.866217][ T4800] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 88.888100][ T4796] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 88.957206][ T4565] device veth0_vlan entered promiscuous mode [ 89.003206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.017269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.063668][ T4565] device veth1_vlan entered promiscuous mode [ 89.098705][ T4809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 89.223579][ T4565] device veth0_macvtap entered promiscuous mode [ 89.253601][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.274166][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.383738][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.402968][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.426610][ T4826] loop4: detected capacity change from 0 to 512 [ 89.433418][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.456538][ T4565] device veth1_macvtap entered promiscuous mode [ 89.489157][ T4826] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.501053][ T4831] batman_adv: Cannot find parent device [ 89.525088][ T4826] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.538736][ T4826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.558699][ T4831] batman_adv: batadv0: Adding interface: gretap1 [ 89.565743][ T4831] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.593151][ T4826] EXT4-fs (loop4): 1 truncate cleaned up [ 89.594072][ T4833] loop0: detected capacity change from 0 to 256 [ 89.607773][ T4826] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue. Quota mode: none. [ 89.639253][ T4831] batman_adv: batadv0: Interface activated: gretap1 [ 89.665606][ T4565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.679674][ T4833] exfat: Deprecated parameter 'utf8' [ 89.693229][ T4565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.716199][ T4836] file system registered [ 89.724526][ T4836] No source specified [ 89.725178][ T4565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.747666][ T4565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.763136][ T4565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.774055][ T4565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.784403][ T4565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.797178][ T4565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.818776][ T4565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.846078][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.865846][ T4833] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x58d80169, utbl_chksum : 0xe619d30d) [ 89.884874][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.922669][ T4565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.957039][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 89.977139][ T4565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.004092][ T4565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.033401][ T4565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.057852][ T4565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.069872][ T4565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.087313][ T4565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.102581][ T4565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.159761][ T4565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.198013][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.206646][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.288053][ T4851] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 90.345060][ T4565] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.392274][ T4565] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.405832][ T4565] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.421282][ T4565] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.517621][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.672088][ T4635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.691971][ T4635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.752402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.778755][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.803686][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.804407][ T4872] loop4: detected capacity change from 0 to 512 [ 90.835512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.962432][ T4872] EXT4-fs (loop4): 1 truncate cleaned up [ 90.978484][ T4872] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.096251][ T4872] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.184: Invalid inode table block 0 in block_group 0 [ 91.125729][ T4872] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.184: Invalid inode table block 0 in block_group 0 [ 91.159528][ T4872] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 91.218878][ T4872] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.184: mark_inode_dirty error [ 91.360395][ T155] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 91.378058][ T144] rpcbind: server 127.0.0.1 not responding, timed out [ 91.415659][ T155] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 91.575301][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.191'. [ 92.353520][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.727097][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.742543][ T13] usb 4-1: no configurations [ 92.769655][ T13] usb 4-1: can't read configurations, error -22 [ 93.071886][ T4189] syz-executor (4189) used greatest stack depth: 20944 bytes left [ 93.380678][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 93.563721][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 93.588583][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 93.600566][ T4963] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4044617448 (258855516672 ns) > initial count (110676013376 ns). Using initial count to start timer. [ 93.682669][ T4968] APIC base relocation is unsupported by KVM [ 94.190000][ T4970] chnl_net:caif_netlink_parms(): no params data found [ 94.266150][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 94.374980][ T26] audit: type=1326 audit(1786051466.040:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 94.466619][ T26] audit: type=1326 audit(1786051466.070:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 94.498669][ T26] audit: type=1326 audit(1786051466.070:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 94.523682][ T26] audit: type=1326 audit(1786051466.070:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 94.574209][ T26] audit: type=1326 audit(1786051466.070:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 94.644191][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.651815][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.663252][ T4970] device bridge_slave_0 entered promiscuous mode [ 94.682922][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.697126][ T26] audit: type=1326 audit(1786051466.070:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 94.707257][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.767290][ T4970] device bridge_slave_1 entered promiscuous mode [ 94.807925][ T26] audit: type=1326 audit(1786051466.070:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 94.901262][ T4970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.919107][ T26] audit: type=1326 audit(1786051466.090:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 94.953067][ T4970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.024601][ T26] audit: type=1326 audit(1786051466.090:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 95.078624][ T4970] team0: Port device team_slave_0 added [ 95.100569][ T4970] team0: Port device team_slave_1 added [ 95.113873][ T26] audit: type=1326 audit(1786051466.090:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.1.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f837dd370d9 code=0x7ffc0000 [ 95.209943][ T4970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.234180][ T4970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.286295][ T4970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.337434][ T4970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.354546][ T4970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.396472][ T4970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.500307][ T4970] device hsr_slave_0 entered promiscuous mode [ 95.521603][ T4970] device hsr_slave_1 entered promiscuous mode [ 95.545836][ T4970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.558985][ T4970] Cannot create hsr debugfs directory [ 95.684152][ T5039] loop4: detected capacity change from 0 to 256 [ 95.731276][ T5040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 95.797850][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 96.081354][ T5049] loop5: detected capacity change from 0 to 8 [ 96.110905][ T4213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.162415][ T5049] squashfs image failed sanity check [ 96.208240][ T4213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.288892][ T4213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.370321][ T4213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.540736][ T4970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 96.583526][ T4970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 96.615309][ T4970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 96.664291][ T4970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 96.817018][ T1111] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 96.924074][ T4970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.962358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.977713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.002817][ T4970] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.030507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.040240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.049540][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.056616][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.088082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.096245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.114913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.126394][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.133550][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.150333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.187234][ T1111] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.220737][ T1111] usb 6-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 97.221007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.247073][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.256144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.268818][ C0] vxcan0: j1939_simple_recv: Received already invalidated message [ 97.275834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.288702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.302769][ T1111] usb 6-1: config 0 descriptor?? [ 97.329650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.367572][ T1111] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 97.384521][ T4970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.413979][ T4970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.540088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.549595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.560163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.569053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.579253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.591998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.603488][ T5101] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 97.701386][ T4231] usb 6-1: USB disconnect, device number 2 [ 97.736425][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 97.816641][ T5103] device ip6gretap1 entered promiscuous mode [ 97.829668][ T5103] bond1: (slave ip6gretap1): no link monitoring support [ 97.844869][ T5103] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 97.872399][ T5103] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 97.881714][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 98.146550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.157312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.182819][ T4970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.297448][ T4213] device hsr_slave_0 left promiscuous mode [ 98.386529][ T4213] device hsr_slave_1 left promiscuous mode [ 98.401704][ T4213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.448651][ T4213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.496156][ T4213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.525010][ T4213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.651118][ T4213] device bridge_slave_1 left promiscuous mode [ 98.668308][ T4213] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.712632][ T4213] device bridge_slave_0 left promiscuous mode [ 98.766172][ T4213] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.885520][ T4213] device veth1_macvtap left promiscuous mode [ 98.935546][ T4213] device veth0_macvtap left promiscuous mode [ 98.972375][ T4213] device veth1_vlan left promiscuous mode [ 99.004093][ T4213] device veth0_vlan left promiscuous mode [ 99.740140][ T4213] team0 (unregistering): Port device team_slave_1 removed [ 99.778727][ T4213] team0 (unregistering): Port device team_slave_0 removed [ 99.811343][ T4213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.875773][ T4213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.958454][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 100.107954][ T4213] bond0 (unregistering): Released all slaves [ 100.232067][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 100.244676][ T5184] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 100.288735][ T5184] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 100.668573][ T5203] ======================================================= [ 100.668573][ T5203] WARNING: The mand mount option has been deprecated and [ 100.668573][ T5203] and is ignored by this kernel. Remove the mand [ 100.668573][ T5203] option from the mount to silence this warning. [ 100.668573][ T5203] ======================================================= [ 100.696115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.723689][ T5204] loop5: detected capacity change from 0 to 64 [ 100.756872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.799085][ T5204] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 100.807158][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.825781][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.838758][ T4970] device veth0_vlan entered promiscuous mode [ 100.846294][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.859270][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.899319][ T4970] device veth1_vlan entered promiscuous mode [ 100.955718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.965260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.983268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.002992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.028611][ T4970] device veth0_macvtap entered promiscuous mode [ 101.088810][ T4970] device veth1_macvtap entered promiscuous mode [ 101.145010][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.157124][ T1111] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 101.185064][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.216064][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.248768][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.285626][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.287520][ T5216] mmap: syz.1.264 (5216) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 101.313514][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.355912][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.383181][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.419230][ T4970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.439047][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.451194][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.469567][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.515222][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.549256][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.601378][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.630135][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.681443][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.717253][ T1111] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 101.720729][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.747076][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 101.777054][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.787883][ T1111] usb 6-1: Product: syz [ 101.792104][ T1111] usb 6-1: Manufacturer: syz [ 101.814219][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.826679][ T1111] usb 6-1: SerialNumber: syz [ 101.846996][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.849148][ T1111] usb 6-1: config 0 descriptor?? [ 101.905813][ T4970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.963492][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.994122][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.037489][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 102.045915][ T4970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.079759][ T4970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.134193][ T4970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.177724][ T1111] usb 6-1: USB disconnect, device number 3 [ 102.189660][ T4970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.415222][ T5233] bond2: (slave ip6gretap2): making interface the new active one [ 102.546188][ T5233] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 102.596281][ T5233] syz.4.270 (5233) used greatest stack depth: 20304 bytes left [ 102.724144][ T5241] netlink: 'syz.1.272': attribute type 4 has an invalid length. [ 102.830315][ T5244] loop4: detected capacity change from 0 to 256 [ 102.840478][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.856988][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.864488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.937432][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.945521][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.971015][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.044286][ T5247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 103.108562][ T5244] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 103.163845][ T5251] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.170899][ T5251] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.127145][ T4233] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 104.321276][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.443114][ T5289] syz.3.284 uses obsolete (PF_INET,SOCK_PACKET) [ 104.487115][ T4233] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 104.688939][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.776945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 104.796940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 104.801190][ T4233] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 104.859394][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.932910][ T5287] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.967140][ T4233] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 104.986501][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.994972][ T4233] usb 6-1: Product: syz [ 104.999485][ T4233] usb 6-1: Manufacturer: syz [ 105.004382][ T4233] usb 6-1: SerialNumber: syz [ 105.016695][ T4233] usb 6-1: config 0 descriptor?? [ 105.037403][ T5270] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.037651][ T5291] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 105.044778][ T5270] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.578674][ T4233] dm9601: probe of 6-1:0.0 failed with error -71 [ 105.631472][ T4233] usb 6-1: USB disconnect, device number 4 getty: ttyS0: read error: Resource temporarily unavailable [ 106.265125][ T4202] Bluetooth: hci5: setting up ROME/QCA6390 Hüü[ 106.694261][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 107.020595][ T5384] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 107.161794][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.093758][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 108.681396][ T7] Bluetooth: hci5: command 0xfc00 tx timeout [ 108.771595][ T5437] 9pnet_virtio: no channels available for device c::: [ 108.907336][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'. [ 108.982417][ T5447] loop3: detected capacity change from 0 to 128 [ 109.195195][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'. [ 109.257362][ T5452] syz.1.327 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 109.608282][ T5461] loop3: detected capacity change from 0 to 128 [ 109.677063][ T5461] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 109.677063][ T5461] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 109.677063][ T5461] [ 109.764179][ T5415] loop6: detected capacity change from 0 to 40427 [ 109.790412][ T5461] EXT4-fs (loop3): Ignoring removed oldalloc option [ 109.849099][ T5461] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,noacl,oldalloc,nodiscard,,errors=continue. Quota mode: writeback. [ 109.889662][ T5415] F2FS-fs (loop6): Invalid log_blocksize (64), supports only 12 [ 109.953796][ T5415] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 110.007276][ T5461] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.054507][ T5415] F2FS-fs (loop6): invalid crc value [ 110.112994][ T5415] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 110.209403][ T5461] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 18: comm syz.3.330: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 110.331368][ T5461] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 110.427210][ T5473] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 18: comm syz.3.330: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 110.478381][ T5415] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 110.495842][ T5478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.331'. [ 110.527227][ T5415] F2FS-fs (loop6): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 110.871277][ T5488] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.332'. [ 110.906369][ T5486] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.332'. [ 111.136185][ T5458] loop1: detected capacity change from 0 to 40427 [ 111.255250][ T5458] F2FS-fs (loop1): invalid crc value [ 111.298970][ T5458] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 111.626411][ T5458] F2FS-fs (loop1): Start checkpoint disabled! [ 111.695915][ T5458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7 [ 112.200454][ T4635] attempt to access beyond end of device [ 112.200454][ T4635] loop1: rw=2049, want=45112, limit=40427 [ 112.618708][ T5526] netlink: 'syz.6.339': attribute type 1 has an invalid length. [ 113.114939][ T5545] loop4: detected capacity change from 0 to 128 [ 113.198366][ T5545] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 113.247956][ T5545] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.545346][ T5559] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.346'. [ 113.682339][ T5564] netlink: 7 bytes leftover after parsing attributes in process `syz.5.347'. [ 114.007181][ T5112] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.272146][ T5112] usb 4-1: Using ep0 maxpacket: 16 [ 114.310315][ T4263] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 114.407206][ T5112] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 114.587420][ T5112] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 114.626113][ T5112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.661866][ T5112] usb 4-1: Product: syz [ 114.681830][ T5112] usb 4-1: Manufacturer: syz [ 114.692576][ T5112] usb 4-1: SerialNumber: syz [ 114.724256][ T5112] r8152-cfgselector 4-1: config 0 descriptor?? [ 114.847237][ T4263] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 114.883096][ T4263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.907285][ T4263] usb 6-1: Product: syz [ 114.911503][ T4263] usb 6-1: Manufacturer: syz [ 114.930169][ T4263] usb 6-1: SerialNumber: syz [ 115.077072][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.201888][ T5112] r8152-cfgselector 4-1: Unknown version 0x0000 [ 115.212876][ T5112] r8152-cfgselector 4-1: bad CDC descriptors [ 115.257240][ T5112] r8152-cfgselector 4-1: Unknown version 0x0000 [ 115.295255][ T5112] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 115.327266][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 115.447316][ T1111] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.484496][ T1111] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.548741][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.569028][ T1111] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 115.588628][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.616797][ T1111] usb 2-1: config 0 descriptor?? [ 116.110134][ T1111] hid-generic 0003:0458:5014.0002: item fetching failed at offset 5/39 [ 116.124786][ T1111] hid-generic: probe of 0003:0458:5014.0002 failed with error -22 [ 116.383267][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.390692][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.400939][ T5615] udc-core: couldn't find an available UDC or it's busy [ 116.408681][ T5615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.416345][ T5662] device bridge0 left promiscuous mode [ 116.421694][ T5112] usb 2-1: USB disconnect, device number 3 [ 117.130531][ T5662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.166615][ T5662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.248449][ T4202] Bluetooth: hci5: Reading QCA version information failed (-110) [ 117.256415][ T4202] Bluetooth: hci5: Retry BT power ON:0 [ 117.738200][ T4263] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 117.764923][ T4263] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 117.794926][ T4263] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 117.825666][ T4263] lan78xx: probe of 6-1:1.0 failed with error -71 [ 117.859677][ T4263] usb 6-1: USB disconnect, device number 5 [ 117.969856][ T5662] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.979007][ T5662] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.988031][ T5662] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.999771][ T5662] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.625470][ T5672] tipc: Enabled bearer , priority 27 [ 118.626971][ C1] hrtimer: interrupt took 89380 ns [ 118.867770][ T5694] VFS: Mount too revealing [ 122.374712][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.382057][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.879823][ T5712] loop3: detected capacity change from 0 to 256 [ 123.112249][ T5712] overlayfs: failed to clone lowerpath [ 123.270196][ T5685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.360343][ T5685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.170961][ T5685] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.227036][ T5685] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.245239][ T5685] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.257297][ T5685] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.529034][ T5685] batman_adv: batadv0: Interface deactivated: gretap1 [ 124.595016][ T5716] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.379'. [ 125.549762][ T5754] bond1: (slave ip6gretap1): making interface the new active one [ 125.604791][ T5754] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 126.000483][ T5766] loop1: detected capacity change from 0 to 8192 [ 126.051594][ T5738] loop1: p1 p2 p3 p4[DM] [ 126.056817][ T5738] loop1: p1 size 835329 extends beyond EOD, truncated [ 126.098186][ T5738] loop1: p2 size 327680 extends beyond EOD, truncated [ 126.159215][ T5738] loop1: p3 start 1052673 is beyond EOD, truncated [ 126.166307][ T5738] loop1: p4 size 262144 extends beyond EOD, truncated [ 126.254088][ T5777] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.394'. [ 126.284797][ T5766] loop1: p1 p2 p3 p4[DM] [ 126.289952][ T5766] loop1: p1 size 835329 extends beyond EOD, truncated [ 126.299434][ T5766] loop1: p2 size 327680 extends beyond EOD, truncated [ 126.308627][ T5766] loop1: p3 start 1052673 is beyond EOD, truncated [ 126.315475][ T5766] loop1: p4 size 262144 extends beyond EOD, truncated [ 126.397537][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 126.484149][ T5782] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.395'. [ 126.551038][ T5776] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.394'. [ 126.999053][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 127.250321][ T5701] udevd[5701]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 127.264433][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 127.268205][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 127.461578][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 127.476625][ T5701] udevd[5701]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 127.490744][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 127.648859][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 127.665618][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 127.679708][ T5701] udevd[5701]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 127.777186][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.789997][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.906610][ T5767] device bridge_slave_0 entered promiscuous mode [ 128.005859][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.037035][ T5720] Bluetooth: hci2: command 0x0409 tx timeout [ 128.103291][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.187462][ T5767] device bridge_slave_1 entered promiscuous mode [ 128.423438][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.436694][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.714475][ T5767] team0: Port device team_slave_0 added [ 128.771040][ T5767] team0: Port device team_slave_1 added [ 129.057629][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.064771][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.103693][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.173292][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.235535][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.537259][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.702519][ T5767] device hsr_slave_0 entered promiscuous mode [ 129.721875][ T5767] device hsr_slave_1 entered promiscuous mode [ 129.734153][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.786138][ T5767] Cannot create hsr debugfs directory [ 130.127063][ T2305] Bluetooth: hci2: command 0x041b tx timeout [ 130.759994][ T5767] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 130.811249][ T5767] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 130.844824][ T5767] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 130.862523][ T5767] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 131.135591][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.160784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.188701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.260571][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.281157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.350674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.407243][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.414968][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.440488][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.459616][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.470415][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.478222][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.488350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.522546][ T5870] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.410'. [ 131.532344][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.631615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.691887][ T5719] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.699581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.740799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.813890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.835617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.856526][ T5878] No source specified [ 131.862853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.928471][ T5767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.947177][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 131.987769][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.060804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.093837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.107338][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.197913][ T2305] Bluetooth: hci2: command 0x040f tx timeout [ 132.207130][ T5719] usb 2-1: config 15 has an invalid interface number: 234 but max is 0 [ 132.217249][ T5719] usb 2-1: config 15 has no interface number 0 [ 132.223515][ T5719] usb 2-1: config 15 interface 234 has no altsetting 0 [ 132.256454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.342073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.387206][ T5719] usb 2-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=20.aa [ 132.398279][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.406358][ T5719] usb 2-1: Product: syz [ 132.411274][ T5719] usb 2-1: Manufacturer: syz [ 132.418100][ T5719] usb 2-1: SerialNumber: syz [ 132.485273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.602473][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.609269][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.867353][ T5865] IPVS: nq: FWM 3 0x00000003 - no destination available [ 133.019117][ T5719] pl2303 2-1:15.234: required endpoints missing [ 133.029354][ T5719] usb 2-1: USB disconnect, device number 4 [ 133.382660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.414991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.610271][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.958596][ T5912] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.423'. [ 134.045120][ T5923] netlink: 'syz.6.427': attribute type 10 has an invalid length. [ 134.058938][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.066467][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.260383][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.268234][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.276392][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.277471][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 134.285246][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.348299][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 134.591079][ T5923] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 134.612142][ T5924] netlink: 'syz.6.427': attribute type 10 has an invalid length. [ 134.721519][ T5924] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.767635][ T5927] netlink: 'syz.6.427': attribute type 4 has an invalid length. [ 134.776082][ T5927] netlink: 152 bytes leftover after parsing attributes in process `syz.6.427'. [ 134.876279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 134.899744][ T5933] netlink: 'syz.4.438': attribute type 1 has an invalid length. [ 135.016307][ T5938] bond3: (slave gretap1): making interface the new active one [ 135.038352][ T5938] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 135.121020][ T5938] syz.4.438 (5938) used greatest stack depth: 19456 bytes left [ 135.202712][ T5949] bond2: (slave ip6gretap1): making interface the new active one [ 135.252942][ T5949] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 135.373930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.406988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.459036][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.474944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.485502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.494688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.522364][ T5767] device veth0_vlan entered promiscuous mode [ 135.674553][ T5767] device veth1_vlan entered promiscuous mode [ 135.825061][ T4421] device hsr_slave_0 left promiscuous mode [ 135.835951][ T4421] device hsr_slave_1 left promiscuous mode [ 135.851823][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.886834][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.921769][ T4421] device bridge_slave_1 left promiscuous mode [ 135.944933][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.962967][ T4421] device bridge_slave_0 left promiscuous mode [ 135.969339][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.053899][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.443'. [ 137.242058][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 137.420945][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 137.542178][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.707949][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.275221][ T4421] bond0 (unregistering): Released all slaves [ 138.405599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.433334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.517317][ T6009] netlink: 'syz.5.446': attribute type 1 has an invalid length. [ 138.604819][ T6012] bond2: (slave gretap1): making interface the new active one [ 138.618673][ T6012] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 138.649005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.685026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.735313][ T5767] device veth0_macvtap entered promiscuous mode [ 138.791465][ T5767] device veth1_macvtap entered promiscuous mode [ 138.962351][ T6031] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.983008][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.063804][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.121846][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.155861][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.182592][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.227252][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.271525][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.312607][ T6035] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 139.332813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.341020][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.458427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.498364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.528461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.581552][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.617025][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.627340][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.638597][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.648818][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.666374][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.678659][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.692358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.741537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.763679][ T5767] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.772878][ T5767] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.781987][ T5767] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.791645][ T5767] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.136976][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.145698][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.178396][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.186861][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.195516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.205652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.358900][ T6060] loop6: detected capacity change from 0 to 512 [ 140.404098][ T6060] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.462: iget: bad i_size value: 38620345925642 [ 140.464032][ T6060] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.462: couldn't read orphan inode 15 (err -117) [ 140.522958][ T6060] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.714760][ T6069] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.462: bg 0: block 5: invalid block bitmap [ 140.850213][ T6069] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 128 with error 28 [ 140.868771][ T6069] EXT4-fs (loop6): This should not happen!! Data will be lost [ 140.868771][ T6069] [ 140.933485][ T6069] EXT4-fs (loop6): Total free blocks count 0 [ 140.940164][ T6069] EXT4-fs (loop6): Free/Dirty block details [ 140.946269][ T6069] EXT4-fs (loop6): free_blocks=0 [ 140.952166][ T6069] EXT4-fs (loop6): dirty_blocks=128 [ 140.957842][ T6069] EXT4-fs (loop6): Block reservation details [ 140.963993][ T6069] EXT4-fs (loop6): i_reserved_data_blocks=128 [ 140.975252][ T6060] EXT4-fs (loop6): shut down requested (0) [ 143.237169][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.245429][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.496029][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.579425][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.966042][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.481'. [ 145.387513][ T6079] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.396639][ T6079] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.408996][ T6079] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.418720][ T6079] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.250006][ T6103] netlink: 'syz.7.457': attribute type 10 has an invalid length. [ 146.290796][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.298310][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.459714][ T6146] loop5: detected capacity change from 0 to 1024 [ 146.533931][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.541805][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.549967][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.557889][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.593619][ T6146] EXT4-fs (loop5): Ignoring removed bh option [ 146.637380][ T6146] EXT4-fs (loop5): Ignoring removed bh option [ 146.724668][ T6103] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 146.735270][ T6106] netlink: 'syz.7.457': attribute type 10 has an invalid length. [ 146.780924][ T6146] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 146.897695][ T6106] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 146.917128][ T6109] netlink: 'syz.7.457': attribute type 4 has an invalid length. [ 146.924821][ T6109] netlink: 152 bytes leftover after parsing attributes in process `syz.7.457'. [ 146.984594][ T6114] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 147.132499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 147.468735][ T6160] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.480'. [ 148.433586][ T6189] netlink: 'syz.7.486': attribute type 4 has an invalid length. [ 148.573436][ T6179] lo speed is unknown, defaulting to 1000 [ 148.637320][ T6179] lo speed is unknown, defaulting to 1000 [ 148.645803][ T6179] lo speed is unknown, defaulting to 1000 [ 148.830930][ T6179] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.955300][ T6179] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 149.462165][ T6211] loop6: detected capacity change from 0 to 512 [ 149.530551][ T6179] lo speed is unknown, defaulting to 1000 [ 149.637342][ T6179] lo speed is unknown, defaulting to 1000 [ 149.645043][ T6213] netlink: 'syz.7.493': attribute type 2 has an invalid length. [ 149.655872][ T6211] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.492: iget: bad i_size value: 38620345925642 [ 149.685431][ T6179] lo speed is unknown, defaulting to 1000 [ 149.739222][ T6211] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.492: couldn't read orphan inode 15 (err -117) [ 149.787352][ T6179] lo speed is unknown, defaulting to 1000 [ 149.890326][ T6211] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.056738][ T6179] lo speed is unknown, defaulting to 1000 [ 150.083724][ T6179] lo speed is unknown, defaulting to 1000 [ 150.137329][ T6179] lo speed is unknown, defaulting to 1000 [ 150.292743][ T6222] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.492: bg 0: block 5: invalid block bitmap [ 150.410393][ T6222] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 756 with error 28 [ 150.427090][ T6222] EXT4-fs (loop6): This should not happen!! Data will be lost [ 150.427090][ T6222] [ 150.463875][ T6233] tipc: Started in network mode [ 150.477886][ T6233] tipc: Node identity 4, cluster identity 4711 [ 150.511417][ T6222] EXT4-fs (loop6): Total free blocks count 0 [ 150.546609][ T6233] tipc: Node number set to 4 [ 150.567015][ T6222] EXT4-fs (loop6): Free/Dirty block details [ 150.597412][ T6222] EXT4-fs (loop6): free_blocks=0 [ 150.637262][ T6222] EXT4-fs (loop6): dirty_blocks=757 [ 150.664007][ T6222] EXT4-fs (loop6): Block reservation details [ 150.743810][ T6222] EXT4-fs (loop6): i_reserved_data_blocks=757 [ 150.768309][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.7.498'. [ 151.354416][ T6248] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 151.601380][ T6249] device ip6gretap2 entered promiscuous mode [ 151.608085][ T6249] bond3: (slave ip6gretap2): no link monitoring support [ 151.627251][ T6249] bond3: (slave ip6gretap2): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 151.651036][ T6249] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 152.054014][ T6266] netlink: 'syz.5.502': attribute type 2 has an invalid length. [ 152.868248][ T6294] fuse: Bad value for 'fd' [ 153.097173][ T6297] netlink: 'syz.5.510': attribute type 1 has an invalid length. [ 153.234704][ T6297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.343048][ T6303] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.389825][ T6303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.517065][ T6303] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.525845][ T6303] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.673577][ T6303] bond3: (slave geneve2): making interface the new active one [ 153.709610][ T6281] loop7: detected capacity change from 0 to 32768 [ 153.726795][ T6303] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 153.774656][ T6308] tipc: Started in network mode [ 153.787913][ T6308] tipc: Node identity 4, cluster identity 4711 [ 153.903187][ T6308] tipc: Node number set to 4 [ 153.947890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 154.001151][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.163298][ T6281] JBD2: Ignoring recovery information on journal [ 154.311113][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.518'. [ 154.478900][ T6281] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 154.847916][ T6348] siw: device registration error -23 [ 155.259258][ T6281] syz.7.506 (6281) used greatest stack depth: 18240 bytes left [ 155.545078][ T5767] ocfs2: Unmounting device (7,7) on (node local) [ 155.949630][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.526'. [ 156.650757][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.532'. [ 157.868429][ T6419] loop6: detected capacity change from 0 to 32768 [ 157.934602][ T6435] loop5: detected capacity change from 0 to 512 [ 158.050379][ T6419] JBD2: Ignoring recovery information on journal [ 158.144335][ T6435] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.540: iget: bad i_size value: 38620345925642 [ 158.242278][ T6448] netlink: 'syz.7.542': attribute type 1 has an invalid length. [ 158.276875][ T6435] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.540: couldn't read orphan inode 15 (err -117) [ 158.352789][ T6419] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 158.471275][ T6435] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.580369][ T6457] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.540: bg 0: block 5: invalid block bitmap [ 158.583599][ T6457] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 120 with error 28 [ 158.583654][ T6457] EXT4-fs (loop5): This should not happen!! Data will be lost [ 158.583654][ T6457] [ 158.583670][ T6457] EXT4-fs (loop5): Total free blocks count 0 [ 158.583685][ T6457] EXT4-fs (loop5): Free/Dirty block details [ 158.583698][ T6457] EXT4-fs (loop5): free_blocks=0 [ 158.585458][ T6457] EXT4-fs (loop5): dirty_blocks=124 [ 158.585481][ T6457] EXT4-fs (loop5): Block reservation details [ 158.585496][ T6457] EXT4-fs (loop5): i_reserved_data_blocks=124 [ 158.690006][ T6435] EXT4-fs (loop5): shut down requested (0) [ 159.058481][ T4970] ocfs2: Unmounting device (7,6) on (node local) [ 161.016431][ T6537] loop7: detected capacity change from 0 to 128 [ 161.052534][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.060576][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.130237][ T6537] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.201709][ T6537] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.351738][ T6530] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.370561][ T6537] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.104869][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.238981][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.515071][ T6484] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.527519][ T6484] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.536759][ T6484] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.547106][ T6484] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.056153][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 164.244817][ T6539] netlink: 'syz.1.558': attribute type 2 has an invalid length. [ 164.720136][ T6577] lo speed is unknown, defaulting to 1000 [ 164.830544][ T6581] siw: device registration error -23 [ 164.833807][ T6582] lo speed is unknown, defaulting to 1000 [ 165.765045][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 165.816652][ T6609] device geneve1 entered promiscuous mode [ 167.168413][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.581'. [ 167.189412][ T6636] loop5: detected capacity change from 0 to 512 [ 167.356319][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.7.585'. [ 167.372172][ T6636] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.384405][ T6636] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.348072][ T6669] tipc: Failed to remove unknown binding: 66,0,0/4:2620971739/2620971740 [ 168.371091][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.454625][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.465178][ T6674] tipc: Failed to remove unknown binding: 66,0,0/4:2620971739/2620971740 [ 168.498101][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.538792][ T6667] device bridge_slave_0 left promiscuous mode [ 168.545411][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.597940][ T6667] device bridge_slave_1 left promiscuous mode [ 168.604979][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.711706][ T6667] bond0: (slave bond_slave_0): Releasing backup interface [ 168.755550][ T6667] bond0: (slave bond_slave_1): Releasing backup interface [ 169.101688][ T6667] team0: Port device team_slave_0 removed [ 169.277938][ T6667] team0: Port device team_slave_1 removed [ 169.326383][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.407977][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.528780][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.625102][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.808442][ T6667] bond1: (slave ip6gretap1): Releasing backup interface [ 169.916089][ T6667] bond2: (slave ip6gretap2): Releasing active interface [ 170.031808][ T6667] bond3: (slave gretap1): Releasing active interface [ 170.132199][ T3852] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.142495][ T3852] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.157737][ T3852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.184576][ T3852] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.266166][ T6690] loop6: detected capacity change from 0 to 1024 [ 170.267836][ T3852] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.347000][ T3852] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.355411][ T3852] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.364285][ T3852] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.375819][ T3852] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.386845][ T3852] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.398086][ T3852] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.409929][ T3852] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.531792][ T6690] EXT4-fs (loop6): filesystem is read-only [ 170.557898][ T6690] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 170.577270][ T6690] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (34930!=20869) [ 170.606093][ T6690] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 170.956739][ T6697] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 171.207149][ T6697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.397605][ T5722] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.737284][ T6729] tipc: Failed to remove unknown binding: 66,0,0/0:3238001523/3238001524 [ 171.803580][ T6729] tipc: Failed to remove unknown binding: 66,0,0/0:3238001523/3238001524 [ 171.908288][ T5722] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.963615][ T5722] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.011385][ T6735] overlayfs: failed to clone lowerpath [ 176.002283][ T6822] loop5: detected capacity change from 0 to 128 [ 176.104966][ T6822] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 176.539640][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 176.550591][ T6828] kvm: pic: non byte read [ 176.589766][ T6828] kvm: pic: non byte read [ 176.635672][ T6828] kvm: pic: non byte read [ 176.685964][ T6828] kvm: pic: non byte read [ 176.738136][ T6828] kvm: pic: non byte read [ 176.805750][ T6828] kvm: pic: non byte read [ 176.890362][ T6828] kvm: pic: non byte read [ 176.903302][ T6828] kvm: pic: non byte read [ 176.909971][ T6530] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 176.924248][ T6828] kvm: pic: non byte read [ 176.938100][ T6828] kvm: pic: non byte read [ 177.229808][ T6845] loop5: detected capacity change from 0 to 136 [ 177.700947][ T6861] netlink: 24 bytes leftover after parsing attributes in process `syz.6.650'. [ 177.973490][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.650'. [ 178.003056][ T6875] loop5: detected capacity change from 0 to 512 [ 178.179840][ T6875] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.642: iget: bad i_size value: 38620345925642 [ 178.195154][ T6875] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.642: couldn't read orphan inode 15 (err -117) [ 178.208878][ T6875] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.361202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.397076][ T6885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.551170][ T6899] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.642: bg 0: block 5: invalid block bitmap [ 178.808825][ T6899] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 860 with error 28 [ 178.860439][ T6899] EXT4-fs (loop5): This should not happen!! Data will be lost [ 178.860439][ T6899] [ 178.870939][ T6899] EXT4-fs (loop5): Total free blocks count 0 [ 178.878317][ T6899] EXT4-fs (loop5): Free/Dirty block details [ 178.884504][ T6899] EXT4-fs (loop5): free_blocks=0 [ 178.890273][ T6899] EXT4-fs (loop5): dirty_blocks=864 [ 178.895741][ T6899] EXT4-fs (loop5): Block reservation details [ 178.902093][ T6899] EXT4-fs (loop5): i_reserved_data_blocks=864 [ 180.077381][ T6937] fuse: Bad value for 'fd' [ 180.111919][ T6931] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 180.120286][ T6931] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 180.180662][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.663'. [ 180.496949][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 180.857051][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 180.880081][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.919334][ T6957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.927588][ T7] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 180.937402][ T7] usb 7-1: can't read configurations, error -71 [ 182.156171][ T6976] netlink: 156 bytes leftover after parsing attributes in process `syz.1.679'. [ 182.167970][ T6976] netlink: 156 bytes leftover after parsing attributes in process `syz.1.679'. [ 182.184368][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 182.458256][ T6984] loop6: detected capacity change from 0 to 256 [ 182.636766][ T6984] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 182.714538][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 182.915268][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 183.610358][ T7037] "syz.4.694" (7037) uses obsolete ecb(arc4) skcipher [ 184.040534][ T7050] loop6: detected capacity change from 0 to 1024 [ 185.093242][ T7078] gfs2: gfs2 mount does not exist [ 185.429741][ T7085] overlayfs: failed to clone upperpath [ 185.683295][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 185.693491][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 185.713774][ T7094] loop5: detected capacity change from 0 to 512 [ 185.876990][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 185.883440][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 185.925942][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 185.951969][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 185.994768][ T7094] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.007221][ T7094] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.083309][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.6.714'. [ 186.277777][ T7094] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #16: block 42: comm syz.5.712: lblock 0 mapped to illegal pblock 42 (length 1) [ 186.331592][ T7094] EXT4-fs error (device loop5): move_extent_per_page:426: inode #16: comm syz.5.712: Unable to copy data block, data will be lost. [ 186.461028][ T7093] EXT4-fs error (device loop5): ext4_discard_preallocations:5134: comm syz.5.712: Error -117 loading buddy information for 4294876380 [ 186.520442][ T7116] bridge0: port 1(vlan2) entered blocking state [ 186.577127][ T7116] bridge0: port 1(vlan2) entered disabled state [ 186.599240][ T7116] device vlan2 entered promiscuous mode [ 186.637110][ T7116] device bridge_slave_0 entered promiscuous mode [ 186.654566][ T7116] bridge0: mtu less than device minimum [ 186.694318][ T6530] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm kworker/u4:10: Invalid inode table block 35 in block_group 0 [ 186.804340][ T6530] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm kworker/u4:10: Invalid inode table block 35 in block_group 0 [ 187.046367][ T7127] gfs2: gfs2 mount does not exist [ 187.324334][ T7136] overlayfs: failed to clone upperpath [ 187.550757][ T7141] __nla_validate_parse: 1 callbacks suppressed [ 187.550774][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.729'. [ 188.421452][ T7160] bridge0: port 3(vlan3) entered blocking state [ 188.430233][ T7160] bridge0: port 3(vlan3) entered disabled state [ 188.442505][ T7160] device vlan3 entered promiscuous mode [ 188.450703][ T7160] bridge0: mtu less than device minimum [ 188.532374][ T7168] netlink: 44 bytes leftover after parsing attributes in process `syz.7.735'. [ 189.073815][ T7181] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 189.281091][ T7181] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.373601][ T7193] netlink: 'syz.1.738': attribute type 10 has an invalid length. [ 189.382795][ T7193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.738'. [ 189.393092][ T7193] device dummy0 entered promiscuous mode [ 189.627167][ T7185] device dummy0 left promiscuous mode [ 189.676044][ T7185] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 189.685164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 189.976298][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.7.744'. [ 189.999236][ T7204] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 190.017583][ T7204] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 190.567309][ T4232] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.827342][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 190.872198][ T7236] loop6: detected capacity change from 0 to 256 [ 190.957341][ T4232] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 190.966260][ T4232] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.087878][ T7236] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.128049][ T4232] usb 6-1: config 0 has no interface number 0 [ 191.316765][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 191.316805][ T26] audit: type=1800 audit(1786051562.980:228): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.752" name="file1" dev="loop6" ino=1048626 res=0 errno=0 [ 191.380936][ T4232] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 191.446958][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.455741][ T4232] usb 6-1: Product: syz [ 191.556908][ T4232] usb 6-1: Manufacturer: syz [ 191.562127][ T4232] usb 6-1: SerialNumber: syz [ 191.695554][ T4232] usb 6-1: config 0 descriptor?? [ 191.831033][ T4232] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 191.881033][ T4232] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 191.958309][ T7264] netlink: 'syz.4.757': attribute type 1 has an invalid length. [ 192.159241][ T7264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.341827][ T7266] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 192.420659][ T7270] netlink: 'syz.4.757': attribute type 10 has an invalid length. [ 192.429643][ T7270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.757'. [ 192.439779][ T7270] device dummy0 entered promiscuous mode [ 192.528773][ T7270] bond4: (slave dummy0): Releasing backup interface [ 192.737388][ T7276] loop6: detected capacity change from 0 to 2 [ 192.817550][ T5738] Dev loop6: unable to read RDB block 2 [ 192.823396][ T5738] loop6: unable to read partition table [ 192.938210][ T5738] loop6: partition table beyond EOD, truncated [ 192.969574][ T7276] Dev loop6: unable to read RDB block 2 [ 192.975217][ T7276] loop6: unable to read partition table [ 193.052957][ T7276] loop6: partition table beyond EOD, truncated [ 193.072284][ T7286] MTDSB: Device #1 doesn't appear to exist [ 193.072284][ T7286] [ 193.131490][ T7276] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 193.278706][ T3559] Dev loop6: unable to read RDB block 2 [ 193.284888][ T3559] loop6: unable to read partition table [ 193.355516][ T3559] loop6: partition table beyond EOD, truncated [ 193.659247][ T7282] ftl_cs: FTL header not found. [ 193.832215][ T7282] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 194.041252][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.048016][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.593925][ T26] audit: type=1804 audit(1786051566.230:229): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.769" name="bus" dev="ramfs" ino=43600 res=1 errno=0 [ 194.719397][ T26] audit: type=1804 audit(1786051566.290:230): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.769" name="bus" dev="ramfs" ino=43600 res=1 errno=0 [ 194.771489][ T4232] usb 6-1: USB disconnect, device number 6 [ 196.489600][ T7349] loop5: detected capacity change from 0 to 512 [ 196.740625][ T7369] process 'syz.1.779' launched '/dev/fd/5' with NULL argv: empty string added [ 196.763982][ T7349] EXT4-fs (loop5): 1 orphan inode deleted [ 196.775779][ T7349] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.795775][ T7349] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.289121][ T7385] bond0: (slave bridge0): Releasing backup interface [ 197.323994][ T7385] device bridge_slave_0 left promiscuous mode [ 197.347435][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.421006][ T7385] device bridge_slave_1 left promiscuous mode [ 197.429559][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.452348][ T7385] bond0: (slave bond_slave_0): Releasing backup interface [ 197.478646][ T7385] bond0: (slave bond_slave_1): Releasing backup interface [ 197.494181][ T7385] team0: Port device team_slave_0 removed [ 197.502411][ T7385] team0: Port device team_slave_1 removed [ 197.508630][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.518399][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.545354][ T7385] bond0: (slave wlan1): Releasing backup interface [ 197.596307][ T7387] team0: Mode changed to "loadbalance" [ 198.202798][ T7418] loop5: detected capacity change from 0 to 16 [ 198.459067][ T7418] erofs: (device loop5): mounted with root inode @ nid 36. [ 198.657631][ T7433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.677793][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 198.686987][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 198.786424][ T7433] bond5: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 199.439335][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 199.452988][ T7459] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.462576][ T7459] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.471338][ T7459] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.480149][ T7459] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.504253][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 199.658999][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 199.758346][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 199.820622][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 199.931919][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 199.959247][ T7476] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.012600][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.046429][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.079183][ T7476] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link [ 200.138809][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.150383][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.161890][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.170955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 200.184291][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.228562][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.257541][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.272096][ T7486] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.320323][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.363824][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.395880][ T7492] sch_tbf: burst 19872 is lower than device lo mtu (1075109906) ! [ 200.467894][ T7492] sch_tbf: burst 593 is lower than device lo mtu (1075109906) ! [ 200.483522][ T26] audit: type=1326 audit(1786051572.150:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.4.817" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x0 [ 200.580304][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.715479][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.796155][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.856214][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.941265][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 200.959783][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 201.151545][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 201.208791][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 201.253976][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 201.302257][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 201.383356][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 201.433641][ T7522] device geneve2 entered promiscuous mode [ 201.552731][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 201.701305][ T7462] 9pnet: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 201.752682][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 202.219899][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.832'. [ 202.330235][ T7550] team0: Port device team_slave_1 removed [ 202.466095][ T7553] netlink: 'syz.5.832': attribute type 3 has an invalid length. [ 202.482096][ T7552] bond5: (slave dummy0): Releasing backup interface [ 202.490367][ T7563] overlayfs: failed to clone upperpath [ 203.098075][ T7595] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 203.415159][ T2305] kernel read not supported for file [userfaultfd] (pid: 2305 comm: kworker/1:3) [ 203.539839][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.848'. [ 204.460984][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.469440][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.725831][ T7631] device bridge_slave_1 left promiscuous mode [ 204.809997][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.014988][ T7631] device bridge_slave_0 left promiscuous mode [ 205.078539][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.191332][ T7603] loop5: detected capacity change from 0 to 40427 [ 205.313468][ T7603] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 205.346242][ T7603] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 205.431726][ T7631] bond0: (slave bridge0): Releasing backup interface [ 205.473523][ T7603] F2FS-fs (loop5): invalid crc value [ 205.536806][ T7603] F2FS-fs (loop5): Found nat_bits in checkpoint [ 205.863990][ T7603] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 206.357044][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 210.484274][ T7760] tipc: Enabling of bearer rejected, failed to enable media [ 210.652180][ T7766] loop6: detected capacity change from 0 to 1024 [ 210.666559][ T7769] netlink: 64 bytes leftover after parsing attributes in process `syz.4.891'. [ 210.808918][ T7766] hfsplus: unable to parse mount options [ 212.843306][ T7802] loop6: detected capacity change from 0 to 32768 [ 212.970947][ T7802] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.895 (7802) [ 213.225194][ T7802] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 213.311331][ T7802] BTRFS info (device loop6): using free space tree [ 213.367044][ T7802] BTRFS info (device loop6): has skinny extents [ 213.697858][ T7802] BTRFS info (device loop6): enabling ssd optimizations [ 213.939852][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.994989][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.233296][ T7773] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.242938][ T7773] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.252237][ T7773] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.261581][ T7773] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.435403][ T7783] netlink: 'syz.4.892': attribute type 3 has an invalid length. [ 215.448791][ T7783] netlink: 'syz.4.892': attribute type 3 has an invalid length. [ 215.469235][ T7847] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 215.768383][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.906'. [ 215.834541][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 216.010603][ T7875] loop5: detected capacity change from 0 to 736 [ 216.258804][ T7875] rock: directory entry would overflow storage [ 216.265580][ T7875] rock: sig=0x3b10, size=4, remaining=3 [ 216.597285][ T5722] Bluetooth: hci1: command 0x0406 tx timeout [ 219.184848][ T7956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.099673][ T7985] loop5: detected capacity change from 0 to 4096 [ 220.443469][ T7992] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.505754][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 220.632271][ T7996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 222.353738][ T8036] netlink: 'syz.6.956': attribute type 2 has an invalid length. [ 223.857336][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.968'. [ 225.225750][ T8078] netlink: 'syz.5.971': attribute type 11 has an invalid length. [ 226.182205][ T8106] netlink: 'syz.5.982': attribute type 13 has an invalid length. [ 226.190073][ T8106] netlink: 'syz.5.982': attribute type 17 has an invalid length. [ 226.288798][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.298230][ T8106] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.330833][ T8106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.358747][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 226.441457][ T8115] netlink: 44 bytes leftover after parsing attributes in process `syz.6.986'. [ 226.584647][ T8117] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 226.746444][ T8121] bond0: (slave bond_slave_0): Releasing backup interface [ 226.784343][ T8121] bond0: (slave bond_slave_1): Releasing backup interface [ 226.819808][ T8121] team0: Port device team_slave_0 removed [ 226.832054][ T8121] team0: Port device team_slave_1 removed [ 226.844773][ T8121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.856964][ T8121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.882895][ T8121] bond0: (slave wlan1): Releasing backup interface [ 226.923813][ T8125] team0: Mode changed to "broadcast" [ 227.164162][ T8129] VFS: Mount too revealing [ 228.144554][ T8155] overlayfs: failed to clone upperpath [ 228.450991][ T26] audit: type=1326 audit(1786051600.120:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33bf7c20d9 code=0x0 [ 228.647052][ T26] audit: type=1326 audit(1786051600.290:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x7ffc0000 [ 228.844130][ T8166] loop6: detected capacity change from 0 to 512 [ 228.908367][ T8166] EXT4-fs (loop6): inline encryption not supported [ 228.915859][ T8166] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.952630][ T26] audit: type=1326 audit(1786051600.290:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x7ffc0000 [ 229.058984][ T26] audit: type=1326 audit(1786051600.290:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x7ffc0000 [ 229.083542][ T26] audit: type=1326 audit(1786051600.290:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x7ffc0000 [ 229.110065][ T26] audit: type=1326 audit(1786051600.290:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33bf7c20d9 code=0x7ffc0000 [ 229.136257][ T26] audit: type=1326 audit(1786051600.290:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x7ffc0000 [ 229.161383][ T26] audit: type=1326 audit(1786051600.290:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x7ffc0000 [ 229.192974][ T8166] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 229.207444][ T26] audit: type=1326 audit(1786051600.290:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x7ffc0000 [ 229.237066][ T8166] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1004: invalid indirect mapped block 2683928664 (level 1) [ 229.261988][ T8166] EXT4-fs (loop6): 1 truncate cleaned up [ 229.274015][ T8166] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 229.406797][ T26] audit: type=1326 audit(1786051600.290:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.7.1001" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x7ffc0000 [ 230.029123][ T8192] 9pnet: p9_errstr2errno: server reported unknown error 00000000,group_id [ 231.150453][ T8206] device gretap1 entered promiscuous mode [ 231.350483][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1018'. [ 231.948444][ T8230] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1025'. [ 232.437346][ T5722] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 232.797187][ T5722] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.823041][ T5722] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.947321][ T5722] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.956419][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.017815][ T5722] usb 7-1: SerialNumber: syz [ 233.333957][ T5722] usb 7-1: 0:2 : does not exist [ 233.515160][ T5722] usb 7-1: USB disconnect, device number 4 [ 234.100459][ T8262] loop6: detected capacity change from 0 to 512 [ 234.314067][ T8262] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.462999][ T8262] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1035: invalid indirect mapped block 9 (level 0) [ 234.493438][ T8262] EXT4-fs (loop6): 1 truncate cleaned up [ 234.517602][ T8262] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 234.675193][ T8269] netlink: 'syz.5.1037': attribute type 1 has an invalid length. [ 234.760608][ T8262] netlink: 'syz.6.1035': attribute type 16 has an invalid length. [ 234.770706][ T8262] netlink: 'syz.6.1035': attribute type 17 has an invalid length. [ 234.784912][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 234.797184][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 234.850604][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 234.870604][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 234.894273][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 234.961484][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 234.994767][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 235.032557][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 235.057089][ T8262] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 235.119104][ T8272] bond4: (slave gretap2): making interface the new active one [ 235.173119][ T8272] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 235.230172][ T8269] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 235.685799][ T8285] bond0: (slave bridge0): Error: Slave device does not support XDP [ 235.694886][ T8288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1042'. [ 235.758741][ T8285] netlink: 'syz.1.1041': attribute type 27 has an invalid length. [ 235.799770][ T8285] bond0: (slave bond_slave_0): Releasing backup interface [ 235.901730][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1042'. [ 236.163117][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 236.163152][ T26] audit: type=1800 audit(1786051607.830:302): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1040" name="/" dev="fuse" ino=4 res=0 errno=0 [ 236.809033][ T8312] lo speed is unknown, defaulting to 1000 [ 236.919322][ T8312] lo speed is unknown, defaulting to 1000 [ 236.935486][ T8312] lo speed is unknown, defaulting to 1000 [ 237.332816][ T8334] loop6: detected capacity change from 0 to 256 [ 237.353077][ T8334] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 237.382852][ T8327] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1055'. [ 237.452422][ T8334] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 237.477327][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1055'. [ 237.567127][ T8334] exFAT-fs (loop6): Filesystem has been set read-only [ 237.609433][ T8335] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 237.756302][ T8341] loop5: detected capacity change from 0 to 2048 [ 237.789856][ T7838] lo speed is unknown, defaulting to 1000 [ 237.801527][ T4970] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 237.823957][ T8341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.872574][ T8341] netlink: 'syz.5.1061': attribute type 49 has an invalid length. [ 237.903151][ T8312] infiniband sz1: set active [ 237.927458][ T8312] infiniband sz1: added lo [ 237.940117][ T4970] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 238.004300][ T8312] infiniband sz1: Couldn't open port 1 [ 238.187598][ T8341] device ip6gretap0 entered promiscuous mode [ 238.278139][ T8312] RDS/IB: sz1: added [ 238.288466][ T8312] smc: adding ib device sz1 with port count 1 [ 238.295426][ T8312] smc: ib device sz1 port 1 has pnetid [ 238.547051][ T5722] lo speed is unknown, defaulting to 1000 [ 238.555680][ T8312] lo speed is unknown, defaulting to 1000 [ 238.692171][ T8312] lo speed is unknown, defaulting to 1000 [ 239.182455][ T8312] lo speed is unknown, defaulting to 1000 [ 239.319960][ T8312] lo speed is unknown, defaulting to 1000 [ 239.467089][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1071'. [ 239.884089][ T8312] lo speed is unknown, defaulting to 1000 [ 240.307820][ T8390] loop5: detected capacity change from 0 to 512 [ 240.469776][ T8390] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 240.480107][ T8390] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 240.551899][ T8390] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1074: invalid indirect mapped block 83886080 (level 1) [ 240.619784][ T8390] EXT4-fs (loop5): Remounting filesystem read-only [ 240.663939][ T8390] EXT4-fs (loop5): 1 orphan inode deleted [ 240.693667][ T8390] EXT4-fs (loop5): 1 truncate cleaned up [ 240.712112][ T8390] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,nodelalloc,quota,nolazytime,grpjquota=,mblk_io_submit,barrier=0x00000000000000ff,max_batch_time=0x00000. Quota mode: writeback. [ 240.837581][ T8390] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #2: block 13: comm syz.5.1074: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 240.882845][ T8408] lo speed is unknown, defaulting to 1000 [ 240.956132][ T8390] EXT4-fs (loop5): Remounting filesystem read-only [ 240.977356][ T8390] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #2: comm syz.5.1074: directory missing '..' [ 242.111373][ T8408] chnl_net:caif_netlink_parms(): no params data found [ 242.496422][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.617536][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.636493][ T8408] device bridge_slave_0 entered promiscuous mode [ 242.688536][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.728360][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.736689][ T8408] device bridge_slave_1 entered promiscuous mode [ 242.837049][ T5722] Bluetooth: hci1: command 0x0409 tx timeout [ 242.913942][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.961907][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.073377][ T8408] team0: Port device team_slave_0 added [ 243.125202][ T8408] team0: Port device team_slave_1 added [ 243.251544][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.325099][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.508108][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.218825][ T8481] netlink: 'syz.1.1094': attribute type 4 has an invalid length. [ 244.239355][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.247735][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.277374][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.335022][ T8478] netlink: 'syz.1.1094': attribute type 4 has an invalid length. [ 244.505103][ T8408] device hsr_slave_0 entered promiscuous mode [ 244.576215][ T8408] device hsr_slave_1 entered promiscuous mode [ 244.619562][ T8408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.633480][ T8408] Cannot create hsr debugfs directory [ 244.916999][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 245.122551][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 245.136407][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 245.209244][ T8495] ceph: No mds server is up or the cluster is laggy [ 245.226365][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 245.247317][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 245.268991][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1102'. [ 245.366633][ T8505] device ip6gre1 entered promiscuous mode [ 245.434307][ T8505] netlink: 'syz.7.1102': attribute type 6 has an invalid length. [ 245.454624][ T26] audit: type=1804 audit(1786051617.120:303): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1104" name="bus" dev="ramfs" ino=47493 res=1 errno=0 [ 245.503449][ T26] audit: type=1804 audit(1786051617.150:304): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1104" name="bus" dev="ramfs" ino=47493 res=1 errno=0 [ 245.525452][ T8505] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1102'. [ 245.557189][ T8408] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 245.569546][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 245.575630][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 245.605337][ T8408] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 245.685495][ T8408] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 245.828681][ T8408] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 245.878202][ T8514] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1106'. [ 245.950950][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1106'. [ 246.414131][ T8525] fuse: Bad value for 'fd' [ 247.013969][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 247.146778][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.204345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.218756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.255008][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.285243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.303843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.351604][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.358885][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.437892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.487613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.525788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.559929][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.567841][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.621437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.658964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.779141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.837803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.900648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.023149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.069084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.109235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.173114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.269688][ T8552] bond0: (slave bridge0): Releasing backup interface [ 248.355456][ T8552] bond0: (slave team0): Releasing backup interface [ 248.372972][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.434415][ T8552] device bridge_slave_1 left promiscuous mode [ 248.459530][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.499000][ T8552] bond0: (slave bond_slave_1): Releasing backup interface [ 248.517826][ T8552] team0: Port device team_slave_0 removed [ 248.529033][ T8552] team0: Port device team_slave_1 removed [ 248.535333][ T8552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.544942][ T8552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.556356][ T8552] bond0: (slave wlan1): Releasing backup interface [ 248.565602][ T8552] batman_adv: batadv0: Removing interface: gretap1 [ 248.590875][ T8552] bond2: (slave ip6gretap1): Releasing active interface [ 248.658666][ T8552] bond3: (slave ip6gretap2): Releasing backup interface [ 248.705598][ T8552] device vlan3 left promiscuous mode [ 248.740917][ T8552] device bridge_slave_0 left promiscuous mode [ 248.751951][ T8552] bridge0: port 3(vlan3) entered disabled state [ 248.769769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.829797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.871794][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.913590][ T8557] device vlan2 entered promiscuous mode [ 249.077597][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 249.255136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.291686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.346964][ T8576] netlink: 'syz.5.1124': attribute type 13 has an invalid length. [ 249.568551][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1128'. [ 249.609632][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.175199][ T8605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.264959][ T8607] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.275523][ T8607] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.287966][ T8607] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.302039][ T8607] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.319113][ T8607] bond1: (slave geneve2): making interface the new active one [ 250.366526][ T26] audit: type=1326 audit(1786051622.030:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.1.1134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837dd370d9 code=0x7fc00000 [ 250.392882][ T8607] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 250.410655][ T26] audit: type=1326 audit(1786051622.070:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.1.1134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f837dd370d9 code=0x7fc00000 [ 250.463718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 250.520283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.538599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.640805][ T8408] device veth0_vlan entered promiscuous mode [ 250.655230][ T8408] device veth1_vlan entered promiscuous mode [ 250.664837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.709092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.799743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.861773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.948885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.990022][ T8616] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1136'. [ 251.123312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.156963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.178975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.312932][ T8624] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.321743][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 251.334467][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 251.372836][ T8625] bond6: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 251.443408][ T8408] device veth0_macvtap entered promiscuous mode [ 251.463110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.506697][ T8408] device veth1_macvtap entered promiscuous mode [ 251.719633][ T8635] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 251.771593][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.801294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.818004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.832870][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.891126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.907933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.954695][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'. [ 252.091810][ T8408] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.130838][ T8408] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.226924][ T8408] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.236567][ T8408] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.260618][ T8653] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 252.321221][ T8651] lo: Caught tx_queue_len zero misconfig [ 252.419959][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1151'. [ 252.437961][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 252.501934][ T8659] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.512475][ T8659] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.521951][ T8659] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.531359][ T8659] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.587045][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1151'. [ 252.856938][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.865563][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.984814][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.063470][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1153'. [ 253.251752][ T8677] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.585735][ T8680] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 253.885002][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 253.900417][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.944279][ T8696] ip_tables: iptables: counters copy to user failed while replacing table [ 254.031066][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.149747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.992698][ T8733] overlayfs: failed to clone upperpath [ 255.482010][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.489047][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.912788][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1170'. [ 256.323532][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1172'. [ 257.478497][ T26] audit: type=1326 audit(1786051629.150:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 257.521929][ T26] audit: type=1326 audit(1786051629.180:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 257.558126][ T26] audit: type=1326 audit(1786051629.180:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 257.584154][ T26] audit: type=1326 audit(1786051629.180:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 257.634866][ T26] audit: type=1326 audit(1786051629.180:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 257.832160][ T26] audit: type=1326 audit(1786051629.180:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 257.862924][ T26] audit: type=1326 audit(1786051629.180:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 257.888159][ T26] audit: type=1326 audit(1786051629.180:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 257.912875][ T26] audit: type=1326 audit(1786051629.180:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 257.952912][ T26] audit: type=1326 audit(1786051629.180:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab79f0d9 code=0x50000 [ 258.193099][ T8801] ip_tables: iptables: counters copy to user failed while replacing table [ 258.500244][ T8807] bond1: (slave geneve2): Releasing active interface [ 258.511439][ T8807] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.521714][ T8807] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.532913][ T8807] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.542437][ T8807] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.630298][ T8807] team0: Mode changed to "loadbalance" [ 260.076768][ T8821] device geneve3 entered promiscuous mode [ 260.458030][ T8835] ip6tnl0: Caught tx_queue_len zero misconfig [ 260.588783][ T8840] loop5: detected capacity change from 0 to 256 [ 260.662306][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 260.684744][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 260.709635][ T8841] ceph: No mds server is up or the cluster is laggy [ 260.967975][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 261.001467][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 261.120175][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 261.214491][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 261.339977][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 261.394969][ T8860] loop5: detected capacity change from 0 to 128 [ 261.426714][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 261.552536][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 261.623035][ T8860] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 261.674174][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 261.719817][ T8860] FAT-fs (loop5): Filesystem has been set read-only [ 261.754964][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 261.909456][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 261.989689][ T8863] sch_tbf: burst 593 is lower than device lo mtu (11337746) ! [ 262.009239][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 262.068793][ T8865] device bridge_slave_0 left promiscuous mode [ 262.076375][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.089939][ T8865] device bridge_slave_1 left promiscuous mode [ 262.096177][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.111604][ T8852] 9pnet: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 262.177914][ T8865] bond0: (slave bond_slave_0): Releasing backup interface [ 262.274563][ T8865] bond0: (slave bond_slave_1): Releasing backup interface [ 262.352953][ T8865] team0: Port device team_slave_0 removed [ 262.397904][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.420098][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.434512][ T8865] bond1: (slave ip6gretap1): Releasing active interface [ 262.467612][ T8865] bond2: (slave gretap1): Releasing active interface [ 262.487546][ T26] kauditd_printk_skb: 6987 callbacks suppressed [ 262.487561][ T26] audit: type=1326 audit(1786051634.150:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 262.525638][ T8865] bond3: (slave geneve2): Releasing active interface [ 262.613595][ T8865] bond4: (slave gretap2): Releasing active interface [ 262.634964][ T26] audit: type=1326 audit(1786051634.160:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 262.703540][ T8865] bond5: (slave ip6gretap0): Releasing backup interface [ 262.756033][ T26] audit: type=1326 audit(1786051634.190:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 262.823369][ T8866] team0: Mode changed to "loadbalance" [ 262.931118][ T26] audit: type=1326 audit(1786051634.190:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 263.138130][ T26] audit: type=1326 audit(1786051634.190:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 263.226681][ T26] audit: type=1326 audit(1786051634.190:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 263.363480][ T26] audit: type=1326 audit(1786051634.190:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 263.487536][ T26] audit: type=1326 audit(1786051634.190:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 263.595031][ T26] audit: type=1326 audit(1786051634.190:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 263.651041][ T8890] infiniband sz1: set active [ 263.701599][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.727695][ T26] audit: type=1326 audit(1786051634.190:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.7.1208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf7c20d9 code=0x50000 [ 263.808651][ T27] INFO: task getty:3945 blocked for more than 143 seconds. [ 263.816530][ T27] Not tainted syzkaller #0 [ 263.839790][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.870671][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.919348][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.948389][ T27] task:getty state:D stack:22288 pid: 3945 ppid: 1 flags:0x00004002 [ 264.059630][ T27] Call Trace: [ 264.063350][ T27] [ 264.066651][ T27] __schedule+0x11c3/0x4350 [ 264.188858][ T27] ? __lock_acquire+0x13dc/0x7b50 [ 264.204926][ T8890] device vlan2 left promiscuous mode [ 264.257659][ T8890] device bridge_slave_0 left promiscuous mode [ 264.277508][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 264.283343][ T27] ? _raw_spin_unlock+0x40/0x40 [ 264.304598][ T8890] bridge0: port 1(vlan2) entered disabled state [ 264.336792][ T27] ? release_firmware_map_entry+0x190/0x190 [ 264.365927][ T27] ? verify_lock_unused+0x140/0x140 [ 264.386309][ T27] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 264.453061][ T27] schedule+0x11b/0x1e0 [ 264.474317][ T27] schedule_timeout+0xbd/0x2d0 [ 264.489119][ T27] ? console_conditional_schedule+0x40/0x40 [ 264.496207][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 264.536949][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 264.542514][ T27] ? lock_chain_count+0x20/0x20 [ 264.578013][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 264.583739][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 264.608385][ T27] do_wait_for_common+0x295/0x460 [ 264.613996][ T27] ? console_conditional_schedule+0x40/0x40 [ 264.636891][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 264.644177][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 264.676883][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 264.682997][ T27] ? start_flush_work+0x784/0x830 [ 264.705402][ T27] wait_for_completion+0x48/0x60 [ 264.717114][ T27] __flush_work+0x15a/0x210 [ 264.727927][ T27] ? lock_chain_count+0x20/0x20 [ 264.733330][ T27] ? flush_work+0x20/0x20 [ 264.750165][ T27] ? try_to_grab_pending+0xfb/0x820 [ 264.755888][ T27] ? start_flush_work+0x830/0x830 [ 264.786896][ T27] ? lock_chain_count+0x20/0x20 [ 264.792270][ T27] ? trace_percpu_free_percpu+0x81/0x1a0 [ 264.813607][ T27] ? __cancel_work_timer+0x36a/0x560 [ 264.828669][ T27] __cancel_work_timer+0x3f4/0x560 [ 264.834384][ T27] ? cancel_work_sync+0x20/0x20 [ 264.862250][ T27] hci_unregister_dev+0x163/0x590 [ 264.870593][ T27] hci_uart_tty_close+0x268/0x330 [ 264.885826][ T27] tty_ldisc_reinit+0xe4/0x460 [ 264.905211][ T27] tty_ldisc_hangup+0x360/0x4a0 [ 264.923843][ T27] __tty_hangup+0x44e/0x670 [ 264.944837][ T27] disassociate_ctty+0x38d/0x860 [ 264.964531][ T27] do_exit+0x5f9/0x2110 [ 264.983014][ T27] ? put_task_struct+0x80/0x80 [ 265.004079][ T27] ? lock_chain_count+0x20/0x20 [ 265.033104][ T27] do_group_exit+0x12c/0x2f0 [ 265.051039][ T27] __x64_sys_exit_group+0x3b/0x40 [ 265.074223][ T27] do_syscall_64+0x4c/0xa0 [ 265.101552][ T27] ? clear_bhb_loop+0x30/0x80 [ 265.106742][ T27] ? clear_bhb_loop+0x30/0x80 [ 265.127538][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.133680][ T27] RIP: 0033:0x7f7e959a06c5 [ 265.138901][ T27] RSP: 002b:00007fffa05c6dc8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 265.148093][ T27] RAX: ffffffffffffffda RBX: 00007f7e95aa1fe8 RCX: 00007f7e959a06c5 [ 265.156270][ T27] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 265.165394][ T27] RBP: 0000000000000001 R08: 00007fffa05c6d58 R09: 0000000000000000 [ 265.174174][ T27] R10: 00007fffa05c6bf0 R11: 0000000000000202 R12: 0000000000000000 [ 265.182904][ T27] R13: 0000000000000001 R14: 00007f7e95aa0680 R15: 00007f7e95aa2000 [ 265.191624][ T27] [ 265.195040][ T27] [ 265.195040][ T27] Showing all locks held in the system: [ 265.203469][ T27] 1 lock held by khungtaskd/27: [ 265.209208][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 265.222376][ T27] 2 locks held by getty/3945: [ 265.231730][ T27] #0: ffff88802bea31c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: __tty_hangup+0xc0/0x670 [ 265.247571][ T27] #1: ffff88802bea3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x68/0xb0 [ 265.260876][ T27] 3 locks held by kworker/u5:7/4202: [ 265.268705][ T27] #0: ffff88807831d138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 265.283534][ T27] #1: ffffc90002f3fd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 265.301523][ T27] #2: ffff88805faa13f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0xa4/0x12a0 [ 265.312843][ T27] 4 locks held by kworker/1:4/4231: [ 265.319239][ T27] #0: ffff888141dc6938 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 265.331025][ T27] #1: ffffc900030bfd00 ((work_completion)(&work->work)#3){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 265.344704][ T27] #2: ffff88802df41218 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x46/0x190 [ 265.356420][ T27] #3: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x16b/0x500 [ 265.366804][ T27] 2 locks held by kworker/u4:9/6527: [ 265.373055][ T27] 3 locks held by kworker/1:15/7839: [ 265.379192][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 265.390455][ T27] #1: ffffc9000376fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 265.409344][ T27] #2: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 265.422729][ T27] 2 locks held by syz.4.1226/8890: [ 265.428773][ T27] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x79f/0xf10 [ 265.439247][ T27] #1: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 265.452613][ T27] 3 locks held by syz.4.1226/8893: [ 265.458677][ T27] #0: ffffffff8d4aa0b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 265.468019][ T27] #1: ffffffff8d4a9f08 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xfa0 [ 265.478153][ T27] #2: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: team_nl_cmd_options_set+0xab/0xe70 [ 265.496445][ T27] [ 265.503146][ T27] ============================================= [ 265.503146][ T27] [ 265.518609][ T8890] bond6: (slave ip6gretap3): Releasing backup interface [ 265.519843][ T27] NMI backtrace for cpu 0 [ 265.529936][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 265.537149][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.547223][ T27] Call Trace: [ 265.550519][ T27] [ 265.553469][ T27] dump_stack_lvl+0x188/0x250 [ 265.558181][ T27] ? show_regs_print_info+0x20/0x20 [ 265.563395][ T27] ? load_image+0x410/0x410 [ 265.567924][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 265.573581][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 265.578716][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 265.583687][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 265.589870][ T27] ? _printk+0xda/0x130 [ 265.594055][ T27] ? load_image+0x410/0x410 [ 265.598593][ T27] ? load_image+0x410/0x410 [ 265.603124][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 265.609214][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 265.615309][ T27] watchdog+0xe1b/0xe60 [ 265.619527][ T27] kthread+0x42e/0x520 [ 265.623620][ T27] ? hungtask_pm_notify+0x40/0x40 [ 265.628660][ T27] ? kthread_blkcg+0xd0/0xd0 [ 265.633307][ T27] ret_from_fork+0x1f/0x30 [ 265.637758][ T27] [ 265.641919][ T27] Sending NMI from CPU 0 to CPUs 1: [ 265.647878][ C1] NMI backtrace for cpu 1 [ 265.647904][ C1] CPU: 1 PID: 4234 Comm: kworker/1:6 Not tainted syzkaller #0 [ 265.647923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.647934][ C1] Workqueue: events nsim_dev_trap_report_work [ 265.647967][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x2a/0x80 [ 265.647986][ C1] Code: 48 8b 04 24 65 48 8b 0d 24 6f 89 7e 65 8b 15 25 6f 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 34 16 00 00 00 <74> 4e 8b 91 10 16 00 00 83 fa 03 75 43 48 8b 91 18 16 00 00 44 8b [ 265.648013][ C1] RSP: 0018:ffffc90000dd0a78 EFLAGS: 00000246 [ 265.648030][ C1] RAX: ffffffff8818cb1c RBX: 000000a7c5ac471b RCX: ffff888061aebb80 [ 265.648042][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 000000a7c5ac471b [ 265.648069][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 265.648079][ C1] R10: dffffc0000000000 R11: fffff520001ba150 R12: ffff88801abac300 [ 265.648091][ C1] R13: 0019999999999998 R14: 0000000225c17d04 R15: 0000001cfdb417b6 [ 265.648102][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 265.648116][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.648127][ C1] CR2: 0000001b32b12ff8 CR3: 0000000077b26000 CR4: 00000000003506e0 [ 265.648141][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.648150][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.648171][ C1] Call Trace: [ 265.648176][ C1] [ 265.648180][ C1] pie_calculate_probability+0x24c/0x7f0 [ 265.648203][ C1] fq_pie_timer+0x17f/0x3c0 [ 265.648221][ C1] ? fq_pie_dump_stats+0x590/0x590 [ 265.648235][ C1] call_timer_fn+0x17b/0x540 [ 265.648252][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 265.648268][ C1] ? fq_pie_dump_stats+0x590/0x590 [ 265.648282][ C1] ? __run_timers+0x810/0x810 [ 265.648304][ C1] ? fq_pie_dump_stats+0x590/0x590 [ 265.648319][ C1] __run_timers+0x56c/0x810 [ 265.648341][ C1] ? detach_timer+0x2b0/0x2b0 [ 265.648356][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 265.648377][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 265.648393][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 265.648411][ C1] run_timer_softirq+0x63/0xf0 [ 265.648427][ C1] handle_softirqs+0x336/0x830 [ 265.648445][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 265.648461][ C1] ? do_softirq+0x210/0x210 [ 265.648474][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 265.648492][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 265.648509][ C1] __irq_exit_rcu+0x13b/0x230 [ 265.648523][ C1] ? irq_exit_rcu+0x20/0x20 [ 265.648542][ C1] irq_exit_rcu+0x5/0x20 [ 265.648554][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 265.648570][ C1] [ 265.648574][ C1] [ 265.648579][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 265.648594][ C1] RIP: 0010:unwind_next_frame+0x1d9/0x1cf0 [ 265.648611][ C1] Code: 8b 24 24 89 e8 ff c0 4c 8d 2c 85 00 e3 9e 8e 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 dd 15 00 00 45 8b 45 00 41 ff c0 <4b> 8d 04 64 48 8d 94 00 b4 f6 ff 8d 4b 8d 04 40 48 8d 84 00 b4 f6 [ 265.648623][ C1] RSP: 0018:ffffc900030ff670 EFLAGS: 00000202 [ 265.648635][ C1] RAX: 0000000000000000 RBX: ffffc900030ff708 RCX: ffffffff962f4f00 [ 265.648645][ C1] RDX: dffffc0000000000 RSI: 0000000000090081 RDI: 0000000000000001 [ 265.648654][ C1] RBP: 0000000000000047 R08: 0000000000000131 R09: 0000000000000009 [ 265.648663][ C1] R10: dffffc0000000000 R11: fffff5200061feed R12: 0000000000000115 [ 265.648673][ C1] R13: ffffffff8e9ee420 R14: ffffffff810047fe R15: dffffc0000000000 [ 265.648685][ C1] ? ret_from_fork+0x1e/0x30 [ 265.648709][ C1] ? ret_from_fork+0x1f/0x30 [ 265.648725][ C1] ? stack_trace_save+0xf0/0xf0 [ 265.648739][ C1] arch_stack_walk+0x10c/0x140 [ 265.648759][ C1] ? ret_from_fork+0x1f/0x30 [ 265.648774][ C1] ? kmem_cache_free+0x8f/0x210 [ 265.648789][ C1] stack_trace_save+0xa6/0xf0 [ 265.648802][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 265.648815][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 265.648830][ C1] ? nsim_dev_trap_report_work+0x771/0xab0 [ 265.648845][ C1] ? process_one_work+0x867/0xff0 [ 265.648861][ C1] ? worker_thread+0xad7/0x12a0 [ 265.648875][ C1] ? kmem_cache_free+0x8f/0x210 [ 265.648890][ C1] kasan_set_track+0x4b/0x70 [ 265.648905][ C1] ? kasan_set_track+0x4b/0x70 [ 265.648919][ C1] ? kasan_set_free_info+0x1f/0x40 [ 265.648935][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 265.648950][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 265.648964][ C1] ? kmem_cache_free+0x8f/0x210 [ 265.648977][ C1] ? nsim_dev_trap_report_work+0x771/0xab0 [ 265.648991][ C1] ? process_one_work+0x867/0xff0 [ 265.649005][ C1] ? worker_thread+0xad7/0x12a0 [ 265.649026][ C1] ? kthread+0x42e/0x520 [ 265.649038][ C1] ? ret_from_fork+0x1f/0x30 [ 265.649073][ C1] kasan_set_free_info+0x1f/0x40 [ 265.649089][ C1] ____kasan_slab_free+0xd5/0x110 [ 265.649105][ C1] slab_free_freelist_hook+0xec/0x170 [ 265.649121][ C1] ? nsim_dev_trap_report_work+0x771/0xab0 [ 265.649138][ C1] kmem_cache_free+0x8f/0x210 [ 265.649150][ C1] ? skb_release_head_state+0x1e7/0x240 [ 265.649169][ C1] nsim_dev_trap_report_work+0x771/0xab0 [ 265.649193][ C1] process_one_work+0x867/0xff0 [ 265.649215][ C1] ? worker_detach_from_pool+0x240/0x240 [ 265.649230][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 265.649247][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 265.649261][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 265.649276][ C1] ? wq_worker_running+0x97/0x170 [ 265.649291][ C1] worker_thread+0xad7/0x12a0 [ 265.649313][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 265.649333][ C1] kthread+0x42e/0x520 [ 265.649345][ C1] ? rcu_lock_release+0x20/0x20 [ 265.649359][ C1] ? kthread_blkcg+0xd0/0xd0 [ 265.649374][ C1] ret_from_fork+0x1f/0x30 [ 265.649395][ C1] [ 265.651341][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 266.225372][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 266.232595][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.242680][ T27] Call Trace: [ 266.245975][ T27] [ 266.248942][ T27] dump_stack_lvl+0x188/0x250 [ 266.253652][ T27] ? show_regs_print_info+0x20/0x20 [ 266.258874][ T27] ? load_image+0x410/0x410 [ 266.263411][ T27] panic+0x2f8/0x850 [ 266.267338][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 266.273002][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 266.277530][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 266.283124][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 266.289306][ T27] watchdog+0xe5a/0xe60 [ 266.293502][ T27] kthread+0x42e/0x520 [ 266.297592][ T27] ? hungtask_pm_notify+0x40/0x40 [ 266.302643][ T27] ? kthread_blkcg+0xd0/0xd0 [ 266.307261][ T27] ret_from_fork+0x1f/0x30 [ 266.311728][ T27] [ 266.315057][ T27] Kernel Offset: disabled [ 266.319423][ T27] Rebooting in 86400 seconds..