last executing test programs: 8m19.693713177s ago: executing program 0 (id=151): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) io_uring_enter(r1, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 8m19.055838979s ago: executing program 0 (id=155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000000c0)="42ec6c47ba0e0db8912dde8ff2d341c9ca619478532a41944e024588ab567f8770fbd9", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="6f41032714e9dd292df5cdaba7689648ccce259ac20d5954437fe850f4dddcd66bfe5ce1f3ce9a", 0xfe0f}, {&(0x7f0000000680)="d883cbafa3000e3179add89f262a22335cd61b4558392b0bad5fa8a0d4e67bb21a3ead72e3eb095d6cfb7292e635d3577d124b1bf0e504e8ed098c5f9acedcb29dfbc8ac507849e5b720dd3adc6c8a7cb9b72ae68b6e84975e1924399482aeaabe54275675961ba6e7c1807a93a940df02aad2ceeff94f8210927afe630e946616d315f92abf29099e10872c1a992fb0acb5654b665de94b4fd74e73848f707771dba44d1c244de4602b669bf9c9748324267eb3cb2dd077914ee5640eae7118903e95c0dcd2fcbab46cc151c8e580944a9cd3a106e8f46f23f2df195c6b570e92fc312c4bae0000"}], 0x1}}], 0x2, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 8m18.847809679s ago: executing program 0 (id=157): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0x0, 0xf}, {0x6, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001300010000000000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="000000002902000014001a80100004800c000380"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4850) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m18.709217906s ago: executing program 0 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) 8m18.509225106s ago: executing program 0 (id=162): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='9', 0x1}], 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 8m18.132612244s ago: executing program 0 (id=163): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) 8m17.726955194s ago: executing program 32 (id=163): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) 7m51.399203288s ago: executing program 3 (id=291): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') fchdir(r0) r1 = fanotify_init(0x40, 0x80000) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, 0x0, 0x0) 7m51.098302963s ago: executing program 3 (id=293): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa"], 0x38}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m50.660122564s ago: executing program 3 (id=296): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xe3) 7m50.401334317s ago: executing program 3 (id=298): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=@random={'user.', '([\x00'}, 0x0, 0x0) 7m49.916006921s ago: executing program 3 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x8, {0x40000000000003, 0x0, 0x2, 0xa6, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x1, 0x63, 0x6000, 0x40000000, r2, 0x0, 0x801, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x488, 0x9, 0x0, 0x0, 0x40, 0xb}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) close(r3) 7m48.90654845s ago: executing program 3 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x211, 0x0, &(0x7f0000000340)="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", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100d}, 0x50) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m48.325956909s ago: executing program 33 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x211, 0x0, &(0x7f0000000340)="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", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100d}, 0x50) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m27.115445431s ago: executing program 1 (id=392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x8470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x74614, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x23}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c081}, 0x8002) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m26.874964623s ago: executing program 1 (id=396): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000000180)="1d", 0x1, 0x203}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r3, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf9a}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf6}) 7m26.691353662s ago: executing program 1 (id=399): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m26.385985377s ago: executing program 1 (id=402): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 7m26.252989453s ago: executing program 1 (id=403): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rmdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x17d) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b000"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r2]) setxattr$incfs_id(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 7m25.900810651s ago: executing program 1 (id=405): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000002b00)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000880)=""/4096, 0x1000, 0x0, 0x3, 0x2}}, 0x48) 7m25.539720168s ago: executing program 34 (id=405): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000002b00)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000880)=""/4096, 0x1000, 0x0, 0x3, 0x2}}, 0x48) 5m16.604712994s ago: executing program 2 (id=932): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0)=@routing={0x6, 0x0, 0x1, 0x7f}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 5m15.516354227s ago: executing program 2 (id=937): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000040800"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0x6, 0x0, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001940)='./file0\x00', 0x20, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5m11.768640441s ago: executing program 2 (id=944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5m11.39117972s ago: executing program 2 (id=948): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x4006}) 5m11.188706159s ago: executing program 2 (id=949): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) 5m10.868159435s ago: executing program 2 (id=951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00053c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00", 0x29}, {&(0x7f0000002680)="76e69c0141", 0x5}], 0x2}, 0x4005) 5m10.245993956s ago: executing program 35 (id=951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00053c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00", 0x29}, {&(0x7f0000002680)="76e69c0141", 0x5}], 0x2}, 0x4005) 46.284623976s ago: executing program 5 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300)=r0, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) close(0x3) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 45.284325435s ago: executing program 5 (id=1425): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) recvmmsg(r4, 0x0, 0x0, 0x406, 0x0) 44.419441197s ago: executing program 5 (id=1435): socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, r0, 0x5) socket$inet6(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 40.017727653s ago: executing program 5 (id=1432): r0 = io_uring_setup(0x667, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(0x0, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 38.854680711s ago: executing program 5 (id=1436): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) recvmmsg(r4, 0x0, 0x0, 0x406, 0x0) 38.173442694s ago: executing program 5 (id=1439): openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x88400) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 23.043150228s ago: executing program 36 (id=1439): openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x88400) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 21.552527311s ago: executing program 7 (id=1458): write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab09250009", 0xd) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioperm(0x400, 0x7, 0x200000005) ioperm(0x9, 0x7ff, 0x100000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x62, 0x5, 0x1368, 0x1180, 0x1180, 0xffffffff, 0x1180, 0x10c8, 0x12d0, 0x12d0, 0xffffffff, 0x12d0, 0x12d0, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe286, 0xc9b0, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x7, @ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}, @icmp_id=0x68, @port=0x4e20}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @multicast2, @multicast1, @port=0x4e21, @icmp_id=0x68}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13c8) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x13, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0xffff, 0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) 16.913077138s ago: executing program 7 (id=1463): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000180)={0x6, 'veth0_to_batadv\x00', {0x1}, 0x6}) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{0x0}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x1}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x202, 0x7fffffff, 0x10000}, &(0x7f0000000200)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) write(r4, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) 15.304903458s ago: executing program 6 (id=1464): r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x0, 0x4000}, 0xc) getpeername$qrtr(r1, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x240282, 0x0) fcntl$setstatus(r2, 0x4, 0x0) syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='utf8,namecase=1,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=koi8-ru,errors=reiount-ro,keep_last_dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000003,time_offset=0x0000000000000006,errors=remount-ro,\x00'], 0x3, 0x152e, &(0x7f00000010c0)="$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") r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xacfcdea8ed5e8382}, 0x8800) 14.04710357s ago: executing program 7 (id=1466): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1b0000001a005f0400f9f407000904018000200000000000000000", 0x1b) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x33) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x4, 0xfffffffffffff907, 0x0, 0x5, 0x10001, 0xff81}) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 13.788679602s ago: executing program 4 (id=1467): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000000000000220000000000"], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000ffdbdf650200000014000100fc020000000000400000000000000000b8f1ecd985e4d5190fe1e37db0407d0d681223a918"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, 0x0, 0xfffffffffffffffe) 11.40063724s ago: executing program 4 (id=1470): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ptrace$peek(0x7, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) flistxattr(r4, &(0x7f0000000240)=""/53, 0x35) sendmmsg$inet(r4, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 8.965262839s ago: executing program 6 (id=1471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) 6.249563592s ago: executing program 4 (id=1472): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40186f40, 0x0) syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f0000000000)={0xfffffffffffffffd, 0x20003, 0x3}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x8ce, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x357}, 0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r8, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x59, 0x0, r7}) 6.133993968s ago: executing program 6 (id=1473): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0xc800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {0x0, 0xfd}, 0x1, 0x2, 0x70}) 4.612584553s ago: executing program 6 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00024000000000000000030c00014000000000000001010800054040000001080004"], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaa"], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xd) 4.604444894s ago: executing program 7 (id=1475): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) read(r0, &(0x7f0000000900)=""/198, 0xc6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b46, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='\x00\x00 \x00\x91]\xc3\xfc.\xd1+\xa3\xb9\xd5\xc1z\xcf\xc7M\x8a\x9c\x00\x00F', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e26, 0x10001, @local, 0xb}, r7}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r7, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) 4.555552526s ago: executing program 4 (id=1476): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(0x0, 0x2, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x1c, &(0x7f0000000100)={[0x3]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x38000000, 0x53f5}]}, 0xc, 0x2) r2 = socket$key(0xf, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000003240), 0x0, 0x8000) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r2], 0x44}, 0x1, 0x0, 0x0, 0x40020891}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x100400) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0x45, '\x00', @buffer={"08aa28fb236c1934e108f512b80034b920683e07edda7a112f685d4f3a155c71", 0x20}, 0x7}, {0x1f, '\x00', @st={0x4, [{0x2, @uvalue=0x7f}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x9}, {0x1, @uvalue=0x2}]}, 0x6}, {0xa, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b55913355f933502c0a9975e7de66b90754f408ec", 0x20}, 0x6}, {0x3f, '\x00', @data=0x6, 0x8}]}) 2.908135557s ago: executing program 4 (id=1477): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0xc800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {0x0, 0xfd}, 0x1, 0x2, 0x70}) 1.448674749s ago: executing program 4 (id=1478): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="e0000000130001", @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5189f75c863271e1bf36c11da94a91a9711f9fd7b5144ea0447d4700e4798a7"], 0xe0}], 0x1, 0x0, 0x0, 0x200080a5}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x4, 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xf, 0x19831, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a031700000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x58}, 0x1, 0x0, 0x0, 0x4044050}, 0x8040) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) write$sndseq(r6, &(0x7f0000000080)=[{0xe, 0x81, 0xfc, 0xfd, @time={0x2, 0x5}, {0x10, 0x4a}, {0xe}, @raw8={"1f000e0700000100"}}], 0x1c) 132.362003ms ago: executing program 6 (id=1479): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r4 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 7 (id=1480): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(r1, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)="27050200420014000600002fb96dbcf706e1c9dce80137f7db0f8d86498b3812b0164aebaff0a1614c80fd8410379dc65c8f6ee03ef731cec44c408d113746aa79727c2e5dd094a5fe703ea96e6341e840389f138410be380b77faea6b46efd50818022078c0035c13", 0x69}], 0x1}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000019080)=0x30) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) kernel console output (not intermixed with test programs): E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 142.477175][ T7450] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.494752][ T7413] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 142.558185][ T7413] F2FS-fs (loop1): invalid crc value [ 142.558252][ T7423] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 142.597696][ T7413] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.785867][ T7423] bio_check_eod: 1503 callbacks suppressed [ 142.785884][ T7423] syz.5.369: attempt to access beyond end of device [ 142.785884][ T7423] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 142.898862][ T7413] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.914973][ T7103] syz-executor: attempt to access beyond end of device [ 142.914973][ T7103] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.955355][ T7103] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 143.074755][ T7413] F2FS-fs (loop1): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x99c/0x1a00 [ 143.101297][ T7413] syz.1.366: attempt to access beyond end of device [ 143.101297][ T7413] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 143.175926][ T5762] syz-executor: attempt to access beyond end of device [ 143.175926][ T5762] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.208635][ T5762] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 143.442657][ T27] audit: type=1326 audit(1773757155.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.4.378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f711579c799 code=0x0 [ 143.610766][ T5752] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 143.634258][ T5752] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 143.662818][ T5752] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71 [ 143.699580][ T5752] usb 3-1: USB disconnect, device number 9 [ 143.926635][ T7482] loop2: detected capacity change from 0 to 7 [ 143.948749][ T7482] Dev loop2: unable to read RDB block 7 [ 143.961312][ T7482] loop2: AHDI p1 p2 p3 [ 143.976392][ T7482] loop2: partition table partially beyond EOD, truncated [ 143.993461][ T7482] loop2: p1 start 1818582900 is beyond EOD, truncated [ 144.011404][ T7482] loop2: p3 start 335544320 is beyond EOD, truncated [ 144.027458][ T7484] loop1: detected capacity change from 0 to 1024 [ 144.060696][ T7484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.112600][ T7484] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.861293][ T7504] loop2: detected capacity change from 0 to 7 [ 144.923233][ T7504] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 144.958949][ T7504] loop2: p1 start 4294770688 is beyond EOD, truncated [ 145.023333][ T7504] loop2: p2 start 17408 is beyond EOD, truncated [ 145.060667][ T7504] loop2: p3 size 1680801792 extends beyond EOD, truncated [ 145.099723][ T7504] loop2: p4 size 536870912 extends beyond EOD, truncated [ 145.114183][ T1065] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 6) [ 145.114969][ T7504] loop2: p5 size 8650752 extends beyond EOD, truncated [ 145.142543][ T7504] loop2: p6 start 8388608 is beyond EOD, truncated [ 145.179931][ T1065] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 145.231596][ T6944] udevd[6944]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 145.233428][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 145.272909][ T1065] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.272909][ T1065] [ 145.286756][ T5755] udevd[5755]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 145.350329][ T1065] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 145.403976][ T1065] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 145.427912][ T1065] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.427912][ T1065] [ 145.515335][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 145.626055][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.384'. [ 145.639615][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.656878][ T7507] lo: entered promiscuous mode [ 145.673804][ T7507] lo: entered allmulticast mode [ 145.854745][ T7527] loop1: detected capacity change from 0 to 512 [ 145.888983][ T7527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.936742][ T7527] EXT4-fs (loop1): 1 truncate cleaned up [ 145.944007][ T7527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.085710][ T7527] EXT4-fs error (device loop1) in ext4_setattr:5663: Corrupt filesystem [ 146.138390][ T7527] EXT4-fs (loop1): Remounting filesystem read-only [ 146.186905][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.624216][ T7554] loop4: detected capacity change from 0 to 512 [ 146.667115][ T7554] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.397: bad orphan inode 15 [ 146.681491][ T7554] ext4_test_bit(bit=14, block=18) = 1 [ 146.688724][ T7554] is_bad_inode(inode)=0 [ 146.693003][ T7554] NEXT_ORPHAN(inode)=1023 [ 146.697885][ T7554] max_ino=32 [ 146.701222][ T7554] i_nlink=0 [ 146.710036][ T7554] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2969: inode #15: comm syz.4.397: corrupted xattr block 19: invalid header [ 146.724191][ T7557] binder: 7555:7557 ioctl c0306201 0 returned -14 [ 146.732087][ T7557] binder: 7555:7557 ioctl 4018620d 0 returned -22 [ 146.743046][ T7554] EXT4-fs warning (device loop4): ext4_evict_inode:272: xattr delete (err -117) [ 146.764080][ T7557] binder: 7555:7557 ioctl c0306201 0 returned -14 [ 146.774385][ T7554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 146.800106][ T7554] ext4 filesystem being mounted at /67/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 146.934216][ T7561] loop2: detected capacity change from 0 to 1024 [ 146.965413][ T7561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.151970][ T7561] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Out of memory [ 147.208734][ T7561] EXT4-fs error (device loop2): __ext4_unlink:3328: inode #2: comm syz.2.401: mark_inode_dirty error [ 147.255182][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 147.280418][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.475222][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 147.499555][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 147.529684][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.550528][ T9] usb 6-1: Product: syz [ 147.554982][ T9] usb 6-1: Manufacturer: syz [ 147.570801][ T9] usb 6-1: SerialNumber: syz [ 147.583145][ T9] usb 6-1: config 0 descriptor?? [ 147.803752][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.829110][ T6408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 148.144582][ T7577] loop2: detected capacity change from 0 to 1024 [ 148.170336][ T7577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.232912][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.249203][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.258934][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.279762][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.289444][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.300311][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.361924][ T7582] Core dump to core aborted: cannot preserve file permissions [ 148.437073][ T9] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 148.459785][ T9] usb 6-1: USB disconnect, device number 3 [ 148.581606][ T5764] EXT4-fs error (device loop2): mb_free_blocks:1952: group 0, inode 20: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 148.611866][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 148.622769][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.724415][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.732255][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.739965][ T7580] bridge_slave_0: entered allmulticast mode [ 148.747791][ T7580] bridge_slave_0: entered promiscuous mode [ 148.758860][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.766541][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.774596][ T7580] bridge_slave_1: entered allmulticast mode [ 148.784928][ T7580] bridge_slave_1: entered promiscuous mode [ 148.829852][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.846210][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.887226][ T7580] team0: Port device team_slave_0 added [ 148.898446][ T7580] team0: Port device team_slave_1 added [ 148.926924][ T7593] binder: 7592:7593 ioctl c0306201 2000000003c0 returned -14 [ 148.936547][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.943569][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.971363][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.984507][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.993256][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.020999][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.131507][ T7580] hsr_slave_0: entered promiscuous mode [ 149.139433][ T7580] hsr_slave_1: entered promiscuous mode [ 149.157915][ T7580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.165710][ T7580] Cannot create hsr debugfs directory [ 149.321340][ T7600] tipc: Failed to remove unknown binding: 66,0,0/0:4166571866/4166571868 [ 149.330759][ T7600] tipc: Failed to remove unknown binding: 66,0,0/0:4166571866/4166571867 [ 149.343084][ T7600] tipc: Failed to remove unknown binding: 66,0,0/0:4166571866/4166571868 [ 149.352229][ T7600] tipc: Failed to remove unknown binding: 66,0,0/0:4166571866/4166571867 [ 149.407566][ T7580] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.420303][ T7580] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.432445][ T7580] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.454456][ T7580] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.538782][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.567535][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.583287][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.590454][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.607419][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.614693][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.857030][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.991784][ T7619] loop2: detected capacity change from 0 to 512 [ 150.026136][ T7619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.070400][ T7619] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.416: iget: bad i_size value: 38620345925642 [ 150.090050][ T7619] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.416: couldn't read orphan inode 15 (err -117) [ 150.104477][ T7619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.239523][ T7580] veth0_vlan: entered promiscuous mode [ 150.254866][ T7580] veth1_vlan: entered promiscuous mode [ 150.273390][ T7619] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.416: bg 0: block 5: invalid block bitmap [ 150.308001][ T7619] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 28 [ 150.333290][ T7580] veth0_macvtap: entered promiscuous mode [ 150.337154][ T7619] EXT4-fs (loop2): This should not happen!! Data will be lost [ 150.337154][ T7619] [ 150.349755][ T51] Bluetooth: hci0: command tx timeout [ 150.361103][ T7619] EXT4-fs (loop2): Total free blocks count 0 [ 150.369248][ T7619] EXT4-fs (loop2): Free/Dirty block details [ 150.370618][ T7580] veth1_macvtap: entered promiscuous mode [ 150.376457][ T7619] EXT4-fs (loop2): free_blocks=0 [ 150.386585][ T7619] EXT4-fs (loop2): dirty_blocks=112 [ 150.392743][ T7619] EXT4-fs (loop2): Block reservation details [ 150.399476][ T7619] EXT4-fs (loop2): i_reserved_data_blocks=112 [ 150.444587][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.466266][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.486754][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.497943][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.509225][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.535436][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.546813][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.557575][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.569296][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.589481][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.602030][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.615623][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.626139][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.637837][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.648388][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.661103][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.671715][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.704887][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.717063][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.757325][ T7580] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.773550][ T7580] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.782937][ T7580] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.793535][ T7580] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.809175][ T7635] loop5: detected capacity change from 0 to 256 [ 150.969702][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.002211][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.027722][ T7634] loop2: detected capacity change from 0 to 4096 [ 151.103867][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.129061][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.659246][ T7655] binder: 7654:7655 ioctl c0306201 2000000003c0 returned -14 [ 151.902117][ T7658] [ 152.431824][ T51] Bluetooth: hci0: command tx timeout [ 153.256764][ T7676] netlink: 'syz.4.431': attribute type 1 has an invalid length. [ 153.386170][ T7681] loop4: detected capacity change from 0 to 256 [ 153.535216][ T7681] loop4: detected capacity change from 256 to 1 [ 153.564921][ T7681] FAT-fs (loop4): FAT read failed (blocknr 1) [ 153.579381][ T7681] FAT-fs (loop4): Directory bread(block 3) failed [ 153.651300][ T2954] FAT-fs (loop4): unable to read inode block for updating (i_pos 193) [ 153.722122][ T6408] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 154.512730][ T51] Bluetooth: hci0: command tx timeout [ 154.519326][ T7702] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 154.651275][ T7707] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.653824][ T7702] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.671985][ T7702] bond1: (slave bond2): making interface the new active one [ 154.681293][ T7702] bond1: (slave bond2): Enslaving as an active interface with an up link [ 154.690799][ T7707] overlayfs: failed to set uuid (17/file1, err=-1); falling back to uuid=null. [ 154.811892][ T7709] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 155.006067][ T7702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'. [ 155.036390][ T7702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.529467][ T7743] fuse: Bad value for 'fd' [ 155.973455][ T7759] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 156.164873][ T7765] geneve2: entered promiscuous mode [ 156.237099][ T7765] geneve2: entered allmulticast mode [ 156.263607][ T7765] bond1: (slave geneve2): making interface the new active one [ 156.300846][ T7765] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 156.592107][ T51] Bluetooth: hci0: command tx timeout [ 157.301810][ T7815] loop2: detected capacity change from 0 to 512 [ 157.416608][ T7815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.490451][ T7815] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.753433][ T7815] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #18: comm syz.2.468: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 157.778881][ T7815] EXT4-fs (loop2): Remounting filesystem read-only [ 157.922313][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.937055][ T1065] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 158.865154][ T5752] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 159.112393][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.172792][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.193436][ T5752] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 159.229131][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.263660][ T5752] usb 7-1: config 0 descriptor?? [ 159.565427][ T5767] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 159.734204][ T5752] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 159.765482][ T5752] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 159.772907][ T5752] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 159.791780][ T5767] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 159.796673][ T5752] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 159.820603][ T5767] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.828139][ T5752] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 159.854587][ T5752] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 159.865660][ T5767] usb 3-1: config 0 has no interfaces? [ 159.871280][ T5767] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 159.876461][ T5752] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 159.916496][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.930249][ T5752] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 159.972606][ T5767] usb 3-1: config 0 descriptor?? [ 160.047547][ T5752] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 160.405472][ T7889] loop4: detected capacity change from 0 to 32768 [ 160.430643][ T7889] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.488 (7889) [ 160.499057][ T786] usb 3-1: USB disconnect, device number 10 [ 160.550520][ T7889] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 160.575225][ T7889] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 160.587451][ T7889] BTRFS info (device loop4): using free space tree [ 160.709394][ T5752] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 160.716833][ T7889] BTRFS info (device loop4): enabling ssd optimizations [ 160.716856][ T7889] BTRFS info (device loop4): auto enabling async discard [ 160.737177][ T5752] usb 7-1: USB disconnect, device number 2 [ 161.076881][ T6408] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 163.393093][ T7996] loop2: detected capacity change from 0 to 40427 [ 163.428551][ T7996] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 163.452626][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 163.461536][ T7996] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 163.473047][ T7996] F2FS-fs (loop2): invalid crc value [ 163.501892][ T7996] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.628484][ T7996] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 163.645354][ T7996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 163.938647][ T7996] overlayfs: missing 'lowerdir' [ 163.961757][ T7996] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 164.430105][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 164.441968][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 164.449523][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.459613][ T51] Workqueue: hci2 hci_rx_work [ 164.464359][ T51] Call Trace: [ 164.467675][ T51] [ 164.470635][ T51] dump_stack_lvl+0x18c/0x250 [ 164.475353][ T51] ? show_regs_print_info+0x20/0x20 [ 164.480618][ T51] ? load_image+0x400/0x400 [ 164.485171][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 164.490303][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 164.495110][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 164.500340][ T51] kobject_add_internal+0x61c/0xcc0 [ 164.505813][ T51] kobject_add+0x164/0x240 [ 164.510422][ T51] ? __rwlock_init+0x150/0x150 [ 164.515296][ T51] ? kobject_init+0x1e0/0x1e0 [ 164.519994][ T51] ? _raw_spin_unlock+0x28/0x40 [ 164.524939][ T51] ? get_device_parent+0x366/0x390 [ 164.530048][ T51] device_add+0x408/0xc20 [ 164.534587][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 164.539566][ T51] le_conn_complete_evt+0xf5d/0x1540 [ 164.544952][ T51] ? hci_event_packet+0x4cb/0x1270 [ 164.550089][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 164.556384][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 164.562155][ T51] ? skb_pull_data+0xfb/0x200 [ 164.566873][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 164.572451][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 164.578972][ T51] hci_event_packet+0x7ba/0x1270 [ 164.584611][ T51] ? bis_list+0x290/0x290 [ 164.589119][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 164.594336][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 164.599569][ T51] hci_rx_work+0x43a/0xd60 [ 164.604124][ T51] ? process_scheduled_works+0x96f/0x15d0 [ 164.609885][ T51] process_scheduled_works+0xa5d/0x15d0 [ 164.615506][ T51] ? worker_attach_to_pool+0x380/0x380 [ 164.621004][ T51] ? assign_work+0x3d2/0x5d0 [ 164.625620][ T51] worker_thread+0xa55/0xfc0 [ 164.630223][ T51] kthread+0x2fa/0x390 [ 164.634285][ T51] ? pr_cont_work+0x560/0x560 [ 164.638960][ T51] ? kthread_blkcg+0xd0/0xd0 [ 164.643551][ T51] ret_from_fork+0x48/0x80 [ 164.648043][ T51] ? kthread_blkcg+0xd0/0xd0 [ 164.652683][ T51] ret_from_fork_asm+0x11/0x20 [ 164.657509][ T51] [ 164.671261][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 164.685536][ T51] Bluetooth: hci2: failed to register connection device [ 164.721112][ T8045] tipc: Enabling of bearer rejected, failed to enable media [ 165.454669][ T27] audit: type=1326 audit(1773757177.400:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2859c799 code=0x7fc00000 [ 165.782970][ T8058] loop2: detected capacity change from 0 to 32768 [ 165.808261][ T8058] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.528 (8058) [ 165.845568][ T8065] loop6: detected capacity change from 0 to 1024 [ 165.858940][ T8058] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.896046][ T8058] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 165.914959][ T8065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.923557][ T8058] BTRFS info (device loop2): using free space tree [ 165.992884][ T8061] loop4: detected capacity change from 0 to 32768 [ 166.055265][ T27] audit: type=1326 audit(1773757177.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca2853db19 code=0x7fc00000 [ 166.080260][ T8061] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.529 (8061) [ 166.205282][ T8061] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.305821][ T8061] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 166.345208][ T8061] BTRFS info (device loop4): using free space tree [ 166.379825][ T8058] BTRFS info (device loop2): enabling ssd optimizations [ 166.406624][ T8058] BTRFS info (device loop2): auto enabling async discard [ 166.659138][ T8061] BTRFS info (device loop4): enabling ssd optimizations [ 166.676468][ T8061] BTRFS info (device loop4): auto enabling async discard [ 166.755386][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.122207][ T5764] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.147038][ T8061] loop4: detected capacity change from 32768 to 64 [ 167.312310][ T8110] syz.4.529: attempt to access beyond end of device [ 167.312310][ T8110] loop4: rw=6145, sector=10240, nr_sectors = 8 limit=64 [ 167.349396][ T8110] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 167.450274][ T8110] syz.4.529: attempt to access beyond end of device [ 167.450274][ T8110] loop4: rw=6145, sector=10248, nr_sectors = 8 limit=64 [ 167.529976][ T8110] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 167.570592][ T8110] syz.4.529: attempt to access beyond end of device [ 167.570592][ T8110] loop4: rw=6145, sector=10440, nr_sectors = 8 limit=64 [ 167.646354][ T8110] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 167.690117][ T8110] syz.4.529: attempt to access beyond end of device [ 167.690117][ T8110] loop4: rw=6145, sector=10448, nr_sectors = 8 limit=64 [ 167.758676][ T8110] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 167.801313][ T8110] syz.4.529: attempt to access beyond end of device [ 167.801313][ T8110] loop4: rw=6145, sector=10456, nr_sectors = 8 limit=64 [ 167.866964][ T8110] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 167.887464][ T8110] syz.4.529: attempt to access beyond end of device [ 167.887464][ T8110] loop4: rw=6145, sector=10464, nr_sectors = 8 limit=64 [ 167.935237][ T8110] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 [ 167.995594][ T8110] syz.4.529: attempt to access beyond end of device [ 167.995594][ T8110] loop4: rw=6145, sector=10472, nr_sectors = 8 limit=64 [ 168.015672][ T8110] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0 [ 168.040300][ T8110] BTRFS: error (device loop4) in btrfs_commit_transaction:2505: errno=-5 IO failure (Error while writing out transaction) [ 168.083959][ T8110] BTRFS info (device loop4: state E): forced readonly [ 168.132109][ T8110] BTRFS warning (device loop4: state E): Skipping commit of aborted transaction. [ 168.165607][ T8110] BTRFS error (device loop4: state EA): Transaction aborted (error -5) [ 168.183385][ T8110] BTRFS: error (device loop4: state EA) in cleanup_transaction:2005: errno=-5 IO failure [ 168.276621][ T8133] loop2: detected capacity change from 0 to 8 [ 170.140597][ T6408] BTRFS info (device loop4: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.617717][ T8158] loop6: detected capacity change from 0 to 32768 [ 172.655686][ T8158] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 172.841285][ T8158] XFS (loop6): Ending clean mount [ 174.211693][ T5767] IPVS: starting estimator thread 0... [ 174.335546][ T8207] IPVS: using max 24 ests per chain, 57600 per kthread [ 175.234568][ T8193] syz.6.547 (8193): drop_caches: 2 [ 175.273852][ T7580] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 175.411101][ T2983] tipc: Subscription rejected, illegal request [ 176.585711][ T8242] batadv_slave_0: entered promiscuous mode [ 176.607557][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.568'. [ 176.655223][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.827814][ T8242] batadv_slave_0 (unregistering): left promiscuous mode [ 176.853071][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.437945][ T8256] loop4: detected capacity change from 0 to 1024 [ 177.463830][ T8256] EXT4-fs: Ignoring removed oldalloc option [ 177.476517][ T8256] EXT4-fs: Ignoring removed bh option [ 177.516815][ T8256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.572631][ T8256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.616603][ T8259] overlayfs: failed to clone upperpath [ 177.717539][ T27] audit: type=1804 audit(1773757189.670:11): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.572" name="/newroot/105/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 178.587170][ T6408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.259622][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 179.751766][ T27] audit: type=1800 audit(1773757191.700:12): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.588" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 180.528972][ T8330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.541517][ T8330] team0: Port device bond0 added [ 180.577095][ T8330] netlink: 'syz.5.597': attribute type 16 has an invalid length. [ 180.588657][ T8330] netlink: 'syz.5.597': attribute type 17 has an invalid length. [ 180.619406][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.628960][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.350228][ T8341] loop2: detected capacity change from 0 to 4096 [ 181.379832][ T8341] EXT4-fs: inline encryption not supported [ 181.397072][ T8341] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 181.429736][ T8341] System zones: 0-5 [ 181.465504][ T8341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.647324][ T8341] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.600: bg 0: bad block bitmap checksum [ 181.738324][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.481965][ T8362] loop6: detected capacity change from 0 to 1024 [ 182.511554][ T8362] EXT4-fs: Ignoring removed oldalloc option [ 182.518781][ T8362] EXT4-fs: Ignoring removed bh option [ 182.556292][ T8362] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.610200][ T8362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.658101][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.609'. [ 182.713431][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.609'. [ 182.750489][ T27] audit: type=1804 audit(1773757194.700:13): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.608" name="/newroot/35/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 182.873223][ T8366] ip6gretap0: entered promiscuous mode [ 182.899280][ T8366] syz_tun: entered promiscuous mode [ 182.911050][ T8366] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 182.925912][ T8366] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 183.784604][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.768299][ T8407] loop4: detected capacity change from 0 to 1024 [ 184.817745][ T8412] binder: 8408:8412 ioctl c0306201 0 returned -14 [ 184.825599][ T8407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 184.887618][ T8407] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.464383][ T6408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.939137][ T8420] loop2: detected capacity change from 0 to 1024 [ 185.995131][ T8420] EXT4-fs: Ignoring removed oldalloc option [ 186.024617][ T8420] EXT4-fs: Ignoring removed bh option [ 186.050295][ T8420] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.139182][ T8420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.227458][ T8431] loop6: detected capacity change from 0 to 256 [ 186.295221][ T27] audit: type=1804 audit(1773757198.240:14): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.625" name="/newroot/148/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 187.069282][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.508323][ T8461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.649541][ T8474] loop4: detected capacity change from 0 to 1024 [ 188.665886][ T8474] EXT4-fs: Ignoring removed oldalloc option [ 188.681694][ T42] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 188.692414][ T8474] EXT4-fs: Ignoring removed bh option [ 188.702243][ T8474] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.740766][ T8474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.820612][ T27] audit: type=1804 audit(1773757200.770:15): pid=8474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.643" name="/newroot/123/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 188.875359][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 188.884861][ T42] usb 7-1: unable to get BOS descriptor or descriptor too short [ 188.895477][ T42] usb 7-1: config 7 has an invalid interface number: 58 but max is 0 [ 188.910206][ T42] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 188.930392][ T42] usb 7-1: config 7 has no interface number 0 [ 188.951340][ T42] usb 7-1: config 7 interface 58 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.988131][ T42] usb 7-1: config 7 interface 58 has no altsetting 0 [ 189.007661][ T42] usb 7-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 189.025383][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.050722][ T42] usb 7-1: Product: syz [ 189.058857][ T42] usb 7-1: Manufacturer: syz [ 189.064209][ T42] usb 7-1: SerialNumber: syz [ 189.171095][ T8479] tipc: Failed to remove unknown binding: 66,0,0/0:2845060995/2845060997 [ 189.191022][ T8479] tipc: Failed to remove unknown binding: 66,0,0/0:2845060995/2845060996 [ 189.201960][ T8479] tipc: Failed to remove unknown binding: 66,0,0/0:2845060995/2845060997 [ 189.213570][ T8479] tipc: Failed to remove unknown binding: 66,0,0/0:2845060995/2845060996 [ 189.343261][ T42] usb 7-1: USB disconnect, device number 3 [ 190.501182][ T6408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.724135][ T8496] syzkaller0: entered promiscuous mode [ 190.734709][ T8496] syzkaller0: entered allmulticast mode [ 194.589571][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.615507][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.651898][ T8541] loop6: detected capacity change from 0 to 1024 [ 194.662580][ T8541] EXT4-fs: Ignoring removed oldalloc option [ 194.692969][ T8541] EXT4-fs: Ignoring removed bh option [ 194.714349][ T8541] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.772769][ T8541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.863162][ T27] audit: type=1804 audit(1773757206.810:16): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.660" name="/newroot/50/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 195.719875][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.303899][ T8518] netlink: 'syz.4.653': attribute type 10 has an invalid length. [ 196.340506][ T8518] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.924849][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 197.475187][ T1204] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 197.665376][ T1204] usb 7-1: Using ep0 maxpacket: 16 [ 197.673598][ T1204] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.695422][ T1204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.728851][ T1204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.763675][ T1204] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.805320][ T1204] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.836972][ T1204] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.854293][ T1204] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.883069][ T1204] usb 7-1: Manufacturer: syz [ 197.907642][ T1204] usb 7-1: config 0 descriptor?? [ 198.275219][ T1204] rc_core: IR keymap rc-hauppauge not found [ 198.282034][ T1204] Registered IR keymap rc-empty [ 198.292030][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.299646][ T8587] netlink: 'syz.5.677': attribute type 10 has an invalid length. [ 198.348089][ T8587] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 198.385627][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.477977][ T1204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 198.517564][ T1204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input7 [ 198.579215][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.645400][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.699544][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.755357][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.803818][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.845225][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.885904][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.901384][ T8605] overlayfs: failed to clone upperpath [ 198.925757][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 198.985313][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 199.028480][ T1204] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 199.066221][ T8610] loop2: detected capacity change from 0 to 1024 [ 199.087461][ T1204] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 199.109322][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.684'. [ 199.129919][ T1204] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 199.147716][ T8610] syz.2.685: attempt to access beyond end of device [ 199.147716][ T8610] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 199.175455][ T1204] usb 7-1: USB disconnect, device number 4 [ 199.182070][ T8613] binder_alloc: 8612: pid 8612 spamming oneway? 2 buffers allocated for a total size of 5120 [ 199.227948][ T8610] buffer_io_error: 1502 callbacks suppressed [ 199.227965][ T8610] Buffer I/O error on dev loop2, logical block 2889, async page read [ 199.269588][ T8610] syz.2.685: attempt to access beyond end of device [ 199.269588][ T8610] loop2: rw=0, sector=393216, nr_sectors = 2 limit=1024 [ 199.314142][ T8610] Buffer I/O error on dev loop2, logical block 196608, async page read [ 199.323176][ T8610] syz.2.685: attempt to access beyond end of device [ 199.323176][ T8610] loop2: rw=0, sector=393218, nr_sectors = 2 limit=1024 [ 199.382959][ T8610] Buffer I/O error on dev loop2, logical block 196609, async page read [ 199.406386][ T8610] syz.2.685: attempt to access beyond end of device [ 199.406386][ T8610] loop2: rw=0, sector=393220, nr_sectors = 2 limit=1024 [ 199.421087][ T8610] Buffer I/O error on dev loop2, logical block 196610, async page read [ 199.434693][ T8614] syz.2.685: attempt to access beyond end of device [ 199.434693][ T8614] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 199.455547][ T8609] syz.2.685: attempt to access beyond end of device [ 199.455547][ T8609] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 199.456357][ T8610] syz.2.685: attempt to access beyond end of device [ 199.456357][ T8610] loop2: rw=0, sector=393222, nr_sectors = 2 limit=1024 [ 199.499444][ T8609] Buffer I/O error on dev loop2, logical block 2889, async page read [ 199.505742][ T8610] Buffer I/O error on dev loop2, logical block 196611, async page read [ 199.512077][ T8609] syz.2.685: attempt to access beyond end of device [ 199.512077][ T8609] loop2: rw=0, sector=393216, nr_sectors = 2 limit=1024 [ 199.517430][ T8610] syz.2.685: attempt to access beyond end of device [ 199.517430][ T8610] loop2: rw=0, sector=393224, nr_sectors = 2 limit=1024 [ 199.599954][ T8610] Buffer I/O error on dev loop2, logical block 196612, async page read [ 199.603239][ T8609] Buffer I/O error on dev loop2, logical block 196608, async page read [ 199.626262][ T8609] syz.2.685: attempt to access beyond end of device [ 199.626262][ T8609] loop2: rw=0, sector=393218, nr_sectors = 2 limit=1024 [ 199.640948][ T8610] Buffer I/O error on dev loop2, logical block 196613, async page read [ 199.640992][ T8610] Buffer I/O error on dev loop2, logical block 196614, async page read [ 200.201558][ T8629] loop2: detected capacity change from 0 to 2048 [ 200.240431][ T8629] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.071256][ T8646] netlink: 'syz.5.698': attribute type 39 has an invalid length. [ 202.323277][ T8646] syz_tun (unregistering): left promiscuous mode [ 202.776521][ T8662] netlink: 'syz.2.703': attribute type 11 has an invalid length. [ 204.880861][ T8697] netlink: 164 bytes leftover after parsing attributes in process `syz.4.715'. [ 208.867063][ T8735] overlayfs: failed to clone upperpath [ 210.482713][ T8770] overlayfs: failed to resolve './file1': -2 [ 211.283431][ T8801] syzkaller0: entered promiscuous mode [ 211.307154][ T8801] syzkaller0: entered allmulticast mode [ 212.413638][ T8809] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 212.482970][ T8809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.555829][ T8813] bond1: entered promiscuous mode [ 212.579696][ T8818] ip6gretap1: entered promiscuous mode [ 212.664290][ T8818] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 212.751858][ T8816] bond3: (slave gretap2): making interface the new active one [ 212.772370][ T8816] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 212.793761][ T8822] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 212.810558][ T8822] ip6gretap1: left promiscuous mode [ 212.833057][ T8822] bond1 (unregistering): Released all slaves [ 216.442288][ T8859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.761'. [ 216.484437][ T8918] bond4: entered promiscuous mode [ 216.490058][ T8859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.761'. [ 216.544527][ T8918] ip6gretap1: entered promiscuous mode [ 216.554684][ T8918] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 216.583826][ T8918] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 216.595759][ T8918] ip6gretap1: left promiscuous mode [ 216.606109][ T8918] bond4 (unregistering): Released all slaves [ 219.366036][ T8952] loop4: detected capacity change from 0 to 4096 [ 219.380327][ T8952] ext4: Unknown parameter 'hash' [ 222.273343][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 222.826806][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 226.293821][ T9025] loop2: detected capacity change from 0 to 128 [ 226.322515][ T9025] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 230.033576][ T9042] bio_check_eod: 2663 callbacks suppressed [ 230.033590][ T9042] syz.4.802: attempt to access beyond end of device [ 230.033590][ T9042] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 231.422546][ T8] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 231.665169][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 231.708939][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 232.669285][ T8] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 232.685174][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.693217][ T8] usb 7-1: Product: syz [ 232.697880][ T8] usb 7-1: Manufacturer: syz [ 232.705176][ T8] usb 7-1: SerialNumber: syz [ 232.776986][ T8] usb 7-1: config 0 descriptor?? [ 232.784288][ T9068] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 232.826907][ T8] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 233.655500][ T8] usb 7-1: USB disconnect, device number 5 [ 234.930618][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.859779][ T9116] loop6: detected capacity change from 0 to 64 [ 235.897102][ T9114] tipc: Enabled bearer , priority 0 [ 235.977394][ T9107] tipc: Disabling bearer [ 236.208398][ T9121] netlink: 64 bytes leftover after parsing attributes in process `syz.4.820'. [ 237.035135][ T27] audit: type=1800 audit(1773757248.980:17): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.818" name="file7" dev="loop6" ino=30 res=0 errno=0 [ 239.458466][ T9143] netlink: 'syz.6.828': attribute type 10 has an invalid length. [ 239.490848][ T9143] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 239.770532][ T9155] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 239.799563][ T9155] bond4: entered promiscuous mode [ 239.821086][ T9155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.000548][ T9155] macvtap1: entered allmulticast mode [ 240.042616][ T9155] bond4: (slave bridge2): making interface the new active one [ 240.052101][ T9155] bridge2: entered promiscuous mode [ 240.064423][ T9155] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 241.190730][ T9166] syzkaller0: entered promiscuous mode [ 241.202071][ T9166] syzkaller0: entered allmulticast mode [ 243.225321][ T42] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 243.693838][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.761742][ T42] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 243.804958][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.994433][ T42] usb 7-1: config 0 descriptor?? [ 244.050946][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 244.604735][ T9218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.622847][ T9218] bond0: (slave bond1): Enslaving as an active interface with an up link [ 244.660730][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 244.674135][ T9220] netlink: 14 bytes leftover after parsing attributes in process `syz.5.849'. [ 244.828211][ T9220] team0: Port device bond0 removed [ 244.842296][ T9220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.861734][ T42] pwc: recv_control_msg error -32 req 02 val 2c00 [ 244.869505][ T42] pwc: recv_control_msg error -32 req 04 val 1000 [ 244.877500][ T42] pwc: recv_control_msg error -32 req 04 val 1300 [ 244.878005][ T9220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.884602][ T42] pwc: recv_control_msg error -32 req 04 val 1400 [ 244.900338][ T42] pwc: recv_control_msg error -32 req 02 val 2000 [ 244.908048][ T42] pwc: recv_control_msg error -32 req 02 val 2100 [ 244.915698][ T42] pwc: recv_control_msg error -32 req 04 val 1500 [ 244.923633][ T42] pwc: recv_control_msg error -32 req 02 val 2500 [ 245.078558][ T9220] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 245.146123][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 245.247222][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 245.344976][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 245.493461][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 245.625297][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 245.689228][ T42] pwc: Registered as video103. [ 245.758740][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8 [ 245.894832][ T42] usb 7-1: USB disconnect, device number 6 [ 247.027271][ T9220] bond0 (unregistering): (slave bond1): Releasing backup interface [ 247.043569][ T9220] bond0 (unregistering): Released all slaves [ 247.164822][ T9242] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 248.323386][ T9247] loop2: detected capacity change from 0 to 16 [ 248.339260][ T8805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.360905][ T8805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.396551][ T9247] erofs: (device loop2): mounted with root inode @ nid 36. [ 248.514749][ T9247] kvm: emulating exchange as write [ 248.523879][ T8805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.546995][ T8805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.591328][ T9256] syzkaller0: entered promiscuous mode [ 248.599473][ T9256] syzkaller0: entered allmulticast mode [ 248.642624][ T8805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.654793][ T8805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.764632][ T9259] loop2: detected capacity change from 0 to 256 [ 248.774420][ T8805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.815635][ T8805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.883824][ T9259] exFAT-fs (loop2): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 248.925401][ T9259] exFAT-fs (loop2): Filesystem has been set read-only [ 249.370599][ T9275] netem: change failed [ 249.823844][ T8805] bond1: (slave ip6erspan0): Releasing active interface [ 249.849528][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.869'. [ 249.871915][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.869'. [ 249.920435][ T9293] netlink: 'syz.6.869': attribute type 4 has an invalid length. [ 249.945226][ T9293] netlink: 152 bytes leftover after parsing attributes in process `syz.6.869'. [ 250.144075][ T9293] wlan1: mtu less than device minimum [ 250.467126][ T51] Bluetooth: hci2: command tx timeout [ 252.985575][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 255.189478][ T9359] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 255.898228][ T9360] bridge_slave_0: left allmulticast mode [ 255.903961][ T9360] bridge_slave_0: left promiscuous mode [ 255.975497][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.014495][ T9360] bridge_slave_1: left allmulticast mode [ 256.031377][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.055390][ T9360] bridge_slave_1: left promiscuous mode [ 256.061080][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.079163][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.437363][ T9360] team0: Port device team_slave_0 removed [ 257.509170][ T9360] team0: Port device team_slave_1 removed [ 257.555894][ T9360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.571934][ T9360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.602654][ T9360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.629599][ T9360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.709944][ T9359] netlink: 'syz.5.883': attribute type 10 has an invalid length. [ 257.755238][ T9359] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 257.778648][ T9362] netlink: 14 bytes leftover after parsing attributes in process `syz.5.883'. [ 257.838572][ T8805] hsr_slave_0: left promiscuous mode [ 257.869192][ T8805] hsr_slave_1: left promiscuous mode [ 257.892321][ T8805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.908653][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.925948][ T8805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.943711][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.964811][ T8805] bridge_slave_1: left allmulticast mode [ 257.970863][ T8805] bridge_slave_1: left promiscuous mode [ 257.987063][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.029407][ T8805] bridge_slave_0: left allmulticast mode [ 258.048093][ T8805] bridge_slave_0: left promiscuous mode [ 258.053869][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.366713][ T8805] veth1_macvtap: left promiscuous mode [ 258.472243][ T8805] veth0_macvtap: left promiscuous mode [ 258.590592][ T8805] veth1_vlan: left promiscuous mode [ 258.783020][ T8805] veth0_vlan: left promiscuous mode [ 261.123857][ T8805] bond1 (unregistering): Released all slaves [ 261.865728][ T9396] loop6: detected capacity change from 0 to 512 [ 261.877174][ T9396] EXT4-fs: Ignoring removed i_version option [ 261.912455][ T9396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.947556][ T9396] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 261.992452][ T9396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 262.000699][ T9396] System zones: 1-12 [ 262.005565][ T9396] EXT4-fs (loop6): orphan cleanup on readonly fs [ 262.020172][ T9396] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.891: invalid indirect mapped block 2 (level 2) [ 262.046131][ T9396] EXT4-fs (loop6): Remounting filesystem read-only [ 262.054777][ T9396] EXT4-fs (loop6): 1 truncate cleaned up [ 262.069482][ T9396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 262.307475][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 263.110401][ T8805] team0 (unregistering): Port device team_slave_1 removed [ 263.181950][ T8805] team0 (unregistering): Port device team_slave_0 removed [ 263.260712][ T8805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.328223][ T8805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.868700][ T8805] bond0 (unregistering): Released all slaves [ 264.252781][ T9401] tipc: Enabling of bearer rejected, failed to enable media [ 265.222169][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.896'. [ 265.242528][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.896'. [ 265.298994][ T9421] bridge0: entered promiscuous mode [ 265.345362][ T9421] ip6gretap0: entered promiscuous mode [ 265.375535][ T9421] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 265.407673][ T9421] Cannot create hsr debugfs directory [ 265.439557][ T9421] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 266.870197][ T9450] fuse: Bad value for 'fd' [ 267.789593][ T9453] netlink: 'syz.6.904': attribute type 1 has an invalid length. [ 267.874811][ T9456] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.005503][ T9456] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.026574][ T9456] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.045305][ T9456] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 268.071160][ T9456] bond1: (slave geneve2): making interface the new active one [ 268.093572][ T9456] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 268.143599][ T9453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.904'. [ 268.232072][ T9453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.466730][ T9499] gtp0: entered promiscuous mode [ 270.479796][ T9499] gtp0: entered allmulticast mode [ 271.854793][ T27] audit: type=1800 audit(1773757283.770:18): pid=9515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.913" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 273.475800][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 273.658920][ T27] audit: type=1800 audit(1773757285.600:19): pid=9541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.924" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 274.672247][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.549075][ T9552] netlink: 'syz.4.926': attribute type 16 has an invalid length. [ 275.575930][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.926'. [ 277.672335][ T9594] loop6: detected capacity change from 0 to 32768 [ 277.843833][ T9594] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 277.867233][ T9594] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 280.193135][ T9620] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 281.009533][ T9627] binder: 9623:9627 ioctl c0306201 0 returned -14 [ 281.319957][ T9600] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.335229][ T9600] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.344150][ T9600] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.353273][ T9600] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.510499][ T9630] syzkaller0: entered promiscuous mode [ 281.517460][ T9630] syzkaller0: entered allmulticast mode [ 281.602677][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.945'. [ 281.634104][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.945'. [ 284.272093][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.283887][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.294920][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.303853][ T5769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.311652][ T5769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.319580][ T5769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.367127][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.595253][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 284.613249][ T23] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 284.622158][ T23] usb 5-1: config 0 has no interface number 0 [ 284.630793][ T23] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.643578][ T23] usb 5-1: config 0 interface 85 has no altsetting 0 [ 284.665774][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 284.771443][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.941998][ T23] usb 5-1: Product: syz [ 284.965973][ T23] usb 5-1: Manufacturer: syz [ 285.076148][ T23] usb 5-1: SerialNumber: syz [ 285.096345][ T23] usb 5-1: config 0 descriptor?? [ 285.170630][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.5.957'. [ 285.184149][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.5.957'. [ 285.642855][ T23] appletouch 5-1:0.85: Geyser mode initialized. [ 285.748866][ T23] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input9 [ 286.284942][ T9686] chnl_net:caif_netlink_parms(): no params data found [ 286.445262][ T51] Bluetooth: hci3: command tx timeout [ 286.522681][ T23] usb 5-1: USB disconnect, device number 4 [ 286.630437][ T23] appletouch 5-1:0.85: input: appletouch disconnected [ 286.744521][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.759886][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.768878][ T9686] bridge_slave_0: entered allmulticast mode [ 286.776381][ T9686] bridge_slave_0: entered promiscuous mode [ 286.796629][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.803976][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.825371][ T9686] bridge_slave_1: entered allmulticast mode [ 286.833406][ T9686] bridge_slave_1: entered promiscuous mode [ 286.917145][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.953155][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.961'. [ 286.974832][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.067895][ T9686] team0: Port device team_slave_0 added [ 287.102460][ T9686] team0: Port device team_slave_1 added [ 287.212906][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.252617][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.315635][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.358487][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.385156][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.434496][ T27] audit: type=1804 audit(1773757299.380:20): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.965" name="/newroot/198/file1" dev="fuse" ino=1 res=1 errno=0 [ 287.465839][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.608903][ T9686] hsr_slave_0: entered promiscuous mode [ 287.636923][ T9686] hsr_slave_1: entered promiscuous mode [ 287.647964][ T9686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.675072][ T9686] Cannot create hsr debugfs directory [ 288.196610][ T9741] kvm: pic: non byte write [ 288.226249][ T9741] kvm: pic: non byte write [ 288.236381][ T9741] kvm: pic: level sensitive irq not supported [ 288.236828][ T9741] kvm: pic: non byte write [ 288.310077][ T9741] kvm: pic: non byte write [ 288.337498][ T9741] kvm: pic: non byte write [ 288.362672][ T9741] kvm: pic: non byte write [ 288.393098][ T9741] kvm: pic: non byte write [ 288.406842][ T9741] kvm: pic: non byte write [ 288.415624][ T9741] kvm: pic: non byte write [ 288.435205][ T9741] kvm: pic: non byte write [ 288.441826][ T9741] kvm: pic: level sensitive irq not supported [ 288.443211][ T9741] kvm: pic: single mode not supported [ 288.482667][ T9741] kvm: pic: single mode not supported [ 288.488184][ T9741] kvm: pic: level sensitive irq not supported [ 288.509343][ T51] Bluetooth: hci3: command tx timeout [ 289.423724][ T9686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 289.446721][ T9686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 289.648663][ T9686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 289.696000][ T9686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 289.779878][ T9765] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 290.585261][ T51] Bluetooth: hci3: command tx timeout [ 290.695705][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.805139][ T9686] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.891566][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.898923][ T8805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.950343][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.957684][ T8805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.414636][ T9788] team_slave_0: entered promiscuous mode [ 291.421030][ T9788] team_slave_1: entered promiscuous mode [ 291.445728][ T9788] macvlan2: entered allmulticast mode [ 291.451340][ T9788] team0: entered allmulticast mode [ 291.462279][ T9788] team_slave_0: entered allmulticast mode [ 291.495130][ T9788] team_slave_1: entered allmulticast mode [ 291.518083][ T9788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 291.582312][ T9788] team0: left allmulticast mode [ 291.590030][ T9788] team_slave_0: left allmulticast mode [ 291.601017][ T9788] team_slave_1: left allmulticast mode [ 291.612015][ T9788] team_slave_0: left promiscuous mode [ 291.617564][ T9788] team_slave_1: left promiscuous mode [ 291.719090][ T9800] tipc: Enabling of bearer rejected, failed to enable media [ 292.127034][ T9807] loop4: detected capacity change from 0 to 32768 [ 292.224274][ T9807] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 292.235473][ T9807] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 292.922680][ T51] Bluetooth: hci3: command tx timeout [ 292.990866][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.441808][ T9835] syzkaller0: entered promiscuous mode [ 293.460847][ T9835] syzkaller0: entered allmulticast mode [ 293.735533][ T9686] veth0_vlan: entered promiscuous mode [ 293.774107][ T9686] veth1_vlan: entered promiscuous mode [ 293.910865][ T9686] veth0_macvtap: entered promiscuous mode [ 293.987247][ T9686] veth1_macvtap: entered promiscuous mode [ 294.174785][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.196338][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.212026][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.240893][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.294209][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.353099][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.388287][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.405212][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.567495][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.624723][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.688830][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.739488][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.831366][ T9686] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.904702][ T9686] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.969579][ T9686] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.060266][ T9686] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.487052][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.557119][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.753849][ T8894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.196262][ T8894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.389798][ T9889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.994'. [ 297.468330][ T9889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.994'. [ 302.485329][ T9940] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1004'. [ 302.506218][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1004'. [ 302.535192][ T9940] tipc: Started in network mode [ 302.544412][ T9940] tipc: Node identity 1, cluster identity 129 [ 302.558504][ T9940] tipc: Node number set to 1 [ 302.563531][ T9940] tipc: Cannot configure node identity twice [ 304.375377][ T9954] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 305.117596][ T5767] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 306.035226][ T5767] usb 5-1: Using ep0 maxpacket: 32 [ 306.052776][ T5767] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 306.313773][ T5767] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 306.323196][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 306.378281][ T5767] usb 5-1: Product: syz [ 306.413314][ T5767] usb 5-1: Manufacturer: syz [ 306.424569][ T5767] usb 5-1: SerialNumber: syz [ 306.431710][ T5767] usb 5-1: config 0 descriptor?? [ 306.445502][ T9958] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.537459][ T9980] syzkaller0: entered promiscuous mode [ 307.542992][ T9980] syzkaller0: entered allmulticast mode [ 309.690074][ T5821] usb 5-1: USB disconnect, device number 5 [ 309.975244][ T5802] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 310.836014][ T5802] usb 8-1: Using ep0 maxpacket: 16 [ 310.852928][ T5802] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.879064][ T5802] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.916954][ T5802] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.966618][ T5802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.025173][ T5802] usb 8-1: Product: syz [ 311.029663][ T5802] usb 8-1: Manufacturer: syz [ 311.034757][ T5802] usb 8-1: SerialNumber: syz [ 311.287623][ T5802] usb 8-1: 0:2 : does not exist [ 311.330370][ T5802] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 311.385544][T10034] loop6: detected capacity change from 0 to 2048 [ 311.441831][T10034] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 311.461526][ T5802] usb 8-1: USB disconnect, device number 2 [ 311.473318][T10034] UDF-fs: Scanning with blocksize 512 failed [ 311.559701][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.584371][T10034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.833808][T10040] syzkaller0: entered promiscuous mode [ 311.882864][T10040] syzkaller0: entered allmulticast mode [ 312.423672][T10059] 0x000000000007-0x000000020007 : "" [ 312.430424][T10059] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1fff9 [ 312.501429][T10059] ftl_cs: FTL header corrupt! [ 313.827234][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1030'. [ 314.440032][T10070] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 314.456220][T10070] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 314.543720][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1030'. [ 314.855234][T10092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.917031][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 314.952908][T10096] tipc: Started in network mode [ 314.963317][T10096] tipc: Node identity 422c3d269725, cluster identity 4711 [ 314.975750][T10096] tipc: Enabled bearer , priority 0 [ 315.003627][T10096] syzkaller0: entered promiscuous mode [ 315.015894][T10093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.033453][T10096] syzkaller0: entered allmulticast mode [ 315.102823][T10096] tipc: Resetting bearer [ 315.121474][T10095] tipc: Resetting bearer [ 315.207056][T10095] tipc: Disabling bearer [ 315.560274][T10106] loop7: detected capacity change from 0 to 4096 [ 315.654100][T10106] ntfs3: loop7: ino=3, Correct links count -> 2. [ 316.978335][ T9] IPVS: starting estimator thread 0... [ 317.375266][T10121] IPVS: using max 18 ests per chain, 43200 per kthread [ 317.468216][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.474795][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.697872][T10132] tipc: Enabling of bearer rejected, failed to enable media [ 320.796047][T10167] netlink: 'syz.5.1047': attribute type 39 has an invalid length. [ 325.459582][T10195] kvm: kvm [10194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 325.541856][T10195] kvm_intel: kvm [10194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 325.600592][T10195] kvm: kvm [10194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956 [ 325.650994][T10195] kvm: kvm [10194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5 [ 325.688162][T10195] kvm: kvm [10194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x61ea [ 325.757419][T10195] kvm: kvm [10194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939 [ 325.806519][T10195] kvm: kvm [10194]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 325.860707][T10195] kvm: kvm [10194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4a56 [ 325.909013][T10195] kvm: kvm [10194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8 [ 326.002970][T10195] kvm: kvm [10194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2262 [ 329.470731][T10237] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 331.318371][T10258] tipc: Enabling of bearer rejected, failed to enable media [ 333.655987][T10281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.353668][T10284] x_tables: duplicate entry at hook 1 [ 334.615755][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1071'. [ 335.972574][T10299] tipc: Enabled bearer , priority 0 [ 336.008252][T10294] syzkaller0: entered promiscuous mode [ 336.014145][T10294] syzkaller0: entered allmulticast mode [ 336.124330][T10294] tipc: Resetting bearer [ 336.149721][T10291] tipc: Resetting bearer [ 336.223544][T10291] tipc: Disabling bearer [ 337.423138][T10314] loop7: detected capacity change from 0 to 32768 [ 337.499477][T10314] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 337.508460][T10314] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 341.422912][T10351] loop7: detected capacity change from 0 to 2048 [ 341.481978][T10351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.154020][T10365] netlink: 'syz.7.1088': attribute type 1 has an invalid length. [ 343.484032][T10368] macvlan2: entered promiscuous mode [ 343.508378][T10368] macvlan2: entered allmulticast mode [ 343.733185][T10372] syzkaller0: entered promiscuous mode [ 343.739273][T10372] syzkaller0: entered allmulticast mode [ 344.855286][T10400] loop6: detected capacity change from 0 to 512 [ 344.886101][T10400] EXT4-fs error (device loop6): ext4_orphan_get:1398: inode #15: comm syz.6.1092: iget: bad i_size value: 38620345925642 [ 344.937560][T10400] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1092: couldn't read orphan inode 15 (err -117) [ 344.961831][T10400] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.617076][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 345.962977][T10413] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 345.970782][T10413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 346.007377][T10413] vhci_hcd vhci_hcd.0: Device attached [ 346.445951][ T8] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 346.736479][T10414] vhci_hcd: connection reset by peer [ 346.801406][ T8903] vhci_hcd: stop threads [ 346.858493][ T8903] vhci_hcd: release socket [ 346.893034][ T8903] vhci_hcd: disconnect device [ 350.680444][T10425] Bluetooth: MGMT ver 1.22 [ 350.782562][T10425] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 353.031014][ T8] vhci_hcd: vhci_device speed not set [ 353.187904][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 354.735124][ T23] usb 5-1: device not accepting address 6, error -71 [ 355.122929][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 357.017909][ T23] libceph: connect (1)[c::]:6789 error -101 [ 357.093124][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 357.243869][T10482] ceph: No mds server is up or the cluster is laggy [ 357.257378][ T23] libceph: connect (1)[c::]:6789 error -101 [ 357.263706][ T9] IPVS: starting estimator thread 0... [ 357.263829][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 357.365284][T10488] IPVS: using max 21 ests per chain, 50400 per kthread [ 357.941553][ T23] libceph: connect (1)[c::]:6789 error -101 [ 357.996491][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 360.976051][T10515] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 361.456030][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1118'. [ 363.192675][T10521] nbd: socks must be embedded in a SOCK_ITEM attr [ 363.411864][T10527] syzkaller0: entered promiscuous mode [ 363.424837][T10527] syzkaller0: entered allmulticast mode [ 363.474610][T10424] udevd[10424]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 363.493129][T10527] TC_ACT_REPEAT abuse ? [ 363.509847][T10449] udevd[10449]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 365.290994][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 365.311699][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 365.375198][ T5802] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 365.567202][ T5802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.604087][ T5802] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 365.620968][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.655275][ T5802] usb 5-1: config 0 descriptor?? [ 365.672890][ T5802] pwc: Askey VC010 type 2 USB webcam detected. [ 365.891872][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.903471][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.913973][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.925275][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.935492][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.946618][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.957640][T10555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.969315][T10555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.030891][T10555] batman_adv: batadv0: Adding interface: ipvlan2 [ 366.040316][T10555] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.067949][T10555] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 366.503741][ T5802] pwc: recv_control_msg error -32 req 02 val 2b00 [ 366.580327][ T5802] pwc: recv_control_msg error -32 req 02 val 2700 [ 366.678504][ T5802] pwc: recv_control_msg error -32 req 02 val 2c00 [ 366.794005][ T5802] pwc: recv_control_msg error -32 req 04 val 1000 [ 366.950367][ T5802] pwc: recv_control_msg error -32 req 04 val 1300 [ 367.044639][ T5802] pwc: recv_control_msg error -32 req 04 val 1400 [ 367.178496][ T5802] pwc: recv_control_msg error -32 req 02 val 2000 [ 367.305138][ T5802] pwc: recv_control_msg error -32 req 02 val 2100 [ 367.398831][ T5802] pwc: recv_control_msg error -32 req 04 val 1500 [ 367.495968][ T5802] pwc: recv_control_msg error -32 req 02 val 2500 [ 368.891794][ T5802] pwc: recv_control_msg error -71 req 02 val 2400 [ 368.915487][ T5802] pwc: recv_control_msg error -71 req 02 val 2600 [ 368.942499][ T5802] pwc: recv_control_msg error -71 req 02 val 2900 [ 368.950419][T10562] syzkaller0: entered promiscuous mode [ 368.962228][ T5802] pwc: recv_control_msg error -71 req 02 val 2800 [ 368.972158][T10562] syzkaller0: entered allmulticast mode [ 368.983117][ T5802] pwc: recv_control_msg error -71 req 04 val 1100 [ 369.041645][ T5802] pwc: recv_control_msg error -71 req 04 val 1200 [ 369.068807][ T5802] pwc: Registered as video103. [ 369.075945][ T5802] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 369.148669][ T5802] usb 5-1: USB disconnect, device number 8 [ 369.418740][T10575] (unnamed net_device) (uninitialized): down delay (383) is not a multiple of miimon (1847263240), value rounded to 0 ms [ 370.704503][T10575] bond2: entered promiscuous mode [ 370.732742][T10575] bond2: entered allmulticast mode [ 371.511875][T10575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.389734][T10603] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 373.423020][T10614] loop6: detected capacity change from 0 to 1024 [ 373.626999][T10614] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.637120][T10614] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.647494][T10614] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.656594][T10614] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.722892][T10614] team0: Port device vxlan0 added [ 374.039548][T10619] loop4: detected capacity change from 0 to 128 [ 375.792568][T10629] syzkaller0: entered promiscuous mode [ 375.809559][T10629] syzkaller0: entered allmulticast mode [ 376.455162][T10629] 0: reclassify loop, rule prio 0, protocol 800 [ 377.225007][T10647] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1142'. [ 377.320362][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1142'. [ 378.921704][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.928738][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.445005][ C0] sched: RT throttling activated [ 381.675872][T10669] syzkaller0: entered promiscuous mode [ 381.690324][T10669] syzkaller0: entered allmulticast mode [ 389.656791][T10727] binder: BINDER_SET_CONTEXT_MGR already set [ 389.715690][T10727] binder: 10726:10727 ioctl 4018620d 200000000040 returned -16 [ 393.394221][T10769] QAT: failed to copy from user cfg_data. [ 394.253842][T10772] loop4: detected capacity change from 0 to 256 [ 394.400827][T10773] loop6: detected capacity change from 0 to 32768 [ 394.547078][T10772] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 394.578453][T10773] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.759312][T10773] XFS (loop6): Ending clean mount [ 394.786972][T10773] XFS (loop6): Quotacheck needed: Please wait. [ 396.063490][T10773] XFS (loop6): Quotacheck: Done. [ 397.792878][ T27] audit: type=1800 audit(1773757408.620:21): pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1181" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 397.821629][ T7580] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 398.008667][T10804] syzkaller0: entered promiscuous mode [ 398.038328][T10804] syzkaller0: entered allmulticast mode [ 399.014410][T10816] (unnamed net_device) (uninitialized): down delay (383) is not a multiple of miimon (1847263240), value rounded to 0 ms [ 399.190814][T10816] bond1: entered promiscuous mode [ 399.196566][T10816] bond1: entered allmulticast mode [ 399.202681][T10816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.439070][T10859] loop6: detected capacity change from 0 to 2048 [ 405.473899][T10859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.703491][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 411.945622][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 411.975308][T10925] bond0: option lp_interval: invalid value (0) [ 411.981682][T10925] bond0: option lp_interval: allowed values 1 - 2147483647 [ 412.119844][T10929] syzkaller0: entered promiscuous mode [ 412.143244][T10929] syzkaller0: entered allmulticast mode [ 414.644207][T10949] loop4: detected capacity change from 0 to 512 [ 414.694427][T10949] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 414.833100][T10949] EXT4-fs (loop4): 1 truncate cleaned up [ 414.847254][T10949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.281792][ T6408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.652130][T10959] loop4: detected capacity change from 0 to 512 [ 416.656307][T10961] tipc: Enabling of bearer rejected, failed to enable media [ 416.759199][T10968] loop6: detected capacity change from 0 to 64 [ 417.578827][T10959] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.033708][T10981] loop6: detected capacity change from 0 to 1024 [ 418.053982][T10984] tipc: Enabling of bearer rejected, failed to enable media [ 418.076178][T10981] EXT4-fs: inline encryption not supported [ 418.115228][T10981] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 418.151705][ T6408] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 418.273113][T10981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.538590][ T27] audit: type=1800 audit(1773757432.360:22): pid=11001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1222" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 420.628083][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.919946][T11007] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 421.070008][T11011] loop6: detected capacity change from 0 to 1024 [ 421.107195][T11011] EXT4-fs: Ignoring removed nobh option [ 421.152580][T11011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.188639][T11019] tipc: Started in network mode [ 421.194421][T11019] tipc: Node identity aad16fc2bd65, cluster identity 4711 [ 421.202807][T11019] tipc: Enabled bearer , priority 0 [ 421.216392][T11019] syzkaller0: entered promiscuous mode [ 421.875039][T11019] syzkaller0: entered allmulticast mode [ 422.070332][T11019] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1232'. [ 423.166480][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.180148][ T5802] tipc: Node number set to 397701058 [ 423.191633][T11025] tipc: Resetting bearer [ 423.313785][T11014] tipc: Resetting bearer [ 423.375564][T11014] tipc: Disabling bearer [ 423.432124][T11036] loop7: detected capacity change from 0 to 512 [ 423.606036][T11036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.626670][T11036] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.408102][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.839688][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1245'. [ 429.687730][ T23] libceph: connect (1)[c::]:6789 error -101 [ 429.746271][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 429.843390][T11086] ceph: No mds server is up or the cluster is laggy [ 429.934635][T11096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.985223][ T23] wlan1: authenticate with 08:02:11:00:00:00 [ 430.009884][T11096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.030985][ T23] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 430.058346][ T8900] wlan1: authenticated [ 430.106020][T11096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.159131][ T5822] mac80211_hwsim hwsim17 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 430.223114][ T8903] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 430.364892][T11100] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 430.449158][ T8892] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 430.598183][T11101] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 430.620621][ T8892] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 430.854960][T11108] sock: sock_timestamping_bind_phc: sock not bind to device [ 431.557353][ T8892] wlan1: association with 08:02:11:00:00:00 timed out [ 431.577942][T11104] veth3: entered promiscuous mode [ 431.606139][T11104] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 431.648645][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1243'. [ 431.753506][T11100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.757121][ T8900] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.901135][ T8892] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 434.678103][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'. [ 435.296142][T11148] veth1_macvtap: left promiscuous mode [ 435.301694][T11148] macsec0: entered allmulticast mode [ 435.421141][T11146] netlink: 'syz.6.1260': attribute type 3 has an invalid length. [ 435.449091][T11146] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1260'. [ 436.138173][T11153] block device autoloading is deprecated and will be removed. [ 440.357371][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.367293][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.919471][T11200] netlink: 'syz.7.1268': attribute type 1 has an invalid length. [ 441.968253][T11200] netlink: 252 bytes leftover after parsing attributes in process `syz.7.1268'. [ 442.035246][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.836216][T11257] tipc: Cannot configure node identity twice [ 451.399126][T11264] tipc: Enabled bearer , priority 0 [ 451.466588][T11265] syzkaller0: entered promiscuous mode [ 451.472220][T11265] syzkaller0: entered allmulticast mode [ 451.694027][T11264] tipc: Resetting bearer [ 452.415330][T11259] tipc: Resetting bearer [ 452.657545][T11259] tipc: Disabling bearer [ 457.756675][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1291'. [ 457.885157][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 461.500129][T11328] rpc_pipefs: Unknown parameter 'discard' [ 461.628136][ T9] libceph: connect (1)[c::]:6789 error -101 [ 461.662354][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 461.683660][T11326] ceph: No mds server is up or the cluster is laggy [ 462.020579][ T9] libceph: connect (1)[c::]:6789 error -101 [ 462.104317][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 462.999111][ T5752] libceph: connect (1)[c::]:6789 error -101 [ 463.085183][ T5752] libceph: mon0 (1)[c::]:6789 connect error [ 464.721076][T11349] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1302'. [ 471.361801][T11389] ±ÿ: renamed from team_slave_1 [ 473.106861][T11398] loop6: detected capacity change from 0 to 8192 [ 473.555187][T11407] loop4: detected capacity change from 0 to 256 [ 473.563370][T11407] exfat: Deprecated parameter 'namecase' [ 473.595326][T11407] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 473.692427][ T5752] libceph: connect (1)[c::]:6789 error -101 [ 473.831063][ T5752] libceph: mon0 (1)[c::]:6789 connect error [ 473.910960][T11409] ceph: No mds server is up or the cluster is laggy [ 474.368399][ T5752] libceph: connect (1)[c::]:6789 error -101 [ 474.374596][ T5752] libceph: mon0 (1)[c::]:6789 connect error [ 478.487817][ T5822] IPVS: starting estimator thread 0... [ 478.592466][T11429] IPVS: using max 25 ests per chain, 60000 per kthread [ 478.716295][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1322'. [ 478.726454][T11432] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1322'. [ 478.905137][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.015384][T11432] batadv1: entered allmulticast mode [ 480.373869][ T8892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.764715][T11456] netlink: 'syz.5.1328': attribute type 10 has an invalid length. [ 481.773115][T11456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1328'. [ 481.782538][T11456] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 481.815199][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.926419][T11460] netlink: 'syz.5.1329': attribute type 4 has an invalid length. [ 482.048915][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.825175][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.284984][T11473] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 483.865219][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.101951][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 484.163428][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 484.179982][ T8900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.413065][T11480] capability: warning: `syz.5.1333' uses 32-bit capabilities (legacy support in use) [ 485.151512][T11483] loop6: detected capacity change from 0 to 512 [ 485.178600][T11483] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 485.303214][T11483] EXT4-fs (loop6): 1 truncate cleaned up [ 485.317288][T11483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.171860][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.594173][T11496] loop6: detected capacity change from 0 to 40427 [ 486.619951][T11496] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 486.627299][T11496] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 486.649465][T11496] F2FS-fs (loop6): invalid crc value [ 486.673469][T11496] F2FS-fs (loop6): Found nat_bits in checkpoint [ 486.718053][T11496] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 486.726251][T11496] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 486.845303][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.900972][ T8903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.875152][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.486374][T11511] loop7: detected capacity change from 0 to 32768 [ 488.915125][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.230517][ T8892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.250561][ T8892] read_mapping_page failed! [ 489.265106][ T8892] ERROR: (device loop7): txCommit: [ 489.265106][ T8892] [ 489.295228][ T8892] jfs_write_inode: jfs_commit_inode failed! [ 489.727933][T11522] loop7: detected capacity change from 0 to 32768 [ 489.773583][T11522] (syz.7.1343,11522,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 489.790665][T11522] (syz.7.1343,11522,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 489.864838][T11522] JBD2: Ignoring recovery information on journal [ 489.996068][T11522] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 490.546874][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.125449][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.243261][ T9686] ocfs2: Unmounting device (7,7) on (node local) [ 492.292348][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1345'. [ 492.335991][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1345'. [ 493.145318][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.185294][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.731229][T11552] loop6: detected capacity change from 0 to 128 [ 495.953540][T11552] syz.6.1351: attempt to access beyond end of device [ 495.953540][T11552] loop6: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 496.732470][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.969277][T11552] syz.6.1351: attempt to access beyond end of device [ 496.969277][T11552] loop6: rw=524288, sector=145, nr_sectors = 88 limit=128 [ 496.991955][T11552] syz.6.1351: attempt to access beyond end of device [ 496.991955][T11552] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 497.055134][T11552] syz.6.1351: attempt to access beyond end of device [ 497.055134][T11552] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 497.089681][T11552] syz.6.1351: attempt to access beyond end of device [ 497.089681][T11552] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 497.235105][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.318009][T11552] syz.6.1351: attempt to access beyond end of device [ 497.318009][T11552] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 498.265094][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.507068][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 499.305141][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.044093][T11594] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 500.076358][T11594] loop6: detected capacity change from 0 to 128 [ 500.099502][T11594] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 500.363619][T11594] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 500.836725][ T8900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.962266][ T8900] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 501.046700][T11592] loop7: detected capacity change from 0 to 4096 [ 501.427064][T11600] qnx4: no qnx4 filesystem (no root dir). [ 502.085131][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.091473][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.285077][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 503.305060][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.345139][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.743785][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.250269][T11621] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1366'. [ 506.046396][ T8890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.173116][T11627] loop7: detected capacity change from 0 to 128 [ 507.325221][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.977092][ T8898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.998492][T11627] syz.7.1369: attempt to access beyond end of device [ 507.998492][T11627] loop7: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 508.220246][T11627] syz.7.1369: attempt to access beyond end of device [ 508.220246][T11627] loop7: rw=524288, sector=145, nr_sectors = 88 limit=128 [ 508.239839][T11627] syz.7.1369: attempt to access beyond end of device [ 508.239839][T11627] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.256492][T11627] syz.7.1369: attempt to access beyond end of device [ 508.256492][T11627] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.272374][T11627] syz.7.1369: attempt to access beyond end of device [ 508.272374][T11627] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.290343][T11627] syz.7.1369: attempt to access beyond end of device [ 508.290343][T11627] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.306654][T11627] syz.7.1369: attempt to access beyond end of device [ 508.306654][T11627] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.328277][T11627] syz.7.1369: attempt to access beyond end of device [ 508.328277][T11627] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.345091][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.402754][T11627] syz.7.1369: attempt to access beyond end of device [ 508.402754][T11627] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 508.470543][T11627] syz.7.1369: attempt to access beyond end of device [ 508.470543][T11627] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 509.395123][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.165164][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.405128][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.465125][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.505141][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.885464][ T8900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.846536][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.472097][T11688] loop4: detected capacity change from 0 to 32768 [ 517.495161][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.535129][T11688] (syz.4.1382,11688,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 517.550359][T11688] (syz.4.1382,11688,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 517.589663][T11688] JBD2: Ignoring recovery information on journal [ 517.612897][T11688] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 517.741492][T11696] loop6: detected capacity change from 0 to 128 [ 518.505150][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.545130][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.766289][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 521.884482][T11718] sp0: Synchronizing with TNC [ 522.525177][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.002668][T11715] [U] è [ 523.107365][ T8805] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.208886][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1390'. [ 523.545202][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 524.585118][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.582531][ T5769] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 525.591953][ T5769] Bluetooth: hci2: Injecting HCI hardware error event [ 525.604382][ T5774] Bluetooth: hci2: hardware error 0x00 [ 526.596668][ T6408] ocfs2: Unmounting device (7,4) on (node local) [ 527.216715][ T8890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.532918][ T5774] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 528.565105][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.523195][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.625154][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.855774][T11754] loop6: detected capacity change from 0 to 32768 [ 530.031836][T11754] (syz.6.1398,11754,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 530.046885][T11754] (syz.6.1398,11754,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 530.665282][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.813991][ T5774] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 530.867144][T11754] JBD2: Ignoring recovery information on journal [ 530.898895][T11754] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 532.165452][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 533.425238][ T5774] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 533.611715][ T7580] ocfs2: Unmounting device (7,6) on (node local) [ 533.665156][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.745228][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 535.115212][ T8900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 535.785233][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.165326][T11791] syz.5.1406 (11791) used greatest stack depth: 17096 bytes left [ 536.491709][T11801] loop7: detected capacity change from 0 to 8 [ 537.834288][T11802] sp0: Synchronizing with TNC [ 538.096986][ T1065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 538.215603][T11795] [U] è [ 538.685130][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.424756][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.476637][T11821] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 539.484504][T11821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 539.715106][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 540.755116][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.129273][T11833] bond0: (slave bond_slave_1): Releasing backup interface [ 541.656150][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.835184][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.045259][ T8898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.905104][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 545.955133][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.855337][ T8898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.181133][ T8806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.865093][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.945248][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.959941][ T8900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.047496][T11883] loop7: detected capacity change from 0 to 8 [ 550.334049][T11883] SQUASHFS error: xz decompression failed, data probably corrupt [ 550.342840][T11883] SQUASHFS error: Failed to read block 0x108: -5 [ 550.349518][T11883] SQUASHFS error: Unable to read metadata cache entry [106] [ 550.357229][T11883] SQUASHFS error: Unable to read inode 0x101f [ 550.985194][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 552.844568][ T8806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.955113][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 554.174011][ T5769] Bluetooth: hci4: command 0x1003 tx timeout [ 554.232058][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 554.985133][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.843388][T11928] tipc: Cannot configure node identity twice [ 556.025129][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.080004][ T1065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.626684][T11935] Sensor A: ================= START STATUS ================= [ 556.651113][T11935] Sensor A: Test Pattern: 75% Colorbar [ 556.801979][T11935] Sensor A: Show Information: All [ 556.822515][T11935] Sensor A: Vertical Flip: false [ 556.845051][T11935] Sensor A: Horizontal Flip: false [ 557.633539][T11935] Sensor A: Brightness: 3 [ 557.645336][T11935] Sensor A: Contrast: 128 [ 557.650584][T11935] Sensor A: Hue: 0 [ 557.663870][T11935] Sensor A: Saturation: 128 [ 557.677891][T11935] Sensor A: ================== END STATUS ================== [ 557.864090][ T8903] Bluetooth: hci4: Frame reassembly failed (-84) [ 558.125674][ T1065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.005274][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.355340][ T8806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.372029][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1443'. [ 559.450270][T11943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.865437][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 559.882638][T11918] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 560.025110][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.065123][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.377310][T11943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.806905][ T8890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.232602][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.358256][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.374259][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.921763][T11968] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.015740][ T8900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.055110][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.293741][T11978] fuse: Bad value for 'fd' [ 565.065088][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.077635][T11968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.105079][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.256216][ T8903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.086670][T11999] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 569.985073][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.086105][ T8890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.075067][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.151210][T12014] loop7: detected capacity change from 0 to 8 [ 571.567171][T12014] SQUASHFS error: lzo decompression failed, data probably corrupt [ 571.580630][T12014] SQUASHFS error: Failed to read block 0x144: -5 [ 571.587204][T12014] SQUASHFS error: Unable to read metadata cache entry [142] [ 571.594747][T12014] SQUASHFS error: Unable to read inode 0x11f [ 572.105301][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.115492][ T8892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.364244][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 573.384131][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 573.402729][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 573.433004][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 573.445238][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 573.455207][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 574.277567][ T8890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.072982][T12019] chnl_net:caif_netlink_parms(): no params data found [ 575.185112][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.390604][T12036] loop6: detected capacity change from 0 to 128 [ 575.653365][T12038] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 575.965010][ T51] Bluetooth: hci2: command tx timeout [ 576.095000][T11447] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 576.265086][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.489432][ T8806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.641017][T12048] loop6: detected capacity change from 0 to 8 [ 577.305102][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.398875][T12048] SQUASHFS error: xz decompression failed, data probably corrupt [ 577.407872][T12048] SQUASHFS error: Failed to read block 0x108: -5 [ 577.414522][T12048] SQUASHFS error: Unable to read metadata cache entry [106] [ 577.422106][T12048] SQUASHFS error: Unable to read inode 0x101f [ 578.025064][ T51] Bluetooth: hci2: command tx timeout [ 578.100342][T12053] netlink: 'syz.7.1463': attribute type 3 has an invalid length. [ 578.117038][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1463'. [ 578.158983][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.175153][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.182827][T12019] bridge_slave_0: entered allmulticast mode [ 578.194360][T12019] bridge_slave_0: entered promiscuous mode [ 578.209620][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.217941][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.226057][T12019] bridge_slave_1: entered allmulticast mode [ 578.237302][T12019] bridge_slave_1: entered promiscuous mode [ 578.353550][T12019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.384473][T12056] loop6: detected capacity change from 0 to 32768 [ 579.407150][ T8906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.444179][T12056] (syz.6.1464,12056,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 579.459892][T12056] (syz.6.1464,12056,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 579.497488][T12056] JBD2: Ignoring recovery information on journal [ 579.531493][T12056] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 580.594269][ T51] Bluetooth: hci2: command tx timeout [ 580.662699][T12019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.705123][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.488186][T12019] team0: Port device team_slave_0 added [ 581.495075][ T11] tipc: Left network mode [ 581.513463][T12019] team0: Port device team_slave_1 added [ 581.655754][T12065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.659691][T12019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.721063][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.786204][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.826013][T12019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.887491][ T7580] ocfs2: Unmounting device (7,6) on (node local) [ 582.686503][ T51] Bluetooth: hci2: command tx timeout [ 582.825069][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.916438][T12065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.010547][ T11] ip6gretap0 (unregistering): left promiscuous mode [ 583.282095][T12019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.289585][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.347085][T12019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.404462][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 583.414014][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1470'. [ 584.310602][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 584.358950][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1470'. [ 584.542200][ T1065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.819967][T12111] loop7: detected capacity change from 0 to 128 [ 585.725182][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.745074][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.189973][T12111] affs: No valid root block on device loop7 [ 587.795052][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.772862][T12019] hsr_slave_0: entered promiscuous mode [ 588.797608][T12019] hsr_slave_1: entered promiscuous mode [ 588.818305][T12122] (null): rxe_set_mtu: Set mtu to 1024 [ 588.840388][T12019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.859689][T12019] Cannot create hsr debugfs directory [ 589.417472][ T8898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.512148][T12122] infiniband syz1: set active [ 589.518339][T12122] infiniband syz1: added syz_tun [ 589.582205][T12122] RDS/IB: syz1: added [ 589.587440][T12122] smc: adding ib device syz1 with port count 1 [ 589.594018][T12122] smc: ib device syz1 port 1 has pnetid [ 591.825151][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.303023][ T8903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.905484][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.258015][T12019] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 593.374624][T12019] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 593.392484][T12150] Sensor A: ================= START STATUS ================= [ 593.425713][T12150] Sensor A: Test Pattern: 75% Colorbar [ 593.431434][T12150] Sensor A: Show Information: All [ 593.442316][T12019] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 593.485110][T12150] Sensor A: Vertical Flip: false [ 593.496250][T12019] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 593.505491][T12150] Sensor A: Horizontal Flip: false [ 593.530472][T12150] Sensor A: Brightness: 3 [ 593.546990][T12150] Sensor A: Contrast: 128 [ 593.556158][T12150] Sensor A: Hue: 0 [ 593.565737][T12150] Sensor A: Saturation: 128 [ 593.570424][T12150] Sensor A: ================== END STATUS ================== [ 593.823232][T12065] Bluetooth: hci4: Frame reassembly failed (-84) [ 594.247033][T12147] bond0: (slave wlan1): Releasing backup interface [ 595.601046][T12147] ------------[ cut here ]------------ [ 595.607758][T12147] WARNING: CPU: 0 PID: 12147 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 595.618973][T12147] Modules linked in: [ 595.623134][T12147] CPU: 0 PID: 12147 Comm: syz.6.1479 Not tainted syzkaller #0 [ 595.631345][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.641653][T12147] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 595.648747][T12147] Code: 7c 2d 00 00 74 08 48 89 df e8 88 50 d7 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 31 ae 85 00 e8 7c 21 7f f7 <0f> 0b eb c5 48 c7 c1 ac 23 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 595.669166][T12147] RSP: 0018:ffffc900035c70c8 EFLAGS: 00010246 [ 595.675594][T12147] RAX: ffffffff8a07fae4 RBX: ffff88806a965598 RCX: 0000000000080000 [ 595.683867][T12147] RDX: ffffc9000d752000 RSI: 000000000007ffff RDI: 0000000000080000 [ 595.692472][T12147] RBP: 0000000000000000 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 595.700649][T12147] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff88806a966c08 [ 595.709043][T12147] R13: 1ffff1100d52cab3 R14: ffff88806a9663c0 R15: dffffc0000000000 [ 595.717113][T12147] FS: 00007f6b225366c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 595.726698][T12147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.733670][T12147] CR2: 00007ffc504e1f08 CR3: 0000000079def000 CR4: 00000000003506f0 [ 595.742137][T12147] Call Trace: [ 595.745488][T12147] [ 595.748439][T12147] ? trace_drv_return_void+0x1c0/0x1c0 [ 595.754012][T12147] unregister_netdevice_many_notify+0x133d/0x1900 [ 595.760847][T12147] ? unregister_netdevice_many+0x20/0x20 [ 595.766655][T12147] ? kernfs_remove_by_name_ns+0x117/0x150 [ 595.772807][T12147] ? __lock_acquire+0x7d40/0x7d40 [ 595.777945][T12147] unregister_netdevice_queue+0x32c/0x370 [ 595.783802][T12147] ? list_netdevice+0x730/0x730 [ 595.788969][T12147] ? kernfs_remove_by_name_ns+0x117/0x150 [ 595.794819][T12147] _cfg80211_unregister_wdev+0x16b/0x580 [ 595.795005][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 595.800779][T12147] ieee80211_if_remove+0x1c1/0x2c0 [ 595.800885][T12147] ieee80211_del_iface+0x19/0x20 [ 595.800907][T12147] cfg80211_remove_virtual_intf+0x224/0x3c0 [ 595.824255][T12147] genl_family_rcv_msg_doit+0x211/0x310 [ 595.829974][T12147] ? end_current_label_crit_section+0x170/0x170 [ 595.836673][T12147] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 595.842687][T12147] ? bpf_lsm_capable+0x9/0x10 [ 595.847654][T12147] ? security_capable+0x89/0xb0 [ 595.852746][T12147] genl_rcv_msg+0x619/0x7a0 [ 595.857770][T12147] ? genl_bind+0x360/0x360 [ 595.862302][T12147] ? nl80211_exit+0x30/0x30 [ 595.866961][T12147] ? nl80211_new_interface+0xe60/0xe60 [ 595.872729][T12147] ? nl80211_pre_doit+0x930/0x930 [ 595.877824][T12147] ? ref_tracker_free+0x690/0x840 [ 595.882977][T12147] netlink_rcv_skb+0x241/0x4d0 [ 595.887929][T12147] ? genl_bind+0x360/0x360 [ 595.892449][T12147] ? netlink_ack+0x1180/0x1180 [ 595.897462][T12147] ? __lock_acquire+0x7d40/0x7d40 [ 595.902514][T12147] ? down_read+0x1ac/0x2e0 [ 595.907018][T12147] genl_rcv+0x28/0x40 [ 595.911064][T12147] netlink_unicast+0x751/0x8d0 [ 595.916073][T12147] netlink_sendmsg+0x8d0/0xbf0 [ 595.920887][T12147] ? netlink_getsockopt+0x590/0x590 [ 595.926236][T12147] ? aa_sock_msg_perm+0x94/0x150 [ 595.931395][T12147] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 595.936817][T12147] ? security_socket_sendmsg+0x80/0xa0 [ 595.942339][T12147] ? netlink_getsockopt+0x590/0x590 [ 595.947869][T12147] ____sys_sendmsg+0x5ba/0x960 [ 595.952702][T12147] ? __asan_memset+0x22/0x40 [ 595.957408][T12147] ? __sys_sendmsg_sock+0x30/0x30 [ 595.962652][T12147] ? __import_iovec+0x5f2/0x850 [ 595.967716][T12147] ? import_iovec+0x73/0xa0 [ 595.972253][T12147] ___sys_sendmsg+0x2a6/0x360 [ 595.977410][T12147] ? __sys_sendmsg+0x2a0/0x2a0 [ 595.982375][T12147] __se_sys_sendmsg+0x1c2/0x2b0 [ 595.987347][T12147] ? __x64_sys_sendmsg+0x80/0x80 [ 595.992353][T12147] ? lockdep_hardirqs_on+0x98/0x150 [ 595.997672][T12147] do_syscall_64+0x55/0xa0 [ 596.002117][T12147] ? clear_bhb_loop+0x40/0x90 [ 596.006986][T12147] ? clear_bhb_loop+0x40/0x90 [ 596.011705][T12147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.019068][T12147] RIP: 0033:0x7f6b2159c799 [ 596.023638][T12147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.044162][T12147] RSP: 002b:00007f6b22536028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.052794][T12147] RAX: ffffffffffffffda RBX: 00007f6b21815fa0 RCX: 00007f6b2159c799 [ 596.060863][T12147] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 596.068927][T12147] RBP: 00007f6b21632c99 R08: 0000000000000000 R09: 0000000000000000 [ 596.077374][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.085465][T12147] R13: 00007f6b21816038 R14: 00007f6b21815fa0 R15: 00007ffdd4b14698 [ 596.093673][T12147] [ 596.096981][T12147] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 596.104283][T12147] CPU: 0 PID: 12147 Comm: syz.6.1479 Not tainted syzkaller #0 [ 596.111937][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.122372][T12147] Call Trace: [ 596.125665][T12147] [ 596.128785][T12147] dump_stack_lvl+0x18c/0x250 [ 596.133591][T12147] ? show_regs_print_info+0x20/0x20 [ 596.138813][T12147] ? load_image+0x400/0x400 [ 596.143347][T12147] panic+0x2dc/0x730 [ 596.147372][T12147] ? bpf_jit_dump+0xd0/0xd0 [ 596.152060][T12147] __warn+0x2e0/0x470 [ 596.156072][T12147] ? ieee80211_link_release_channel+0x154/0x180 [ 596.162416][T12147] ? ieee80211_link_release_channel+0x154/0x180 [ 596.168879][T12147] report_bug+0x2be/0x4f0 [ 596.173380][T12147] ? ieee80211_link_release_channel+0x154/0x180 [ 596.180174][T12147] ? ieee80211_link_release_channel+0x154/0x180 [ 596.186443][T12147] ? ieee80211_link_release_channel+0x156/0x180 [ 596.192791][T12147] handle_bug+0xcf/0x120 [ 596.197404][T12147] exc_invalid_op+0x1a/0x50 [ 596.201939][T12147] asm_exc_invalid_op+0x1a/0x20 [ 596.206988][T12147] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 596.214130][T12147] Code: 7c 2d 00 00 74 08 48 89 df e8 88 50 d7 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 31 ae 85 00 e8 7c 21 7f f7 <0f> 0b eb c5 48 c7 c1 ac 23 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 596.234027][T12147] RSP: 0018:ffffc900035c70c8 EFLAGS: 00010246 [ 596.240114][T12147] RAX: ffffffff8a07fae4 RBX: ffff88806a965598 RCX: 0000000000080000 [ 596.248272][T12147] RDX: ffffc9000d752000 RSI: 000000000007ffff RDI: 0000000000080000 [ 596.256439][T12147] RBP: 0000000000000000 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 596.264511][T12147] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff88806a966c08 [ 596.272495][T12147] R13: 1ffff1100d52cab3 R14: ffff88806a9663c0 R15: dffffc0000000000 [ 596.280516][T12147] ? ieee80211_link_release_channel+0x154/0x180 [ 596.286885][T12147] ? ieee80211_link_release_channel+0x154/0x180 [ 596.293300][T12147] ? trace_drv_return_void+0x1c0/0x1c0 [ 596.299145][T12147] unregister_netdevice_many_notify+0x133d/0x1900 [ 596.305890][T12147] ? unregister_netdevice_many+0x20/0x20 [ 596.311654][T12147] ? kernfs_remove_by_name_ns+0x117/0x150 [ 596.317578][T12147] ? __lock_acquire+0x7d40/0x7d40 [ 596.322628][T12147] unregister_netdevice_queue+0x32c/0x370 [ 596.328465][T12147] ? list_netdevice+0x730/0x730 [ 596.333376][T12147] ? kernfs_remove_by_name_ns+0x117/0x150 [ 596.339269][T12147] _cfg80211_unregister_wdev+0x16b/0x580 [ 596.344919][T12147] ieee80211_if_remove+0x1c1/0x2c0 [ 596.350356][T12147] ieee80211_del_iface+0x19/0x20 [ 596.355682][T12147] cfg80211_remove_virtual_intf+0x224/0x3c0 [ 596.361620][T12147] genl_family_rcv_msg_doit+0x211/0x310 [ 596.367303][T12147] ? end_current_label_crit_section+0x170/0x170 [ 596.373760][T12147] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 596.379886][T12147] ? bpf_lsm_capable+0x9/0x10 [ 596.385203][T12147] ? security_capable+0x89/0xb0 [ 596.390205][T12147] genl_rcv_msg+0x619/0x7a0 [ 596.395105][T12147] ? genl_bind+0x360/0x360 [ 596.399546][T12147] ? nl80211_exit+0x30/0x30 [ 596.404255][T12147] ? nl80211_new_interface+0xe60/0xe60 [ 596.409935][T12147] ? nl80211_pre_doit+0x930/0x930 [ 596.415431][T12147] ? ref_tracker_free+0x690/0x840 [ 596.420792][T12147] netlink_rcv_skb+0x241/0x4d0 [ 596.425680][T12147] ? genl_bind+0x360/0x360 [ 596.430460][T12147] ? netlink_ack+0x1180/0x1180 [ 596.435365][T12147] ? __lock_acquire+0x7d40/0x7d40 [ 596.440612][T12147] ? down_read+0x1ac/0x2e0 [ 596.445237][T12147] genl_rcv+0x28/0x40 [ 596.449249][T12147] netlink_unicast+0x751/0x8d0 [ 596.454173][T12147] netlink_sendmsg+0x8d0/0xbf0 [ 596.459066][T12147] ? netlink_getsockopt+0x590/0x590 [ 596.464310][T12147] ? aa_sock_msg_perm+0x94/0x150 [ 596.469521][T12147] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 596.474824][T12147] ? security_socket_sendmsg+0x80/0xa0 [ 596.480286][T12147] ? netlink_getsockopt+0x590/0x590 [ 596.485780][T12147] ____sys_sendmsg+0x5ba/0x960 [ 596.490754][T12147] ? __asan_memset+0x22/0x40 [ 596.495369][T12147] ? __sys_sendmsg_sock+0x30/0x30 [ 596.500586][T12147] ? __import_iovec+0x5f2/0x850 [ 596.505464][T12147] ? import_iovec+0x73/0xa0 [ 596.509988][T12147] ___sys_sendmsg+0x2a6/0x360 [ 596.514829][T12147] ? __sys_sendmsg+0x2a0/0x2a0 [ 596.519753][T12147] __se_sys_sendmsg+0x1c2/0x2b0 [ 596.524622][T12147] ? __x64_sys_sendmsg+0x80/0x80 [ 596.529586][T12147] ? lockdep_hardirqs_on+0x98/0x150 [ 596.535063][T12147] do_syscall_64+0x55/0xa0 [ 596.539753][T12147] ? clear_bhb_loop+0x40/0x90 [ 596.544721][T12147] ? clear_bhb_loop+0x40/0x90 [ 596.549962][T12147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.555902][T12147] RIP: 0033:0x7f6b2159c799 [ 596.560893][T12147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.580907][T12147] RSP: 002b:00007f6b22536028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.589791][T12147] RAX: ffffffffffffffda RBX: 00007f6b21815fa0 RCX: 00007f6b2159c799 [ 596.598860][T12147] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 596.606847][T12147] RBP: 00007f6b21632c99 R08: 0000000000000000 R09: 0000000000000000 [ 596.615034][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.623473][T12147] R13: 00007f6b21816038 R14: 00007f6b21815fa0 R15: 00007ffdd4b14698 [ 596.631947][T12147] [ 596.635558][T12147] Kernel Offset: disabled [ 596.640222][T12147] Rebooting in 86400 seconds..