last executing test programs: 5m39.857663684s ago: executing program 2 (id=3): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r1, &(0x7f0000000140)='n', 0x1) write(r0, &(0x7f0000000080)='4', 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 5m35.739043688s ago: executing program 2 (id=15): connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @mcast1, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) 5m34.671287835s ago: executing program 2 (id=17): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f0000002740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfeff, 0x2, 0x101, 0x8cd, 0x2}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x1}, 0x8) 5m34.372992488s ago: executing program 2 (id=20): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) getdents(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0c, &(0x7f0000000000)="0400000000000000000000003801") getdents(r0, &(0x7f0000000380)=""/242, 0xf2) 5m34.08078905s ago: executing program 2 (id=21): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000280)={0x1ff, 0x0, 0x4000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x8000000000000005}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_clone(0x2800011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x240}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 5m32.379408521s ago: executing program 2 (id=27): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f42000) read(r0, &(0x7f00000002c0)=""/148, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000540)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 5m32.066211268s ago: executing program 32 (id=27): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f42000) read(r0, &(0x7f00000002c0)=""/148, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000540)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 4m44.083514132s ago: executing program 4 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4c}}, 0x0) 4m42.667232863s ago: executing program 4 (id=177): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800ce4018008000300e8030000", 0x54}], 0x1}, 0x0) 4m40.442801585s ago: executing program 4 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4m38.995798663s ago: executing program 4 (id=185): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000002140)='u32\x00', &(0x7f0000002180), 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) r2 = syz_open_dev$video(0x0, 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xb94}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x101}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xfe}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m38.657755324s ago: executing program 4 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x7, 0xae, 0x0, 0x0, @str='\'^\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x8810}, 0x4c054) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x10) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./mysys/bus/pci/devices/0000:00:05.0/resource0/file0\x00', 0x0, 0x102) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x25dfdbff, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}}, 0x0) syz_clone3(&(0x7f0000000c00)={0xae2a0080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0x0], 0x1}, 0x58) 4m35.903904739s ago: executing program 4 (id=193): r0 = socket(0x15, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 4m20.458679857s ago: executing program 33 (id=193): r0 = socket(0x15, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 3m34.781616772s ago: executing program 5 (id=377): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) 3m33.651166981s ago: executing program 5 (id=382): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) 3m32.535637389s ago: executing program 5 (id=388): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0xdddd1000, 0xc, 0x9, 0x4, 0xc4, 0x0, 0x5, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x4, 0x4}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x40, 0xfe, 0x5}, {0x4, 0x10000, 0x0, 0x4, 0x4, 0x2, 0xa1, 0x20, 0x0, 0x3}, {0x2000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0xdddd0000}, 0xddf8ffdb, 0x0, 0x0, 0x18, 0x0, 0x800, 0xd000, [0x80000001, 0x0, 0x40000000001]}) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xb, 0x40}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m31.403220409s ago: executing program 5 (id=393): syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000009640)='./file1\x00', 0x18040, &(0x7f0000000100)={[{@nolazytime}, {@dax_never}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@nouuid}]}, 0x4, 0x9736, &(0x7f0000012d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 3m29.091462489s ago: executing program 5 (id=396): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 3m27.455369057s ago: executing program 5 (id=402): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x80001) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 3m27.127405096s ago: executing program 34 (id=402): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x80001) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 3m0.174652657s ago: executing program 0 (id=483): fallocate(0xffffffffffffffff, 0x0, 0x22004, 0x100007f) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) close_range(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2m59.203594883s ago: executing program 0 (id=492): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x2, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0xf5}, @void, @ipv6=@generic={0x3, 0x6, "14f75a", 0x0, 0x3b, 0x1, @rand_addr=' \x01\x00', @mcast2}}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) write(r1, &(0x7f0000000900)="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", 0x50f) 2m56.340562111s ago: executing program 0 (id=498): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000810000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2m55.163986251s ago: executing program 0 (id=501): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8d) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4080) 2m54.052150786s ago: executing program 0 (id=504): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes128, 0x4, '\x00', @d}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xebe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3b, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x0}, 0x20) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 2m53.267446103s ago: executing program 0 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 2m53.04791898s ago: executing program 35 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 9.660695239s ago: executing program 7 (id=1019): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) creat(0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) ioprio_get$pid(0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x900}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.025992197s ago: executing program 7 (id=1025): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x20000) 7.454347598s ago: executing program 7 (id=1029): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680)={[{@noinit_itable}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@resgid}]}, 0x0, 0x490, &(0x7f00000001c0)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@usrquota}, {@nogrpid}, {@dioread_lock}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone3(0x0, 0x0) 5.84129678s ago: executing program 3 (id=1036): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0x4, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, &(0x7f00000000c0)) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4.783969894s ago: executing program 3 (id=1040): bind$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000480)}}, &(0x7f0000000300)=0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000005f00)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f000030e000/0x2000)=nil, 0x2000, 0x300000b, 0x110, r2, 0xb6a4f000) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_delete(0x0) 4.515888671s ago: executing program 3 (id=1042): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) unshare(0x6020400) accept$inet(r0, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0x1, 0x1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 4.469695171s ago: executing program 7 (id=1043): syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000003c0), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/os_desc/use\x00', 0x114) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r3 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000140), 0x9) 3.707322993s ago: executing program 8 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0xfffffffe, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x12, @private=0xa0100ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r2, &(0x7f00000001c0), &(0x7f0000001200)=@tcp, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'wlan0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x2c}}, 0x0) 3.642559447s ago: executing program 6 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/97, 0x61}, {0x0}], 0x2) 2.30888211s ago: executing program 6 (id=1047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 2.303253831s ago: executing program 1 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="080211000001080211000000080045", 0xf) eventfd2(0x7, 0x1) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2.282936425s ago: executing program 8 (id=1049): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60800) r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) 2.273072137s ago: executing program 3 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) accept4$inet(r2, 0x0, 0x0, 0x800) accept4$nfc_llcp(r2, 0x0, 0x0, 0x800) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={r5, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x5213, 0x8, 0xb, 0x200, 0x6, 0x8, 0x6, r5}, &(0x7f0000000040)=0x20) 2.007448274s ago: executing program 1 (id=1051): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbef, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7a9ab548, 0xfffffff9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x4}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/file0\x00', 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4a8, 0x1e0, 0x0, 0xffffffff, 0x288, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd89286ae9b13d39b99407a9b6abe75a728baa18da576811985de44110b8602005e1298ea55f1c5087ab16f67b18ca90ac6040b3d6a068f727f7d23ab794d9ba59a5da2ff7f000000000000ae63e26b6fe772493180cfda2c9d49412e9469d85abdb467ba000000000000000000000000deffffff00", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wg0\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x68, @icmp_id=0x68}}}, {{@ip={@empty, @private=0xa010101, 0xffffffff, 0xff, 'wlan1\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x2, 0x4}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @loopback, @icmp_id=0x64, @port=0x4e20}}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) 1.645222601s ago: executing program 6 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x21, 0x2, 0xa) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, &(0x7f00007d0000)) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xd}], 0x10}, 0x800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) 1.268280841s ago: executing program 8 (id=1053): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x23) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in6=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2, 0x0, 0x0, 0x3c, r3}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x6, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x4808, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYRES16], 0x2, 0x56a, &(0x7f0000002c80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8100, 0x101) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000003c0)='.\x00', 0x5db) lseek(r4, 0xffffffffffffffff, 0x2) getdents64(r4, 0x0, 0x0) 1.245318436s ago: executing program 1 (id=1054): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0xa, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000019900000000000000000000000a60000000060a0b160000000000000000020000083400048018000180080001006f7366000c00028008000140000000041800018008"], 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.165222303s ago: executing program 8 (id=1055): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0xffffffff, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = fsopen(&(0x7f0000000240)='smb3\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000000)='-\xf2B\xd3\xd1]\xc4\x85RB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\x84F\xf6\xb9\x06Yc\xdfIGQ\xa0B\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8bS\x85\xab\x93\x02\xc9\xe5\xd8mZ\x03\xee\xd3\x1e\xf6)`s\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1[G\r', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa92aabb0800450000"], 0x0) connect$pppl2tp(r4, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60910100001611fffc000000000000000000000000000000fe800000000000aa00000e220016907802b20000000000000000000000007e6b780000000000000000"], 0x0) 1.158440414s ago: executing program 1 (id=1056): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x20, 0x1d, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x2}]}, 0x20}}, 0x200040c0) ioctl$SG_IO(r0, 0xc0481273, &(0x7f0000000440)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) mq_getsetattr(r2, 0x0, &(0x7f00000001c0)) 1.140024708s ago: executing program 3 (id=1057): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 1.12861065s ago: executing program 6 (id=1058): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x558}]}}]}, 0x38}}, 0x800) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00', 0x400}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e03, 0x2, @empty, 0x10000004}, 0x1c) 1.073230872s ago: executing program 7 (id=1059): socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000480)={0x4, 0x6, 0x0, 0xe, 0xd7d, 0x4}) pwrite64(r1, &(0x7f00000002c0)="10c9", 0x2, 0xfff) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x70, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x48}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 928.046773ms ago: executing program 1 (id=1060): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc080, 0xc, 0x94}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000001040)=ANY=[], 0xfffffe3e) 871.802365ms ago: executing program 8 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 871.592845ms ago: executing program 6 (id=1062): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "f40f08"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xc, 0x0, 0x1000000}}, @nested_vmresume={0x130, 0x18}], 0xb3}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20002) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 474.335959ms ago: executing program 8 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 101.141939ms ago: executing program 3 (id=1064): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60800) r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) 71.328365ms ago: executing program 7 (id=1065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$nci(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 27.333204ms ago: executing program 6 (id=1066): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x4040000) 0s ago: executing program 1 (id=1067): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000140), 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x6, 0xffffffff80010000, 0x0, 0xfffc, 0xa, 0x2ef, 0x0, 0x0, 0x40, 0x10001}}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x2]}, 0x8, 0x80000) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x8000, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x4, 0x100000001, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.4.185'. [ 136.672426][ T5085] loop0: detected capacity change from 0 to 128 [ 137.689439][ T5085] FAT-fs (loop0): Unrecognized mount option "tz=U*ÏGŽÀ¶uþì+Ó'TC" or missing value [ 139.525850][ T5111] x86/PAT: syz.4.188:5111 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 139.688897][ T2285] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 140.053411][ T2285] usb 1-1: config 1 has an invalid interface number: 139 but max is 0 [ 140.073227][ T2285] usb 1-1: config 1 has no interface number 0 [ 140.095602][ T2285] usb 1-1: config 1 interface 139 altsetting 5 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 140.137317][ T2285] usb 1-1: config 1 interface 139 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0 [ 140.167360][ T2285] usb 1-1: config 1 interface 139 has no altsetting 0 [ 140.400075][ T2285] usb 1-1: string descriptor 0 read error: -71 [ 140.408952][ T2285] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=ee.02 [ 140.455599][ T2285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.543940][ T2285] usb 1-1: can't set config #1, error -71 [ 140.582817][ T2285] usb 1-1: USB disconnect, device number 3 [ 141.471846][ T5172] device syzkaller0 entered promiscuous mode [ 141.982064][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 142.633104][ T5188] loop5: detected capacity change from 0 to 512 [ 142.924483][ T5194] tipc: Failed to remove unknown binding: 66,0,0/0:3814826080/3814826081 [ 142.940838][ T5188] EXT4-fs (loop5): Test dummy encryption mode enabled [ 142.971153][ T5188] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 142.997037][ T5201] tipc: Failed to remove unknown binding: 66,0,0/0:528894584/528894586 [ 143.039338][ T5188] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 143.047699][ T5194] tipc: Failed to remove unknown binding: 66,0,0/0:3814826080/3814826081 [ 143.079174][ T5188] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,errors=continue,auto_da_alloc,lazytime,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 143.282939][ T5188] xt_policy: neither incoming nor outgoing policy selected [ 143.456522][ T5191] loop1: detected capacity change from 0 to 256 [ 143.536777][ T5222] ip_tables: iptables: counters copy to user failed while replacing table [ 144.342679][ T5191] FAT-fs (loop1): Directory bread(block 64) failed [ 144.374817][ T5191] FAT-fs (loop1): Directory bread(block 65) failed [ 144.405878][ T5191] FAT-fs (loop1): Directory bread(block 66) failed [ 144.439098][ T5191] FAT-fs (loop1): Directory bread(block 67) failed [ 144.468514][ T5191] FAT-fs (loop1): Directory bread(block 68) failed [ 144.498013][ T5191] FAT-fs (loop1): Directory bread(block 69) failed [ 144.526093][ T5191] FAT-fs (loop1): Directory bread(block 70) failed [ 144.554929][ T5191] FAT-fs (loop1): Directory bread(block 71) failed [ 144.573925][ T5191] FAT-fs (loop1): Directory bread(block 72) failed [ 144.598901][ T5191] FAT-fs (loop1): Directory bread(block 73) failed [ 144.944991][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 145.000943][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 145.042824][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 145.089392][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 145.128650][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 145.181309][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 145.223948][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 145.259403][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 145.286100][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 146.813353][ T5273] tipc: Started in network mode [ 146.860994][ T5273] tipc: Node identity 4, cluster identity 4711 [ 146.867254][ T5273] tipc: Node number set to 4 [ 146.884328][ T5263] sctp: failed to load transform for md5: -2 [ 146.974780][ T5281] sctp: [Deprecated]: syz.5.220 (pid 5281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.974780][ T5281] Use struct sctp_sack_info instead [ 147.024827][ T5284] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 147.212657][ T5293] netlink: 'syz.5.224': attribute type 10 has an invalid length. [ 147.261666][ T5293] device geneve0 entered promiscuous mode [ 147.303162][ T5293] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 147.400021][ T5303] device pim6reg1 entered promiscuous mode [ 148.240346][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.440739][ T5345] __nla_validate_parse: 2 callbacks suppressed [ 149.441258][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 149.717791][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 149.935883][ T5348] trusted_key: encrypted_key: master key parameter is missing [ 149.947228][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 149.956935][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 149.966237][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 149.975676][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 149.991801][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 150.001396][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 150.011698][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 150.022092][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.241'. [ 150.453229][ T5358] team0 (unregistering): Port device team_slave_0 removed [ 150.582570][ T5358] team0 (unregistering): Failed to send options change via netlink (err -105) [ 150.627770][ T5358] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 150.670003][ T5358] team0 (unregistering): Port device team_slave_1 removed [ 150.745969][ T5363] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 150.904740][ T5376] loop3: detected capacity change from 0 to 512 [ 151.011072][ T5376] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 151.301068][ T5376] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 152.238274][ T5401] loop3: detected capacity change from 0 to 2048 [ 152.440415][ T5401] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.508625][ T5401] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.626886][ T5417] loop0: detected capacity change from 0 to 256 [ 153.784175][ T5417] FAT-fs (loop0): Directory bread(block 64) failed [ 153.802810][ T5417] FAT-fs (loop0): Directory bread(block 65) failed [ 153.829011][ T5417] FAT-fs (loop0): Directory bread(block 66) failed [ 153.835707][ T5417] FAT-fs (loop0): Directory bread(block 67) failed [ 153.859004][ T5417] FAT-fs (loop0): Directory bread(block 68) failed [ 153.865607][ T5417] FAT-fs (loop0): Directory bread(block 69) failed [ 153.889084][ T5417] FAT-fs (loop0): Directory bread(block 70) failed [ 153.895685][ T5417] FAT-fs (loop0): Directory bread(block 71) failed [ 153.908992][ T5417] FAT-fs (loop0): Directory bread(block 72) failed [ 153.915590][ T5417] FAT-fs (loop0): Directory bread(block 73) failed [ 154.075148][ T5401] fs-verity: sha512 using implementation "sha512-avx2" [ 155.381856][ T5429] netlink: 'syz.5.248': attribute type 1 has an invalid length. [ 155.474049][ T5434] bond1: (slave veth3): Enslaving as an active interface with a down link [ 155.525366][ T5429] bond1: (slave veth0_to_bond): making interface the new active one [ 155.543243][ T5429] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 155.682527][ T5438] device vlan0 entered promiscuous mode [ 155.700122][ T5438] __nla_validate_parse: 1 callbacks suppressed [ 155.700138][ T5438] netlink: 148 bytes leftover after parsing attributes in process `syz.5.249'. [ 156.857780][ T5443] team0 (unregistering): Port device team_slave_0 removed [ 156.915784][ T5443] team0 (unregistering): Failed to send options change via netlink (err -105) [ 156.934334][ T5443] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 156.948649][ T5443] team0 (unregistering): Port device team_slave_1 removed [ 156.970613][ T5436] device vlan0 left promiscuous mode [ 158.138401][ T5465] batman_adv: batadv0: Adding interface: veth0 [ 158.148449][ T5465] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.175976][ T5465] batman_adv: batadv0: Interface activated: veth0 [ 158.206256][ T1240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.243787][ T5465] batman_adv: batadv0: Interface deactivated: veth0 [ 158.274709][ T5465] batman_adv: batadv0: Removing interface: veth0 [ 158.293001][ T5465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.302129][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.314476][ T5465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.322395][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.360331][ T5473] loop0: detected capacity change from 0 to 16 [ 158.385786][ T5447] chnl_net:caif_netlink_parms(): no params data found [ 158.401039][ T5472] device syzkaller0 entered promiscuous mode [ 158.423281][ T1240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.521732][ T5475] netlink: 'syz.0.259': attribute type 8 has an invalid length. [ 158.550230][ T1240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.629627][ T1240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.652763][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.660161][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.679223][ T5447] device bridge_slave_0 entered promiscuous mode [ 158.704574][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.734153][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.750855][ T5447] device bridge_slave_1 entered promiscuous mode [ 158.808945][ T4232] Bluetooth: hci3: command 0x0409 tx timeout [ 158.826201][ T5486] loop5: detected capacity change from 0 to 128 [ 158.995284][ T5447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.015194][ T5486] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 159.393673][ T5447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.779554][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 159.779572][ T26] audit: type=1800 audit(1790872407.879:137): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.262" name="bus" dev="loop5" ino=1048594 res=0 errno=0 [ 159.799982][ T5447] team0: Port device team_slave_0 added [ 159.836457][ T5498] loop3: detected capacity change from 0 to 1024 [ 159.895645][ T5447] team0: Port device team_slave_1 added [ 160.104784][ T5502] attempt to access beyond end of device [ 160.104784][ T5502] loop5: rw=2049, want=156, limit=128 [ 160.124931][ T5498] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 160.168347][ T5498] EXT4-fs (loop3): fragment/cluster size (16384) != block size (1024) [ 160.206744][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.888877][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 161.049368][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.102327][ T26] audit: type=1326 audit(1790872409.209:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5514 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 161.175755][ T5447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.232744][ T5515] loop1: detected capacity change from 0 to 1024 [ 161.249027][ T26] audit: type=1326 audit(1790872409.209:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5514 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 161.294073][ T26] audit: type=1326 audit(1790872409.249:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5514 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 161.321002][ T26] audit: type=1326 audit(1790872409.249:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5514 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 161.323089][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.351742][ T5515] hfsplus: invalid btree flag [ 161.360958][ T5515] hfsplus: failed to load extents file [ 161.423736][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.486777][ T26] audit: type=1326 audit(1790872409.249:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5514 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 161.538253][ T5447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.557135][ T4265] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.581936][ T26] audit: type=1326 audit(1790872409.249:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5514 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 161.609448][ T26] audit: type=1326 audit(1790872409.249:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5514 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 161.644534][ T26] audit: type=1326 audit(1790872409.249:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5514 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 161.863551][ T5447] device hsr_slave_0 entered promiscuous mode [ 161.884709][ T26] audit: type=1326 audit(1790872409.249:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5514 comm="syz.1.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 161.947430][ T5447] device hsr_slave_1 entered promiscuous mode [ 162.149116][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.449228][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 162.587867][ T4306] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 162.619245][ T4232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 162.798385][ T5542] batman_adv: batadv0: Adding interface: veth0 [ 162.805728][ T5542] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.833640][ T4265] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.840049][ T4232] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 162.844604][ T4265] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 162.865942][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.869218][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.882903][ T5542] batman_adv: batadv0: Interface activated: veth0 [ 162.887974][ T4232] usb 1-1: Product: syz [ 162.894300][ T4232] usb 1-1: Manufacturer: syz [ 162.908152][ T4232] usb 1-1: SerialNumber: syz [ 162.960907][ T5542] batman_adv: batadv0: Interface deactivated: veth0 [ 162.967639][ T5542] batman_adv: batadv0: Removing interface: veth0 [ 162.976003][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 162.987004][ T4265] snd-ua101: probe of 4-1:1.0 failed with error -2 [ 163.024897][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.032682][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.055271][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.079331][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.115350][ T5447] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.143012][ T5447] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.163378][ T5447] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.187899][ T5447] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.220499][ T1240] bond1: (slave gretap1): Releasing active interface [ 163.234734][ T5521] jffs2: notice: (5521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.393740][ T13] usb 4-1: USB disconnect, device number 2 [ 163.440255][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.455695][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.465078][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.484988][ T5447] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.527327][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.538397][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.547450][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.554734][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.564111][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.573238][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.583509][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.590671][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.615021][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.642188][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.654871][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.664215][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.675938][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.715994][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.726777][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.736400][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.747563][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.756924][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.771773][ T5447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.788136][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.806249][ T4232] usb 1-1: USB disconnect, device number 4 [ 163.830275][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.863940][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.938514][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.953194][ T5566] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 163.967033][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.999759][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.017821][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.045212][ T1240] device bridge_slave_1 left promiscuous mode [ 164.059226][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.133280][ T1240] device bridge_slave_0 left promiscuous mode [ 164.163758][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.221329][ T1240] device veth1_macvtap left promiscuous mode [ 164.237586][ T1240] device veth0_macvtap left promiscuous mode [ 164.271909][ T1240] device veth1_vlan left promiscuous mode [ 164.277788][ T1240] device veth0_vlan left promiscuous mode [ 164.414298][ T5581] ip_tables: iptables: counters copy to user failed while replacing table [ 165.058019][ T1240] bond1 (unregistering): Released all slaves [ 165.080276][ T3574] Bluetooth: hci3: command 0x0419 tx timeout [ 165.232045][ T5588] xt_TCPMSS: Only works on TCP SYN packets [ 165.769785][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 165.779540][ T3574] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 165.932541][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 165.956456][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.983963][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.049120][ T3574] usb 4-1: Using ep0 maxpacket: 32 [ 166.097975][ T1240] bond0 (unregistering): Released all slaves [ 166.245429][ T5571] lo speed is unknown, defaulting to 1000 [ 166.263524][ T5571] lo speed is unknown, defaulting to 1000 [ 166.280168][ T5571] lo speed is unknown, defaulting to 1000 [ 166.356578][ T5595] loop5: detected capacity change from 0 to 16 [ 166.367904][ T3574] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.739560][ T3574] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31 [ 166.813581][ T3574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.977639][ T3574] usb 4-1: Product: syz [ 167.057519][ T3574] usb 4-1: Manufacturer: syz [ 167.105481][ T3574] usb 4-1: SerialNumber: syz [ 167.114084][ T5595] erofs: (device loop5): mounted with root inode @ nid 36. [ 167.155447][ T5592] attempt to access beyond end of device [ 167.155447][ T5592] loop5: rw=0, want=40, limit=16 [ 167.167456][ T5592] attempt to access beyond end of device [ 167.167456][ T5592] loop5: rw=524288, want=48, limit=16 [ 167.178834][ T5592] attempt to access beyond end of device [ 167.178834][ T5592] loop5: rw=524288, want=40, limit=16 [ 167.314977][ T5571] infiniband syz2: set active [ 167.336521][ T5571] infiniband syz2: added lo [ 167.368179][ T5571] infiniband syz2: Couldn't open port 1 [ 167.431826][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.456257][ T2856] lo speed is unknown, defaulting to 1000 [ 167.462641][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.462843][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.482869][ T5571] RDS/IB: syz2: added [ 167.487678][ T5571] smc: adding ib device syz2 with port count 1 [ 167.562397][ T5571] smc: ib device syz2 port 1 has pnetid [ 167.571043][ T3574] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 167.581753][ T4265] lo speed is unknown, defaulting to 1000 [ 167.638083][ T5571] lo speed is unknown, defaulting to 1000 [ 167.677089][ T3574] usb 4-1: USB disconnect, device number 3 [ 168.917147][ T5624] "syz.5.282" (5624) uses obsolete ecb(arc4) skcipher [ 171.074254][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.083999][ T5571] lo speed is unknown, defaulting to 1000 [ 171.154491][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.319179][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.353034][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.426386][ T5447] device veth0_vlan entered promiscuous mode [ 171.452360][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.500693][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.560230][ T5447] device veth1_vlan entered promiscuous mode [ 171.874306][ T5447] device veth0_macvtap entered promiscuous mode [ 171.920323][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.981524][ T5648] ip_tables: iptables: counters copy to user failed while replacing table [ 172.049225][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.169186][ T3574] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 172.190035][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.286868][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.438269][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.602143][ T3574] usb 4-1: Using ep0 maxpacket: 16 [ 172.668551][ T5447] device veth1_macvtap entered promiscuous mode [ 172.697712][ T5571] lo speed is unknown, defaulting to 1000 [ 172.717930][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.732988][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.744731][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.782107][ T3574] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.799641][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.832634][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.881902][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.890494][ T3574] usb 4-1: config 7 has an invalid interface number: 201 but max is 0 [ 172.908760][ T3574] usb 4-1: config 7 has no interface number 0 [ 172.923669][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.984821][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.017163][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.041788][ T5447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.053604][ T5447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.066653][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.089759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.121004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.139268][ T3574] usb 4-1: New USB device found, idVendor=0e8d, idProduct=7102, bcdDevice=93.12 [ 173.158966][ T3574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.162632][ T5447] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.167019][ T3574] usb 4-1: Product: syz [ 173.167039][ T3574] usb 4-1: Manufacturer: syz [ 173.167056][ T3574] usb 4-1: SerialNumber: syz [ 173.216816][ T5447] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.236670][ T5447] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.257198][ T5447] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.280686][ T5571] lo speed is unknown, defaulting to 1000 [ 173.455045][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.478662][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.489923][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.541280][ T3574] option 4-1:7.201: GSM modem (1-port) converter detected [ 173.574594][ T3574] usb 4-1: USB disconnect, device number 4 [ 173.601900][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.651440][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.659832][ T3574] option 4-1:7.201: device disconnected [ 173.700110][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.793203][ T5571] lo speed is unknown, defaulting to 1000 [ 173.828605][ T5671] netlink: 44 bytes leftover after parsing attributes in process `syz.5.293'. [ 173.879561][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.887197][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.917151][ T5677] loop6: detected capacity change from 0 to 16 [ 174.016053][ T5677] erofs: (device loop6): mounted with root inode @ nid 36. [ 174.358637][ T5685] sctp: failed to load transform for md5: -4 [ 174.644960][ T5705] loop5: detected capacity change from 0 to 512 [ 174.774693][ T5705] EXT4-fs (loop5): Ignoring removed oldalloc option [ 174.889143][ T5705] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.298: iget: bad i_size value: 38620345925642 [ 175.075401][ T5705] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.298: couldn't read orphan inode 15 (err -117) [ 175.293649][ T5705] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,norecovery,auto_da_alloc,abort,auto_da_alloc=0x0000000000000001,oldalloc,block_validity,,errors=continue. Quota mode: writeback. [ 175.715980][ T5705] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.298: bg 0: block 5: invalid block bitmap [ 175.809645][ T5705] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 175.848615][ T5705] EXT4-fs (loop5): This should not happen!! Data will be lost [ 175.848615][ T5705] [ 175.873682][ T5705] EXT4-fs (loop5): Total free blocks count 0 [ 175.887112][ T5705] EXT4-fs (loop5): Free/Dirty block details [ 175.917606][ T5705] EXT4-fs (loop5): free_blocks=0 [ 175.932943][ T5705] EXT4-fs (loop5): dirty_blocks=65 [ 175.965529][ T5705] EXT4-fs (loop5): Block reservation details [ 175.995933][ T5705] EXT4-fs (loop5): i_reserved_data_blocks=65 [ 177.039127][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.257137][ T5754] loop0: detected capacity change from 0 to 1024 [ 177.322561][ T5754] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 177.688222][ T5754] EXT4-fs (loop0): fragment/cluster size (16384) != block size (1024) [ 179.156137][ T5778] netlink: 165 bytes leftover after parsing attributes in process `syz.5.308'. [ 181.387235][ T5781] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.364046][ T5781] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.523726][ T5781] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.612987][ T5781] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.590232][ T5802] device syzkaller0 entered promiscuous mode [ 183.678580][ T5781] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.695776][ T5781] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.711551][ T5781] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.779449][ T5817] loop5: detected capacity change from 0 to 512 [ 183.805451][ T5781] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.844072][ T5817] EXT4-fs (loop5): Ignoring removed nobh option [ 184.032802][ T5817] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.323: invalid indirect mapped block 256 (level 2) [ 184.853773][ T5817] EXT4-fs (loop5): 2 truncates cleaned up [ 184.918847][ T5817] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 186.433458][ T5839] EXT4-fs error (device loop5): ext4_find_dest_de:2117: inode #12: block 7: comm syz.5.323: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 186.480183][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.331'. [ 189.701999][ T5891] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.277107][ T5882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.618757][ T4232] Bluetooth: hci1: command 0x0406 tx timeout [ 191.624836][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 192.231738][ T5882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.538912][ T5909] netlink: 36 bytes leftover after parsing attributes in process `syz.6.340'. [ 193.140472][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 193.480256][ T5882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.703200][ T5882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.737892][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 193.814790][ T5882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.831118][ T5882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.888068][ T5882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.906683][ T5882] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.118667][ T5920] loop6: detected capacity change from 0 to 512 [ 194.277730][ T5920] EXT4-fs (loop6): orphan cleanup on readonly fs [ 194.334683][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.345430][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.386838][ T5920] __quota_error: 56 callbacks suppressed [ 194.386857][ T5920] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 194.404834][ T5920] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 194.414859][ T5920] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.343: Failed to acquire dquot type 1 [ 195.033218][ T5920] EXT4-fs (loop6): 1 truncate cleaned up [ 195.221857][ T5920] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 195.764139][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.355'. [ 195.817780][ T5956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.120742][ T5961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.127945][ T5961] bond2: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 196.141695][ T5961] bond2: (slave ip6_vti0): Error -95 calling set_mac_address [ 197.077084][ T5956] device vlan2 entered promiscuous mode [ 197.093106][ T5956] device bond2 entered promiscuous mode [ 197.432131][ T5987] loop3: detected capacity change from 0 to 512 [ 198.097412][ T5987] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.118970][ T5987] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.367671][ T6019] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.390488][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 200.583571][ T6061] rdma_rxe: ignoring netdev event = 23 for lo [ 200.615762][ T6061] rdma_rxe: lo changed mtu to 1536 [ 200.676081][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 200.701590][ T6061] infiniband syz2: set active [ 200.716451][ T5914] lo speed is unknown, defaulting to 1000 [ 203.089966][ T6102] device lo entered promiscuous mode [ 203.619056][ T6102] device tunl0 entered promiscuous mode [ 203.697487][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 203.739350][ T6102] device gre0 entered promiscuous mode [ 204.010701][ T6102] device gretap0 entered promiscuous mode [ 204.093165][ T6102] device erspan0 entered promiscuous mode [ 204.170127][ T6102] device ip_vti0 entered promiscuous mode [ 204.218466][ T6102] device ip6_vti0 entered promiscuous mode [ 204.295243][ T6102] device sit0 entered promiscuous mode [ 204.415004][ T6102] device ip6tnl0 entered promiscuous mode [ 204.470913][ T6102] device ip6gre0 entered promiscuous mode [ 204.482476][ T6127] loop5: detected capacity change from 0 to 32768 [ 204.541383][ T6102] device ip6gretap0 entered promiscuous mode [ 204.640953][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.650222][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.659769][ T6127] XFS (loop5): Mounting V5 Filesystem [ 204.673507][ T6102] device bridge0 entered promiscuous mode [ 204.735933][ T6102] device vcan0 entered promiscuous mode [ 204.761571][ T6102] device bond0 entered promiscuous mode [ 204.770207][ T6102] device bond_slave_0 entered promiscuous mode [ 204.776583][ T6102] device bond_slave_1 entered promiscuous mode [ 204.804116][ T6127] XFS (loop5): Ending clean mount [ 204.825691][ T6102] device team0 entered promiscuous mode [ 204.831805][ T6102] device team_slave_0 entered promiscuous mode [ 204.843578][ T6102] device team_slave_1 entered promiscuous mode [ 204.861478][ T6127] XFS (loop5): Quotacheck needed: Please wait. [ 204.929197][ T6102] device dummy0 entered promiscuous mode [ 204.943479][ T6127] XFS (loop5): Quotacheck: Done. [ 204.965853][ T6102] device nlmon0 entered promiscuous mode [ 204.984207][ T6102] device caif0 entered promiscuous mode [ 205.000198][ T6145] xt_ipcomp: unknown flags 1D [ 205.013518][ T6102] device batadv0 entered promiscuous mode [ 205.053442][ T6102] device vxcan0 entered promiscuous mode [ 205.080547][ T6102] device vxcan1 entered promiscuous mode [ 205.107524][ T6102] device veth0 entered promiscuous mode [ 205.161586][ T6102] device veth1 entered promiscuous mode [ 205.224400][ T6102] device wg0 entered promiscuous mode [ 205.269148][ T6102] device wg1 entered promiscuous mode [ 205.313802][ T6102] device wg2 entered promiscuous mode [ 205.346403][ T6102] device veth0_to_bridge entered promiscuous mode [ 205.419008][ T6102] device veth1_to_bridge entered promiscuous mode [ 205.501132][ T6102] device veth0_to_bond entered promiscuous mode [ 205.548639][ T6102] device veth1_to_bond entered promiscuous mode [ 205.591304][ T6102] device veth0_to_team entered promiscuous mode [ 205.598433][ T6147] loop5: detected capacity change from 32768 to 64 [ 205.618005][ T6143] attempt to access beyond end of device [ 205.618005][ T6143] loop5: rw=4096, want=18724, limit=64 [ 205.631177][ T6143] XFS (loop5): metadata I/O error in "xfs_qm_dqflush+0x250/0x1320" at daddr 0x4920 len 4 error 5 [ 205.647063][ T6102] device veth1_to_team entered promiscuous mode [ 205.675535][ T6143] attempt to access beyond end of device [ 205.675535][ T6143] loop5: rw=432129, want=1152, limit=64 [ 205.700019][ T150] XFS (loop5): log I/O error -5 [ 205.706614][ T6143] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_qm_dqflush+0x33e/0x1320 (fs/xfs/xfs_dquot.c:1331). Shutting down filesystem. [ 205.725371][ T6143] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 205.845410][ T6102] device veth0_to_batadv entered promiscuous mode [ 205.859794][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.889294][ T6102] device batadv_slave_0 entered promiscuous mode [ 205.926671][ T6102] device veth1_to_batadv entered promiscuous mode [ 205.947410][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.977535][ T6102] device batadv_slave_1 entered promiscuous mode [ 206.015375][ T6127] syz.5.393 (6127): drop_caches: 2 [ 206.038450][ T6102] device xfrm0 entered promiscuous mode [ 206.083893][ T6102] device veth0_to_hsr entered promiscuous mode [ 206.161010][ T6102] device veth1_to_hsr entered promiscuous mode [ 206.170981][ T4368] XFS (loop5): Unmounting Filesystem [ 206.227790][ T6102] device hsr0 entered promiscuous mode [ 206.261667][ T6102] device veth1_virt_wifi entered promiscuous mode [ 206.300656][ T6102] device veth0_virt_wifi entered promiscuous mode [ 206.320838][ T6102] device virt_wifi0 entered promiscuous mode [ 206.402286][ T6102] device vlan0 entered promiscuous mode [ 206.408366][ T6102] device vlan1 entered promiscuous mode [ 206.423325][ T6102] device macvlan0 entered promiscuous mode [ 206.496889][ T6102] device macvlan1 entered promiscuous mode [ 206.507251][ T6102] device ipvlan0 entered promiscuous mode [ 206.517049][ T6102] device ipvlan1 entered promiscuous mode [ 206.592249][ T6102] device macvtap0 entered promiscuous mode [ 206.621596][ T6102] device macsec0 entered promiscuous mode [ 206.652715][ T6102] device geneve0 entered promiscuous mode [ 206.681796][ T6102] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.690354][ T6102] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.698819][ T6102] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.707191][ T6102] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.716632][ T6102] device geneve1 entered promiscuous mode [ 206.750525][ T6102] device wlan0 entered promiscuous mode [ 206.773181][ T6102] device wlan1 entered promiscuous mode [ 206.784297][ T6102] device geneve2 entered promiscuous mode [ 206.791602][ T6102] device ip6gre1 entered promiscuous mode [ 206.804381][ T6102] device eth0 entered promiscuous mode [ 206.810279][ T6102] device eth1 entered promiscuous mode [ 206.816532][ T6102] device eth2 entered promiscuous mode [ 206.828851][ T6102] device eth3 entered promiscuous mode [ 206.877848][ T6120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.904756][ T6120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.929356][ T6120] bond0 (unregistering): Released all slaves [ 207.398564][ T4627] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.505349][ T4627] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.519453][ T4232] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 207.604622][ T4627] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.721144][ T4627] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.952166][ T4232] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 208.072680][ T4232] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.089085][ T4232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.102939][ T4232] usb 7-1: SerialNumber: syz [ 210.280466][ T6202] syz.3.409[6202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.280728][ T6202] syz.3.409[6202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.795749][ T6207] capability: warning: `syz.3.409' uses 32-bit capabilities (legacy support in use) [ 210.948253][ T6199] lo speed is unknown, defaulting to 1000 [ 211.077197][ T4232] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 211.341902][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 211.434226][ T7] usb 7-1: USB disconnect, device number 2 [ 211.524463][ T7] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 212.540110][ T6199] chnl_net:caif_netlink_parms(): no params data found [ 212.604961][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 212.716764][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.728066][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.736509][ T6199] device bridge_slave_0 entered promiscuous mode [ 212.753575][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.761496][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.770198][ T6199] device bridge_slave_1 entered promiscuous mode [ 212.805471][ T6199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.823136][ T6199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.877101][ T6199] team0: Port device team_slave_0 added [ 212.890263][ T6199] team0: Port device team_slave_1 added [ 212.936903][ T6199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.948407][ T6199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.981184][ T6199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.020404][ T6199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.027460][ T6199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.061381][ T6199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.127357][ T6199] device hsr_slave_0 entered promiscuous mode [ 213.139325][ T6199] device hsr_slave_1 entered promiscuous mode [ 213.146595][ T6199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.158641][ T6199] Cannot create hsr debugfs directory [ 213.328382][ T4627] device hsr_slave_0 left promiscuous mode [ 213.340470][ T4627] device hsr_slave_1 left promiscuous mode [ 213.347156][ T4627] device bridge_slave_1 left promiscuous mode [ 213.357510][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.367847][ T4627] device bridge_slave_0 left promiscuous mode [ 213.377526][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.392094][ T4627] device veth1_macvtap left promiscuous mode [ 213.398269][ T4627] device veth0_macvtap left promiscuous mode [ 213.411528][ T4627] device veth1_vlan left promiscuous mode [ 213.417428][ T4627] device veth0_vlan left promiscuous mode [ 213.587313][ T4627] bond2 (unregistering): Released all slaves [ 213.605255][ T4627] bond1 (unregistering): (slave veth3): Releasing active interface [ 213.633926][ T4627] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 213.645972][ T4627] bond1 (unregistering): Released all slaves [ 213.669268][ T4627] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 213.811765][ T4627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.829215][ T4627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.882232][ T4627] bond0 (unregistering): Released all slaves [ 214.057991][ T6199] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 214.080187][ T6199] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 214.104216][ T6199] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 214.135807][ T6199] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 214.301116][ T6199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.324448][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.350312][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.362026][ T6199] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.379165][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.399529][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.408188][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.415586][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.454137][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.479079][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.501116][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.519715][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.526855][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.553837][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.572399][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.589944][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.606729][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.638805][ T4190] Bluetooth: hci4: command 0x041b tx timeout [ 214.644673][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.658958][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.668317][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.683667][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.694629][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.713235][ T6199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.726147][ T6199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.738936][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.748589][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.923147][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.939462][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.953029][ T6199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.380582][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.402831][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.454150][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.463338][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.492871][ T6199] device veth0_vlan entered promiscuous mode [ 215.501520][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.510088][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.533110][ T6199] device veth1_vlan entered promiscuous mode [ 215.589993][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.599762][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.608057][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.619725][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.634009][ T6199] device veth0_macvtap entered promiscuous mode [ 215.646245][ T6199] device veth1_macvtap entered promiscuous mode [ 215.673916][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.686041][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.700182][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.718732][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.741820][ T6199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.752133][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.763683][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.778253][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.793578][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.805392][ T6199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.822061][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.836769][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.847640][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.879652][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.900918][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.919809][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.936827][ T6199] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.958926][ T6199] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.967915][ T6199] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.998853][ T6199] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.176892][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.211802][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.241920][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.259837][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.267706][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.278368][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.415646][ T6343] loop7: detected capacity change from 0 to 128 [ 216.494303][ T6335] loop0: detected capacity change from 0 to 1024 [ 216.653370][ T6335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 216.689244][ T6343] attempt to access beyond end of device [ 216.689244][ T6343] loop7: rw=2049, want=673, limit=128 [ 216.720317][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 216.736694][ T6335] System zones: 0-1, 3-36 [ 216.926343][ T6353] netlink: 32 bytes leftover after parsing attributes in process `syz.6.416'. [ 216.962624][ T6335] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.425: bad orphan inode 134217728 [ 217.207892][ T6335] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000010001,debug,journal_dev=0x0000000000001007,,errors=continue. Quota mode: writeback. [ 217.791018][ T6371] loop6: detected capacity change from 0 to 128 [ 217.904528][ T6371] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 218.028899][ T6371] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.972827][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 218.995327][ T5914] Bluetooth: hci4: command 0x0419 tx timeout [ 219.200021][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 219.441598][ T6364] netlink: 68 bytes leftover after parsing attributes in process `syz.1.417'. [ 220.285972][ T6409] syz.6.423 (6409) used greatest stack depth: 17600 bytes left [ 220.849221][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 221.738973][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.299221][ T13] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.308316][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.347598][ T13] usb 7-1: Product: syz [ 222.367899][ T13] usb 7-1: Manufacturer: syz [ 222.383175][ T13] usb 7-1: SerialNumber: syz [ 223.633637][ T13] usb 7-1: can't set config #1, error -71 [ 223.684703][ T13] usb 7-1: USB disconnect, device number 3 [ 224.686000][ T6456] netlink: 11834 bytes leftover after parsing attributes in process `syz.7.441'. [ 224.779793][ T6460] netlink: 'syz.7.441': attribute type 16 has an invalid length. [ 224.797916][ T6460] netlink: 'syz.7.441': attribute type 21 has an invalid length. [ 224.872759][ T6460] netlink: 'syz.7.441': attribute type 25 has an invalid length. [ 224.942602][ T6460] netlink: 'syz.7.441': attribute type 27 has an invalid length. [ 224.985483][ T6460] netlink: 'syz.7.441': attribute type 28 has an invalid length. [ 225.022722][ T6460] netlink: 'syz.7.441': attribute type 29 has an invalid length. [ 225.046528][ T6461] loop6: detected capacity change from 0 to 4096 [ 225.058620][ T6460] netlink: 'syz.7.441': attribute type 30 has an invalid length. [ 225.087537][ T6468] Illegal XDP return value 4294967274, expect packet loss! [ 226.673917][ T6491] device macsec1 entered promiscuous mode [ 226.685121][ T6491] device virt_wifi0 entered promiscuous mode [ 228.502549][ T6520] loop0: detected capacity change from 0 to 2048 [ 228.540075][ T6524] infiniband syz2: set active [ 228.545158][ T6524] infiniband syz2: set active [ 229.137937][ T6524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.308534][ T6524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.335043][ T6520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.367199][ T6524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.435379][ T21] lo speed is unknown, defaulting to 1000 [ 229.480031][ T6520] netlink: 'syz.0.451': attribute type 16 has an invalid length. [ 229.557333][ T6520] netlink: 'syz.0.451': attribute type 17 has an invalid length. [ 229.590031][ T6520] netlink: 'syz.0.451': attribute type 27 has an invalid length. [ 229.606770][ T4232] lo speed is unknown, defaulting to 1000 [ 229.612418][ T6541] IPVS: lc: FWM 3 0x00000003 - no destination available [ 229.633429][ T6538] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.672359][ T6540] loop6: detected capacity change from 0 to 2048 [ 229.773659][ T6540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.850417][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 231.098918][ T5914] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 231.479061][ T5914] usb 7-1: not running at top speed; connect to a high speed hub [ 231.501219][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.468'. [ 231.517950][ T6587] netlink: 44 bytes leftover after parsing attributes in process `syz.7.468'. [ 231.558900][ T5914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.724390][ T5914] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 231.744131][ T5914] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 231.787984][ T5914] usb 7-1: Product: syz [ 231.801467][ T5914] usb 7-1: Manufacturer: syz [ 231.853579][ T6605] tipc: Failed to remove unknown binding: 66,0,0/0:254200701/254200703 [ 231.874135][ T5914] usb 7-1: Found UVC 1.00 device syz (225a:e1d4) [ 231.892695][ T6605] tipc: Failed to remove unknown binding: 66,0,0/0:254200701/254200702 [ 231.893400][ T5914] usb 7-1: No streaming interface found for terminal 2. [ 231.929834][ T6610] tipc: Failed to remove unknown binding: 66,0,0/0:254200701/254200703 [ 231.994245][ T6610] tipc: Failed to remove unknown binding: 66,0,0/0:254200701/254200702 [ 232.076581][ T4190] usb 7-1: USB disconnect, device number 4 [ 232.464781][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 235.426505][ T6676] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.489'. [ 235.834855][ T6683] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 2 [ 242.136645][ T6763] tipc: Enabled bearer , priority 10 [ 242.480880][ T5914] syzkaller0: tun_net_xmit 76 [ 242.486769][ T5914] syzkaller0: tun_net_xmit 48 [ 242.518947][ T4190] syzkaller0: tun_net_xmit 76 [ 242.552015][ T6775] syzkaller0: create flow: hash 848841801 index 1 [ 243.167652][ T4269] syzkaller0: tun_net_xmit 76 [ 243.218957][ T6779] syzkaller0: delete flow: hash 848841801 index 1 [ 245.477901][ T6794] netlink: 'syz.1.518': attribute type 11 has an invalid length. [ 245.674820][ T6790] lo speed is unknown, defaulting to 1000 [ 245.686584][ T2856] Bluetooth: hci0: command 0x0409 tx timeout [ 246.754858][ T6790] chnl_net:caif_netlink_parms(): no params data found [ 246.836910][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.846437][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.854869][ T6790] device bridge_slave_0 entered promiscuous mode [ 246.869374][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.877184][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.886150][ T6790] device bridge_slave_1 entered promiscuous mode [ 246.924203][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.942265][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.982666][ T6790] team0: Port device team_slave_0 added [ 246.997918][ T6790] team0: Port device team_slave_1 added [ 247.031776][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.038943][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.067749][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.087724][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.096040][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.122503][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.164030][ T9] IPVS: stopping backup sync thread 5284 ... [ 247.187212][ T6790] device hsr_slave_0 entered promiscuous mode [ 247.194840][ T6790] device hsr_slave_1 entered promiscuous mode [ 247.204742][ T6790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.213175][ T6790] Cannot create hsr debugfs directory [ 247.533231][ T6790] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 247.559939][ T6790] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 247.594638][ T6790] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 247.640177][ T6790] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 247.654629][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.664496][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.672969][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.682901][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.769112][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 247.806052][ T9] team0 (unregistering): Port device team_slave_1 removed [ 247.829011][ T9] team0 (unregistering): Port device team_slave_0 removed [ 247.844823][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.866500][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.949388][ T9] bond0 (unregistering): Released all slaves [ 248.131714][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.146403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.155668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.167175][ T6790] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.203939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.214661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.248287][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.255558][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.280168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.289627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.298480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.308629][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.315883][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.334769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.344428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.355104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.372111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.406669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.425004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.467893][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.489408][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.503569][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.515416][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.532527][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.546683][ T6790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.786336][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.795449][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.821751][ T6790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.094404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.119002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.155033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.177152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.189745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.215780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.233859][ T6790] device veth0_vlan entered promiscuous mode [ 249.249642][ T6790] device veth1_vlan entered promiscuous mode [ 249.292098][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.319425][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.331829][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.356127][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.369946][ T6790] device veth0_macvtap entered promiscuous mode [ 249.385123][ T6790] device veth1_macvtap entered promiscuous mode [ 249.418054][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.433749][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.446410][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.463552][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.494368][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.505559][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.554748][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.578846][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.595285][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.609321][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.618234][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.640108][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.659993][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.673371][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.694661][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.707832][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.720095][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.731543][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.753495][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.763049][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.774533][ T6790] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.787823][ T6790] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.797443][ T6790] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.818735][ T6790] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.853230][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 249.944527][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.957237][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.989517][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.025922][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.038832][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.046629][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.893932][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.7.532'. [ 251.142003][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.7.532'. [ 251.193844][ T6902] loop8: detected capacity change from 0 to 512 [ 251.310528][ T6902] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.930302][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 253.203373][ T6962] overlayfs: failed to clone upperpath [ 253.988962][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.536'. [ 254.042269][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.536'. [ 254.101849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.206079][ T26] audit: type=1326 audit(1790872502.309:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.1.522" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 254.280951][ T26] audit: type=1326 audit(1790872502.309:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.1.522" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 254.543998][ T26] audit: type=1326 audit(1790872502.339:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.1.522" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f818e2b8159 code=0x7ffc0000 [ 255.919558][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.926952][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.539895][ T7001] loop8: detected capacity change from 0 to 64 [ 256.559365][ T6999] netlink: 'syz.7.544': attribute type 1 has an invalid length. [ 256.622169][ T6999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.785802][ T7007] bond1: (slave geneve2): making interface the new active one [ 256.925053][ T7007] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 257.010572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 257.105165][ T7015] rdma_rxe: ignoring netdev event = 10 for lo [ 257.122316][ T7015] device lo entered promiscuous mode [ 257.197090][ T7015] infiniband syz2: set down [ 257.622922][ T7015] device tunl0 entered promiscuous mode [ 258.387184][ T7015] device gre0 entered promiscuous mode [ 258.442066][ T7015] device gretap0 entered promiscuous mode [ 258.474366][ T7015] device erspan0 entered promiscuous mode [ 258.650211][ T7015] device ip_vti0 entered promiscuous mode [ 258.692833][ T7015] device ip6_vti0 entered promiscuous mode [ 258.792383][ T7015] device sit0 entered promiscuous mode [ 259.538307][ T7036] ODEBUG: Out of memory. ODEBUG disabled [ 259.587319][ T7015] device ip6tnl0 entered promiscuous mode [ 259.718960][ T7015] device ip6gre0 entered promiscuous mode [ 260.121958][ T7015] device syz_tun entered promiscuous mode [ 260.239698][ T7015] device ip6gretap0 entered promiscuous mode [ 260.453749][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.461894][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.493710][ T7015] device bridge0 entered promiscuous mode [ 260.547819][ T7015] device vcan0 entered promiscuous mode [ 260.582403][ T7015] device bond0 entered promiscuous mode [ 260.588130][ T7015] device bond_slave_0 entered promiscuous mode [ 260.606439][ T7015] device bond_slave_1 entered promiscuous mode [ 260.675072][ T7015] device dummy0 entered promiscuous mode [ 260.737664][ T7015] device nlmon0 entered promiscuous mode [ 261.200008][ T7015] device caif0 entered promiscuous mode [ 261.859089][ T7044] loop7: detected capacity change from 0 to 1024 [ 261.915850][ T7044] EXT4-fs (loop7): Encoding requested by superblock is unknown [ 261.931098][ T7015] device batadv0 entered promiscuous mode [ 262.015088][ T7015] device vxcan0 entered promiscuous mode [ 262.045498][ T7015] device vxcan1 entered promiscuous mode [ 262.077024][ T7015] device veth0 entered promiscuous mode [ 262.204252][ T7015] device veth1 entered promiscuous mode [ 262.249197][ T7015] device wg0 entered promiscuous mode [ 262.287418][ T7015] device wg1 entered promiscuous mode [ 262.336905][ T7015] device wg2 entered promiscuous mode [ 262.367675][ T7015] device veth0_to_bridge entered promiscuous mode [ 262.442875][ T7015] device veth1_to_bridge entered promiscuous mode [ 262.516761][ T7015] device veth0_to_bond entered promiscuous mode [ 262.581624][ T7015] device veth1_to_bond entered promiscuous mode [ 262.649366][ T7015] device veth0_to_team entered promiscuous mode [ 262.678926][ T7015] device team_slave_0 entered promiscuous mode [ 262.702057][ T7015] device veth1_to_team entered promiscuous mode [ 262.721481][ T7015] device team_slave_1 entered promiscuous mode [ 262.752352][ T7015] device veth0_to_batadv entered promiscuous mode [ 262.771207][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.809487][ T7015] device batadv_slave_0 entered promiscuous mode [ 262.843390][ T7015] device veth1_to_batadv entered promiscuous mode [ 262.852998][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.887997][ T7015] device batadv_slave_1 entered promiscuous mode [ 262.922353][ T7015] device xfrm0 entered promiscuous mode [ 262.943408][ T7015] device veth0_to_hsr entered promiscuous mode [ 262.963205][ T7015] device veth1_to_hsr entered promiscuous mode [ 263.002157][ T7015] device hsr0 entered promiscuous mode [ 263.025844][ T7015] device veth1_virt_wifi entered promiscuous mode [ 263.037711][ T7015] device veth0_virt_wifi entered promiscuous mode [ 263.120215][ T7015] device macvtap0 entered promiscuous mode [ 263.144314][ T7015] device macsec0 entered promiscuous mode [ 263.209013][ T7015] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.217964][ T7015] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.231878][ T7015] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.245978][ T7015] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.259657][ T7015] device geneve1 entered promiscuous mode [ 263.269148][ T7015] device netdevsim0 entered promiscuous mode [ 263.279426][ T7015] device netdevsim1 entered promiscuous mode [ 263.298982][ T7015] device netdevsim2 entered promiscuous mode [ 263.313416][ T3574] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 263.333010][ T7015] device netdevsim3 entered promiscuous mode [ 263.349105][ T7015] device wlan0 entered promiscuous mode [ 263.365324][ T7015] device wlan1 entered promiscuous mode [ 263.385790][ T7015] device gtp0 entered promiscuous mode [ 263.392009][ T7015] device bridge1 entered promiscuous mode [ 263.411214][ T1108] lo speed is unknown, defaulting to 1000 [ 263.424641][ T7069] netlink: 'syz.8.560': attribute type 1 has an invalid length. [ 263.694054][ T7] lo speed is unknown, defaulting to 1000 [ 263.729473][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 264.353425][ T7085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.398755][ T3574] usb 7-1: config 1 has an invalid interface number: 128 but max is 1 [ 264.407185][ T3574] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.421740][ T3574] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 264.522943][ T3574] usb 7-1: config 1 has no interface number 0 [ 264.529344][ T3574] usb 7-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.571074][ T7085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.595064][ T7085] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 264.611925][ T7085] bond0 (unregistering): Released all slaves [ 264.739093][ T3574] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.766660][ T3574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.162690][ T3574] usb 7-1: Product: syz [ 265.167299][ T3574] usb 7-1: Manufacturer: syz [ 265.172413][ T3574] usb 7-1: SerialNumber: syz [ 265.880167][ T3574] cdc_wdm 7-1:1.128: skipping garbage [ 265.885627][ T3574] cdc_wdm: probe of 7-1:1.128 failed with error -22 [ 265.954764][ T3574] usb 7-1: USB disconnect, device number 5 [ 266.108881][ T2285] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 266.138822][ T7129] device lo entered promiscuous mode [ 266.211654][ T7129] device tunl0 entered promiscuous mode [ 266.258362][ T7129] device gre0 entered promiscuous mode [ 266.458906][ T2285] usb 9-1: Using ep0 maxpacket: 16 [ 266.511875][ T7129] device gretap0 entered promiscuous mode [ 266.561878][ T7129] device erspan0 entered promiscuous mode [ 266.597972][ T7129] device ip_vti0 entered promiscuous mode [ 266.618979][ T2285] usb 9-1: unable to get BOS descriptor or descriptor too short [ 266.638292][ T7129] device ip6_vti0 entered promiscuous mode [ 266.699294][ T2285] usb 9-1: config 1 has an invalid interface number: 175 but max is 0 [ 266.717983][ T2285] usb 9-1: config 1 has no interface number 0 [ 266.733500][ T2285] usb 9-1: config 1 interface 175 has no altsetting 0 [ 266.752505][ T7129] device sit0 entered promiscuous mode [ 267.071060][ T2285] usb 9-1: New USB device found, idVendor=04ca, idProduct=3006, bcdDevice=c2.a3 [ 267.108367][ T2285] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.125164][ T2285] usb 9-1: Product: syz [ 267.129948][ T2285] usb 9-1: Manufacturer: syz [ 267.134605][ T2285] usb 9-1: SerialNumber: syz [ 267.147209][ T7143] netlink: 112 bytes leftover after parsing attributes in process `syz.3.577'. [ 267.894879][ T7129] device ip6tnl0 entered promiscuous mode [ 267.958834][ T2285] usb 9-1: can't set config #1, error -71 [ 267.969027][ T2285] usb 9-1: USB disconnect, device number 2 [ 268.011382][ T7129] device ip6gre0 entered promiscuous mode [ 268.056860][ T7129] device syz_tun entered promiscuous mode [ 268.108895][ T7129] device ip6gretap0 entered promiscuous mode [ 268.172630][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.181258][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.192063][ T7129] device bridge0 entered promiscuous mode [ 268.238361][ T7129] device vcan0 entered promiscuous mode [ 268.263499][ T7129] device bond0 entered promiscuous mode [ 268.269442][ T7129] device bond_slave_0 entered promiscuous mode [ 268.283374][ T7129] device bond_slave_1 entered promiscuous mode [ 268.348828][ T7129] device team0 entered promiscuous mode [ 268.358748][ T7129] device team_slave_0 entered promiscuous mode [ 268.368389][ T7129] device team_slave_1 entered promiscuous mode [ 268.433820][ T7129] device dummy0 entered promiscuous mode [ 268.492746][ T7129] device nlmon0 entered promiscuous mode [ 268.504619][ T7129] device caif0 entered promiscuous mode [ 268.535262][ T7129] device batadv0 entered promiscuous mode [ 268.573822][ T7129] device vxcan0 entered promiscuous mode [ 268.597077][ T7129] device vxcan1 entered promiscuous mode [ 268.613693][ T7129] device veth0 entered promiscuous mode [ 268.648926][ T7129] device veth1 entered promiscuous mode [ 268.719691][ T7129] device wg0 entered promiscuous mode [ 268.734606][ T7129] device wg1 entered promiscuous mode [ 268.794998][ T7129] device wg2 entered promiscuous mode [ 268.828308][ T7129] device veth0_to_bridge entered promiscuous mode [ 268.911892][ T7129] device veth1_to_bridge entered promiscuous mode [ 268.998795][ T7129] device veth0_to_bond entered promiscuous mode [ 269.050615][ T7129] device veth1_to_bond entered promiscuous mode [ 269.115360][ T7129] device veth0_to_team entered promiscuous mode [ 269.206414][ T7129] device veth1_to_team entered promiscuous mode [ 269.255616][ T7129] device veth0_to_batadv entered promiscuous mode [ 269.266262][ T7129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.289004][ T7129] device batadv_slave_0 entered promiscuous mode [ 269.322794][ T7129] device veth1_to_batadv entered promiscuous mode [ 269.332568][ T7129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.359002][ T7129] device batadv_slave_1 entered promiscuous mode [ 269.372512][ T7129] device xfrm0 entered promiscuous mode [ 269.382839][ T7129] device veth0_to_hsr entered promiscuous mode [ 269.443697][ T7129] device veth1_to_hsr entered promiscuous mode [ 269.506985][ T7129] device hsr0 entered promiscuous mode [ 269.537369][ T7129] device veth1_virt_wifi entered promiscuous mode [ 269.569577][ T7129] device veth0_virt_wifi entered promiscuous mode [ 269.588897][ T7129] device virt_wifi0 entered promiscuous mode [ 269.707202][ T7129] device vlan0 entered promiscuous mode [ 269.729007][ T7129] device vlan1 entered promiscuous mode [ 269.745928][ T7129] device macvlan0 entered promiscuous mode [ 269.796643][ T7129] device macvlan1 entered promiscuous mode [ 269.815544][ T7129] device ipvlan0 entered promiscuous mode [ 269.845163][ T7129] device ipvlan1 entered promiscuous mode [ 269.966552][ T7129] device macvtap0 entered promiscuous mode [ 270.019797][ T7129] device macsec0 entered promiscuous mode [ 270.885061][ T7129] device geneve0 entered promiscuous mode [ 270.925138][ T7129] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.939332][ T7129] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.954338][ T7129] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.971926][ T7129] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.987720][ T7129] device geneve1 entered promiscuous mode [ 271.037040][ T7129] device netdevsim0 entered promiscuous mode [ 271.092753][ T7129] device netdevsim1 entered promiscuous mode [ 271.143382][ T7129] device netdevsim2 entered promiscuous mode [ 271.188894][ T7129] device netdevsim3 entered promiscuous mode [ 271.319070][ T7129] device wlan0 entered promiscuous mode [ 271.428952][ T7129] device wlan1 entered promiscuous mode [ 271.440285][ T7129] device gtp0 entered promiscuous mode [ 271.584692][ T7178] loop6: detected capacity change from 0 to 512 [ 271.855976][ T7178] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 272.587353][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.621701][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.655245][ T7204] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.695190][ T7204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.049945][ T7231] netlink: 156 bytes leftover after parsing attributes in process `syz.3.596'. [ 277.427407][ T7264] loop6: detected capacity change from 0 to 256 [ 278.875437][ T7264] exFAT-fs (loop6): invalid boot record signature [ 278.928717][ T7264] exFAT-fs (loop6): failed to read boot sector [ 278.935016][ T7264] exFAT-fs (loop6): failed to recognize exfat type [ 278.945620][ T7293] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.207302][ T7306] netlink: 'syz.7.609': attribute type 11 has an invalid length. [ 279.302972][ T7312] device syzkaller0 entered promiscuous mode [ 283.438919][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 285.305348][ T7398] lo speed is unknown, defaulting to 1000 [ 286.667552][ T7427] loop6: detected capacity change from 0 to 256 [ 286.733009][ T7427] exfat: Bad value for 'dmask' [ 286.946274][ T7427] loop6: detected capacity change from 0 to 2048 [ 287.367923][ T7387] loop6: p2 < > p3 < p5 > p4 [ 287.377803][ T7387] loop6: partition table partially beyond EOD, truncated [ 287.392322][ T7422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.436220][ T7387] loop6: p2 start 4278190080 is beyond EOD, truncated [ 287.514870][ T7387] loop6: p4 size 8192 extends beyond EOD, truncated [ 287.549490][ T7387] loop6: p5 size 8192 extends beyond EOD, truncated [ 287.606657][ T7427] loop6: p2 < > p3 < p5 > p4 [ 287.611592][ T7427] loop6: partition table partially beyond EOD, truncated [ 287.620208][ T7427] loop6: p2 start 4278190080 is beyond EOD, truncated [ 287.635201][ T7427] loop6: p4 size 8192 extends beyond EOD, truncated [ 287.643855][ T7427] loop6: p5 size 8192 extends beyond EOD, truncated [ 287.969240][ T7444] loop7: detected capacity change from 0 to 32768 [ 288.125108][ T7444] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.641 (7444) [ 288.186258][ T7387] udevd[7387]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 288.335728][ T7455] udevd[7455]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 288.376810][ T7454] udevd[7454]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 288.417026][ T7444] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 288.427824][ T7444] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 288.437984][ T7444] BTRFS info (device loop7): use zstd compression, level 3 [ 288.445348][ T7444] BTRFS info (device loop7): using free space tree [ 288.452015][ T7444] BTRFS info (device loop7): has skinny extents [ 288.961969][ T7454] udevd[7454]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 288.976039][ T7455] udevd[7455]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 289.020484][ T7458] udevd[7458]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 291.056476][ T7491] loop8: detected capacity change from 0 to 512 [ 291.103885][ T7491] EXT4-fs (loop8): bad s_min_extra_isize: 544 [ 291.147150][ T7444] BTRFS error (device loop7): open_ctree failed: -12 [ 291.687299][ T7515] 0x000000000006-0x000000020000 : "" [ 291.752684][ T7515] ftl_cs: FTL header corrupt! [ 292.711410][ T7528] loop8: detected capacity change from 0 to 8 [ 292.731504][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.653'. [ 292.817540][ T7528] unable to read fragment index table [ 292.823744][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.7.653'. [ 292.903241][ T7529] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.913451][ T7529] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.922513][ T7529] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.931751][ T7529] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.529101][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.653'. [ 293.602492][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.653'. [ 294.615141][ T26] audit: type=1326 audit(1790872542.719:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.7.657" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde523a8159 code=0x0 [ 294.681809][ T7556] using random self ethernet address [ 294.688079][ T7556] using random host ethernet address [ 294.793001][ T7564] using random self ethernet address [ 294.798369][ T7564] using random host ethernet address [ 296.077688][ T7586] loop6: detected capacity change from 0 to 2048 [ 296.280232][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.291019][ T7586] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 297.068894][ T7586] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 297.122451][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.139132][ T7586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.184324][ T7589] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 297.556285][ T7604] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 301.430467][ T7656] serio: Serial port ptm0 [ 301.452181][ T7659] tipc: Started in network mode [ 301.457259][ T7659] tipc: Node identity ac1414aa, cluster identity 4711 [ 301.470576][ T7659] tipc: Enabled bearer , priority 10 [ 301.590870][ T7656] serio: Serial port ptm0 [ 302.187794][ T7681] lo speed is unknown, defaulting to 1000 [ 303.101180][ T1108] tipc: Node number set to 2886997162 [ 305.968879][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 306.587301][ T26] audit: type=1326 audit(1790872554.689:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 306.844649][ T26] audit: type=1326 audit(1790872554.749:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 306.893657][ T26] audit: type=1326 audit(1790872554.839:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 306.986312][ T26] audit: type=1326 audit(1790872554.839:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 307.037590][ T26] audit: type=1326 audit(1790872554.839:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 307.073222][ T7720] loop6: detected capacity change from 0 to 512 [ 307.284189][ T26] audit: type=1326 audit(1790872554.839:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 307.562174][ T26] audit: type=1326 audit(1790872554.839:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 308.054415][ T26] audit: type=1326 audit(1790872554.839:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 308.105060][ T7730] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 308.154352][ T26] audit: type=1326 audit(1790872554.839:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 308.155523][ T7720] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 308.388979][ T26] audit: type=1326 audit(1790872554.839:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.3.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fac4b455159 code=0x7ffc0000 [ 308.413277][ T7720] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 308.463258][ T7720] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.830697][ T7747] kvm: pic: single mode not supported [ 308.831107][ T7747] kvm: pic: single mode not supported [ 308.837720][ T7747] kvm: pic: level sensitive irq not supported [ 308.911694][ T7747] kvm: pic: level sensitive irq not supported [ 309.333979][ T7774] FAULT_INJECTION: forcing a failure. [ 309.333979][ T7774] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 309.358051][ T7774] CPU: 1 PID: 7774 Comm: syz.8.710 Not tainted syzkaller #0 [ 309.365384][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 309.375507][ T7774] Call Trace: [ 309.378884][ T7774] [ 309.381842][ T7774] dump_stack_lvl+0x188/0x250 [ 309.386574][ T7774] ? show_regs_print_info+0x20/0x20 [ 309.391811][ T7774] ? load_image+0x410/0x410 [ 309.396365][ T7774] ? mark_lock+0x94/0x320 [ 309.400734][ T7774] should_fail+0x383/0x4b0 [ 309.405481][ T7774] prepare_alloc_pages+0x1e3/0x5b0 [ 309.410647][ T7774] __alloc_pages+0x11b/0x480 [ 309.415312][ T7774] ? zone_statistics+0x170/0x170 [ 309.420514][ T7774] ? rcu_lock_acquire+0x30/0x30 [ 309.425416][ T7774] ? alloc_pages+0x452/0x560 [ 309.430085][ T7774] __get_free_pages+0x8/0x30 [ 309.434722][ T7774] __tlb_remove_page_size+0x1f2/0x3f0 [ 309.440139][ T7774] unmap_page_range+0xfcf/0x2410 [ 309.445164][ T7774] unmap_vmas+0x131/0x250 [ 309.449553][ T7774] ? unmap_page_range+0x2410/0x2410 [ 309.454872][ T7774] ? __mutex_lock_common+0x435/0x2400 [ 309.461587][ T7774] ? exit_mm_release+0x16/0x30 [ 309.466609][ T7774] exit_mmap+0x3b9/0x640 [ 309.470949][ T7774] ? vm_brk+0x20/0x20 [ 309.475263][ T7774] ? uprobe_clear_state+0x2f6/0x460 [ 309.480782][ T7774] __mmput+0x115/0x390 [ 309.484919][ T7774] exit_mm+0x632/0x7b0 [ 309.489654][ T7774] ? perf_pmu_migrate_context+0xb70/0xb70 [ 309.496213][ T7774] ? do_exit+0x2110/0x2110 [ 309.500668][ T7774] ? __ia32_sys_timer_delete+0x40/0x40 [ 309.506242][ T7774] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 309.511757][ T7774] ? tty_audit_exit+0x149/0x1f0 [ 309.516930][ T7774] do_exit+0x5b8/0x2110 [ 309.521155][ T7774] ? put_task_struct+0x80/0x80 [ 309.525943][ T7774] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 309.532066][ T7774] ? _raw_spin_lock_irq+0xb7/0xf0 [ 309.537383][ T7774] do_group_exit+0x12c/0x2f0 [ 309.542092][ T7774] ? lockdep_hardirqs_on+0x94/0x140 [ 309.547356][ T7774] get_signal+0x7eb/0x12e0 [ 309.551800][ T7774] arch_do_signal_or_restart+0xe6/0x12a0 [ 309.557553][ T7774] ? futex_exit_release+0x1c0/0x1c0 [ 309.562805][ T7774] ? get_sigframe_size+0x10/0x10 [ 309.568102][ T7774] ? __context_tracking_exit+0x4c/0x80 [ 309.573595][ T7774] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 309.579600][ T7774] ? exit_to_user_mode_loop+0x3b/0x130 [ 309.585481][ T7774] exit_to_user_mode_loop+0x9e/0x130 [ 309.591073][ T7774] exit_to_user_mode_prepare+0xee/0x180 [ 309.596676][ T7774] syscall_exit_to_user_mode+0x16/0x40 [ 309.602159][ T7774] do_syscall_64+0x58/0xa0 [ 309.606587][ T7774] ? clear_bhb_loop+0x30/0x80 [ 309.611273][ T7774] ? clear_bhb_loop+0x30/0x80 [ 309.615983][ T7774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.621992][ T7774] RIP: 0033:0x7fb3846f9159 [ 309.626417][ T7774] Code: Unable to access opcode bytes at RIP 0x7fb3846f912f. [ 309.633789][ T7774] RSP: 002b:00007fb3829510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 309.642401][ T7774] RAX: 0000000000000001 RBX: 00007fb384980fa8 RCX: 00007fb3846f9159 [ 309.651263][ T7774] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb384980fac [ 309.660026][ T7774] RBP: 00007fb384980fa0 R08: 000f2d74406acda0 R09: 0000000000000000 [ 309.668944][ T7774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.677306][ T7774] R13: 00007fb384981038 R14: 00007ffdc279a840 R15: 00007ffdc279a928 [ 309.687013][ T7774] [ 311.990623][ T7802] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 312.218539][ T5914] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 313.084446][ T5914] cp2112 0003:10C4:EA90.0001: error requesting version [ 313.095660][ T5914] cp2112: probe of 0003:10C4:EA90.0001 failed with error -5 [ 313.414187][ T7826] tipc: Started in network mode [ 313.420048][ T7826] tipc: Node identity 7f000001, cluster identity 4711 [ 313.427198][ T7826] tipc: New replicast peer: 127.0.0.1 [ 313.435378][ T7826] tipc: Enabled bearer , priority 10 [ 313.443732][ T7826] tipc: Disabling bearer [ 313.456648][ T7812] fido_id[7812]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 313.468070][ T7826] loop8: detected capacity change from 0 to 256 [ 313.670631][ T7826] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.838125][ T7850] bond2: option mode: unable to set because the bond device is up [ 314.905577][ T7850] device bond_slave_0 entered promiscuous mode [ 314.913173][ T7850] device bond_slave_1 entered promiscuous mode [ 315.005193][ T7850] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 315.053825][ T7850] bond2: (slave macvlan2): making interface the new active one [ 315.131584][ T7850] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 315.192265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 315.221139][ T7853] rdma_rxe: ignoring netdev event = 23 for lo [ 315.240850][ T7853] rdma_rxe: lo changed mtu to 67 [ 315.269972][ T7853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.345854][ T7854] netlink: 14 bytes leftover after parsing attributes in process `syz.7.725'. [ 315.396001][ T7854] device bond_slave_0 left promiscuous mode [ 315.438919][ T7854] device bond_slave_1 left promiscuous mode [ 316.547925][ T7854] bond2: (slave macvlan2): Releasing active interface [ 316.698549][ T7876] loop6: detected capacity change from 0 to 512 [ 317.205374][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.212001][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.722201][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.764302][ T7876] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 318.790379][ T7876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0102] [ 318.799809][ T7876] EXT4-fs (loop6): orphan cleanup on readonly fs [ 318.859682][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.952035][ T7876] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.731: bg 0: block 361: padding at end of block bitmap is not set [ 318.968426][ T7876] EXT4-fs (loop6): Remounting filesystem read-only [ 318.975424][ T7876] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 318.985177][ T7876] EXT4-fs (loop6): Remounting filesystem read-only [ 318.992349][ T7876] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.731: invalid indirect mapped block 1358954509 (level 0) [ 319.006896][ T7876] EXT4-fs (loop6): Remounting filesystem read-only [ 319.014096][ T7876] EXT4-fs (loop6): 1 truncate cleaned up [ 319.019953][ T7876] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,noblock_validity,discard,errors=remount-ro,debug_want_extra_isize=0x0000000000000008. Quota mode: none. [ 319.082229][ T7854] bond0 (unregistering): Released all slaves [ 319.112658][ T7884] loop8: detected capacity change from 0 to 8 [ 319.590280][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.737'. [ 319.937141][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 320.101243][ T7909] tmpfs: Unknown parameter 'usrquotþ²êßm"ÌóVK\íßJa_blo' [ 320.304911][ T7924] unsupported nlmsg_type 40 [ 320.474008][ T7909] overlayfs: './file0' not a directory [ 320.867868][ T7919] Error parsing options; rc = [-22] [ 321.839603][ T7946] netlink: 40 bytes leftover after parsing attributes in process `syz.7.752'. [ 321.870219][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.753'. [ 324.039185][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.755'. [ 325.401960][ T7979] netlink: 'syz.8.759': attribute type 3 has an invalid length. [ 325.608936][ T7500] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 325.768954][ T8003] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 325.857533][ T8003] Cannot find add_set index 0 as target [ 325.979082][ T7500] usb 7-1: config 127 has an invalid interface number: 138 but max is 0 [ 325.990367][ T7500] usb 7-1: config 127 has no interface number 0 [ 326.023487][ T8004] Set syz1 is full, maxelem 2076 reached [ 326.027133][ T7500] usb 7-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 326.073722][ T7500] usb 7-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 326.279120][ T7500] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 326.298133][ T7500] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.353920][ T7500] usb 7-1: Product: syz [ 326.358548][ T7500] usb 7-1: Manufacturer: syz [ 326.367137][ T8011] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by ""[8011] [ 326.388527][ T7500] usb 7-1: SerialNumber: syz [ 327.029188][ T7985] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 327.059515][ T7985] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 328.249262][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 328.269056][ T7500] usb 7-1: probing VID:PID(0424:012C) [ 328.289462][ T7500] usb 7-1: vub300 testing BULK OUT EndPoint(0) 0F [ 328.323729][ T7500] usb 7-1: vub300 testing BULK OUT EndPoint(1) 09 [ 328.344329][ T8033] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 328.358040][ T7500] usb 7-1: vub300 testing BULK OUT EndPoint(2) 0C [ 328.405853][ T7500] usb 7-1: ignoring unexpected bulk_out endpoint [ 328.433566][ T7500] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 328.477562][ T7500] vub300: probe of 7-1:127.138 failed with error -22 [ 328.504819][ T7500] usb 7-1: USB disconnect, device number 6 [ 330.161509][ T8047] device syzkaller0 entered promiscuous mode [ 330.196184][ T8047] TC_ACT_REPEAT abuse ? [ 332.960924][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 332.960942][ T26] audit: type=1800 audit(1790872581.069:246): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.782" name="memory_backed" dev="configfs" ino=46599 res=0 errno=0 [ 333.138712][ T26] audit: type=1800 audit(1790872581.109:247): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.782" name="zone_nr_conv" dev="configfs" ino=46600 res=0 errno=0 [ 333.232397][ T26] audit: type=1800 audit(1790872581.129:248): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.782" name="power" dev="configfs" ino=46601 res=0 errno=0 [ 334.239667][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'. [ 334.301047][ T8104] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.309996][ T8104] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.319309][ T8104] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.320799][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 334.328439][ T8104] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.401401][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 334.418946][ T8095] netlink: 108 bytes leftover after parsing attributes in process `syz.1.787'. [ 334.428521][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'. [ 334.464621][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'. [ 334.535588][ T8104] device vxlan0 entered promiscuous mode [ 334.588083][ T8104] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 334.968796][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 336.098139][ T8139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.795'. [ 336.111237][ T8133] loop6: detected capacity change from 0 to 2048 [ 336.210803][ T26] audit: type=1800 audit(1790872584.319:249): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.798" name="memory_backed" dev="configfs" ino=45690 res=0 errno=0 [ 336.247445][ T8133] NILFS (loop6): invalid segment: Magic number mismatch [ 336.285129][ T26] audit: type=1800 audit(1790872584.339:250): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.798" name="zone_nr_conv" dev="configfs" ino=45691 res=0 errno=0 [ 336.343395][ T8133] NILFS (loop6): trying rollback from an earlier position [ 336.488822][ T26] audit: type=1800 audit(1790872584.349:251): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.798" name="power" dev="configfs" ino=45692 res=0 errno=0 [ 336.520518][ T8133] NILFS (loop6): recovery complete [ 336.578212][ T8155] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.631573][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.802'. [ 337.736461][ T8133] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 337.750505][ T8163] fuse: blksize only supported for fuseblk [ 337.890478][ T8181] ipt_REJECT: TCP_RESET invalid for non-tcp [ 337.950407][ T8182] netlink: 'syz.7.807': attribute type 3 has an invalid length. [ 338.109846][ T8182] netlink: 'syz.7.807': attribute type 3 has an invalid length. [ 338.589689][ T8182] netlink: 'syz.7.807': attribute type 1 has an invalid length. [ 338.828279][ T8188] Cannot find map_set index 2 as target [ 338.835353][ T8189] netlink: 'syz.7.807': attribute type 1 has an invalid length. [ 338.906985][ T8182] netlink: 'syz.7.807': attribute type 1 has an invalid length. [ 338.926265][ T8182] netlink: 'syz.7.807': attribute type 3 has an invalid length. [ 338.944608][ T8182] netlink: 'syz.7.807': attribute type 1 has an invalid length. [ 338.956095][ T8182] netlink: 'syz.7.807': attribute type 3 has an invalid length. [ 338.970165][ T8182] netlink: 'syz.7.807': attribute type 3 has an invalid length. [ 339.998808][ T8204] netlink: 68 bytes leftover after parsing attributes in process `syz.7.812'. [ 341.448997][ T8231] netlink: 20 bytes leftover after parsing attributes in process `syz.6.818'. [ 343.127764][ T26] audit: type=1326 audit(1790872591.229:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.6.822" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5e65db159 code=0x0 [ 343.546882][ T8256] overlayfs: failed to clone upperpath [ 344.538571][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.8.824'. [ 346.234999][ T8278] ip_tables: iptables: counters copy to user failed while replacing table [ 346.285457][ T8282] netlink: 68 bytes leftover after parsing attributes in process `syz.3.831'. [ 347.806706][ T8308] netlink: 'syz.8.835': attribute type 2 has an invalid length. [ 349.992462][ T8341] Cannot find add_set index 0 as target [ 350.142638][ T8341] Set syz1 is full, maxelem 2076 reached [ 351.277869][ T8376] netlink: 68 bytes leftover after parsing attributes in process `syz.8.852'. [ 351.356517][ T8374] device syzkaller0 entered promiscuous mode [ 352.225969][ T8395] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 352.225969][ T8395] program syz.7.856 not setting count and/or reply_len properly [ 353.865148][ T8429] netlink: 156 bytes leftover after parsing attributes in process `syz.7.861'. [ 356.670701][ T8493] device wlan1 left promiscuous mode [ 357.244428][ T8510] netlink: 156 bytes leftover after parsing attributes in process `syz.1.877'. [ 359.518488][ T8545] netlink: 25 bytes leftover after parsing attributes in process `syz.8.882'. [ 359.868726][ T8545] device gretap0 entered promiscuous mode [ 359.935440][ T8547] netlink: 45349 bytes leftover after parsing attributes in process `syz.8.882'. [ 359.975698][ T8555] loop7: detected capacity change from 0 to 512 [ 359.986995][ T8547] 0ªX¹¦Dö»: renamed from gretap0 [ 360.080374][ T8547] device 00ªX¹¦Dö» left promiscuous mode [ 361.271546][ T8555] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 361.281536][ T8555] FAT-fs (loop7): Filesystem has been set read-only [ 361.288424][ T8555] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 364.496287][ T8594] ip_tables: iptables: counters copy to user failed while replacing table [ 364.785838][ T8594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 367.301688][ T8615] lo speed is unknown, defaulting to 1000 [ 368.458810][ T8622] loop6: detected capacity change from 0 to 32768 [ 368.597360][ T8622] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.905 (8622) [ 368.815807][ T8622] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 368.825486][ T8622] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 368.835278][ T8622] BTRFS info (device loop6): use zstd compression, level 3 [ 368.842574][ T8622] BTRFS info (device loop6): using free space tree [ 368.849515][ T8622] BTRFS info (device loop6): has skinny extents [ 372.451417][ T8622] BTRFS error (device loop6): open_ctree failed: -22 [ 372.463684][ T8632] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by udevd (8632) [ 375.049917][ T8707] loop7: detected capacity change from 0 to 512 [ 375.100255][ T8707] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 375.221818][ T8707] EXT4-fs (loop7): 1 truncate cleaned up [ 375.239319][ T8707] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 376.158534][ T8721] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 376.817941][ T26] audit: type=1326 audit(1790872624.919:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.1.917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f818e2b8159 code=0x0 [ 376.986229][ T8731] sctp: [Deprecated]: syz.3.928 (pid 8731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.986229][ T8731] Use struct sctp_sack_info instead [ 377.252423][ T8736] sctp: [Deprecated]: syz.3.928 (pid 8736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.252423][ T8736] Use struct sctp_sack_info instead [ 378.034992][ T8752] overlayfs: failed to clone upperpath [ 378.226321][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.938'. [ 378.280852][ T8761] device hsr_slave_0 left promiscuous mode [ 378.367812][ T8769] futex_wake_op: syz.6.940 tries to shift op by 144; fix this program [ 378.515877][ T8761] device hsr_slave_1 left promiscuous mode [ 378.710153][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.721554][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.039954][ T8760] netlink: 'syz.3.937': attribute type 13 has an invalid length. [ 380.174942][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 380.323435][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 380.364621][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 380.440408][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 380.489110][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 380.528554][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 380.568489][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 380.595175][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 380.637517][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 380.731104][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 380.764560][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 380.792272][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): nr8: link becomes ready [ 380.870260][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 380.921304][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 380.960652][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 381.006995][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 381.044750][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 381.105925][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 381.167569][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 381.196850][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 381.246283][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 381.275882][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 381.311924][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 381.343649][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 381.378766][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 381.407080][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 381.472884][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 381.512221][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 381.542683][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb16: link becomes ready [ 381.588856][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb17: link becomes ready [ 381.635344][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb18: link becomes ready [ 381.655789][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb19: link becomes ready [ 381.690487][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb20: link becomes ready [ 381.718787][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): lapb21: link becomes ready [ 383.279236][ T8815] hub 9-0:1.0: USB hub found [ 383.300457][ T8801] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 383.310068][ T8815] hub 9-0:1.0: 1 port detected [ 384.693137][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.128595][ T8830] loop6: detected capacity change from 0 to 256 [ 385.168293][ T8828] tipc: Enabled bearer , priority 10 [ 385.255860][ T8833] autofs4:pid:8833:autofs_fill_super: called with bogus options [ 385.300343][ T8830] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 385.518856][ T26] audit: type=1804 audit(1790872633.619:254): pid=8830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.956" name="/newroot/117/file0/bus" dev="loop6" ino=1048617 res=1 errno=0 [ 386.088865][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 386.602421][ T4190] tipc: Node number set to 2130706433 [ 386.771380][ T8854] overlayfs: failed to clone lowerpath [ 386.790671][ T8854] overlayfs: failed to clone lowerpath [ 386.826760][ T8854] tipc: New replicast peer: 127.0.0.1 [ 386.834935][ T8854] tipc: Enabled bearer , priority 10 [ 386.853451][ T8854] netlink: 64 bytes leftover after parsing attributes in process `syz.1.964'. [ 386.865835][ T8856] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 387.239389][ T8861] sch_tbf: burst 7 is lower than device syzkaller0 mtu (65589) ! [ 388.152274][ T8881] netlink: 56 bytes leftover after parsing attributes in process `syz.1.974'. [ 388.489686][ T8886] sctp: [Deprecated]: syz.8.975 (pid 8886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.489686][ T8886] Use struct sctp_sack_info instead [ 389.166121][ T8881] 9pnet: Insufficient options for proto=fd [ 389.314590][ T8891] xt_recent: Unsupported userspace flags (000000c5) [ 391.308814][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.375456][ T8928] loop6: detected capacity change from 0 to 64 [ 392.600616][ T8939] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 393.594197][ T144] attempt to access beyond end of device [ 393.594197][ T144] loop6: rw=1, want=66, limit=64 [ 393.633283][ T144] Buffer I/O error on dev loop6, logical block 65, lost async page write [ 393.670074][ T144] attempt to access beyond end of device [ 393.670074][ T144] loop6: rw=1, want=67, limit=64 [ 393.714803][ T144] Buffer I/O error on dev loop6, logical block 66, lost async page write [ 393.766591][ T144] attempt to access beyond end of device [ 393.766591][ T144] loop6: rw=1, want=68, limit=64 [ 393.808560][ T144] Buffer I/O error on dev loop6, logical block 67, lost async page write [ 393.849603][ T144] attempt to access beyond end of device [ 393.849603][ T144] loop6: rw=1, want=69, limit=64 [ 393.896796][ T144] Buffer I/O error on dev loop6, logical block 68, lost async page write [ 393.934857][ T144] attempt to access beyond end of device [ 393.934857][ T144] loop6: rw=1, want=73, limit=64 [ 393.973415][ T144] Buffer I/O error on dev loop6, logical block 72, lost async page write [ 394.023792][ T144] attempt to access beyond end of device [ 394.023792][ T144] loop6: rw=1, want=74, limit=64 [ 394.057984][ T144] Buffer I/O error on dev loop6, logical block 73, lost async page write [ 394.180094][ T144] attempt to access beyond end of device [ 394.180094][ T144] loop6: rw=1, want=77, limit=64 [ 394.231569][ T8948] netlink: 56 bytes leftover after parsing attributes in process `syz.7.994'. [ 394.260919][ T144] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 394.330221][ T144] attempt to access beyond end of device [ 394.330221][ T144] loop6: rw=1, want=78, limit=64 [ 394.389780][ T144] Buffer I/O error on dev loop6, logical block 77, lost async page write [ 394.577488][ T144] attempt to access beyond end of device [ 394.577488][ T144] loop6: rw=1, want=622, limit=64 [ 397.274451][ T8975] loop6: detected capacity change from 0 to 1764 [ 397.680287][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.688534][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.260597][ T8948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.456101][ T8948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.748891][ T8948] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.758250][ T8948] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.776085][ T8948] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.789128][ T8948] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.876404][ T8948] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.885958][ T8948] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.895468][ T8948] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.904567][ T8948] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.015684][ T8998] netlink: 'syz.1.1005': attribute type 13 has an invalid length. [ 403.059519][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 403.091914][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 403.135397][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 403.158967][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 403.254152][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 403.340782][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 403.367923][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 403.566457][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 403.666855][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 403.801110][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 403.974509][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 403.994992][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): nr8: link becomes ready [ 404.015008][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 404.044197][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 404.070533][ T9020] 9pnet_virtio: no channels available for device syz [ 404.081495][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 404.121880][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 404.227913][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 404.265900][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 404.290411][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 404.334906][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 404.398481][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 404.416130][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 405.098356][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 405.155375][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 405.194867][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 405.226230][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 405.264591][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 405.284142][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 405.313975][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb16: link becomes ready [ 405.333699][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb17: link becomes ready [ 405.358410][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb18: link becomes ready [ 405.376751][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb19: link becomes ready [ 405.397302][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb20: link becomes ready [ 405.435494][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): lapb21: link becomes ready [ 405.464462][ T9008] netlink: 'syz.7.1009': attribute type 4 has an invalid length. [ 405.486941][ T9008] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1009'. [ 407.305852][ T9050] overlayfs: unrecognized mount option "subj_role=workdir" or missing value [ 407.338581][ T9067] ip_tables: iptables: counters copy to user failed while replacing table [ 407.855733][ T9074] loop7: detected capacity change from 0 to 512 [ 409.223946][ T9086] loop6: detected capacity change from 0 to 512 [ 409.312151][ T9074] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.1029: corrupted inode contents [ 409.416793][ T9074] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 409.435530][ T9086] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 409.439300][ T9074] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.1029: corrupted inode contents [ 409.467485][ T9086] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.529431][ T9103] xt_TPROXY: Can be used only with -p tcp or -p udp [ 409.753292][ T9074] EXT4-fs error (device loop7): ext4_evict_inode:332: inode #15: comm syz.7.1029: mark_inode_dirty error [ 410.058245][ T9074] EXT4-fs (loop7): 1 orphan inode deleted [ 410.161299][ T9074] EXT4-fs (loop7): mounted filesystem without journal. Opts: noinit_itable,min_batch_time=0x0000000000000006,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 410.310103][ T9086] xt_hashlimit: max too large, truncated to 1048576 [ 410.363130][ T9101] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 412.821990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.985252][ T9145] device wlan0 left promiscuous mode [ 412.994966][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 413.011439][ T9143] device syzkaller0 entered promiscuous mode [ 414.152413][ T9166] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!O�wëìØåë¶z�ª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 414.673354][ T9173] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 4 (only 8 groups) [ 415.234813][ T9188] ------------[ cut here ]------------ [ 415.274207][ T9188] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 415.407703][ T9188] WARNING: CPU: 1 PID: 9188 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 415.420365][ T9188] Modules linked in: [ 415.424600][ T9188] CPU: 1 PID: 9188 Comm: syz.8.1063 Not tainted syzkaller #0 [ 415.432733][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 415.449394][ T9188] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 415.882538][ T9202] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 415.957148][ T9204] overlayfs: failed to clone upperpath [ 416.068464][ T9188] Code: 9f 79 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 51 39 8b 4c 89 e6 89 ea e8 a5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 69 6b 34 f8 0f 0b e9 b1 fe ff ff e8 5d 6b [ 416.107978][ T9188] RSP: 0018:ffffc9000353f240 EFLAGS: 00010246 [ 416.114549][ T9188] RAX: 190c2e7fc1c5f100 RBX: 0000000000400000 RCX: 0000000000080000 [ 416.133758][ T9188] RDX: ffffc90017135000 RSI: 00000000000041d1 RDI: 00000000000041d2 [ 416.142444][ T9188] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 416.150825][ T9188] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88805f18c000 [ 416.159719][ T9188] R13: ffff88805f18d290 R14: ffff888059be0e00 R15: ffff88805f18e268 [ 416.169966][ T9188] FS: 00007fb3829516c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 416.179331][ T9188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.186600][ T9188] CR2: 00007fb3824ee000 CR3: 0000000030a14000 CR4: 00000000003506e0 [ 416.195224][ T9188] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 416.203636][ T9188] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 416.211751][ T9188] Call Trace: [ 416.215479][ T9188] [ 416.218469][ T9188] ? netif_carrier_on+0x71/0x120 [ 416.223959][ T9188] ieee80211_ocb_leave+0x27f/0x320 [ 416.229227][ T9188] __cfg80211_leave_ocb+0x219/0x400 [ 416.234892][ T9188] cfg80211_leave_ocb+0x53/0x70 [ 416.239902][ T9188] cfg80211_change_iface+0x4ec/0xe10 [ 416.246001][ T9188] nl80211_set_interface+0x5b8/0x810 [ 416.254776][ T9188] ? nl80211_dump_interface+0x560/0x560 [ 416.260846][ T9188] ? mutex_lock_nested+0x17/0x20 [ 416.266029][ T9188] ? nl80211_pre_doit+0x27b/0x540 [ 416.273742][ T9188] genl_rcv_msg+0xd0b/0xfa0 [ 416.278343][ T9188] ? genl_bind+0x370/0x370 [ 416.284230][ T9188] ? __dev_queue_xmit+0x1b64/0x2e50 [ 416.289837][ T9188] ? verify_lock_unused+0x140/0x140 [ 416.295307][ T9188] ? dev_queue_xmit+0x20/0x20 [ 416.300465][ T9188] ? nl80211_dump_interface+0x560/0x560 [ 416.306405][ T9188] netlink_rcv_skb+0x1e9/0x430 [ 416.311640][ T9188] ? genl_bind+0x370/0x370 [ 416.316239][ T9188] ? netlink_ack+0xb10/0xb10 [ 416.321346][ T9188] ? down_read+0x1aa/0x2e0 [ 416.325880][ T9188] genl_rcv+0x24/0x40 [ 416.330325][ T9188] netlink_unicast+0x78f/0x940 [ 416.335197][ T9188] netlink_sendmsg+0x8ba/0xbe0 [ 416.340569][ T9188] ? netlink_getsockopt+0x570/0x570 [ 416.345925][ T9188] ? aa_sock_msg_perm+0x94/0x150 [ 416.351323][ T9188] ? apparmor_socket_sendmsg+0x88/0x230 [ 416.357385][ T9188] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 416.362813][ T9188] ? security_socket_sendmsg+0x7c/0xa0 [ 416.368934][ T9188] ? netlink_getsockopt+0x570/0x570 [ 416.377149][ T9188] ____sys_sendmsg+0x5be/0x8f0 [ 416.382117][ T9188] ? __sys_sendmsg_sock+0x30/0x30 [ 416.387852][ T9188] ? import_iovec+0x6f/0xa0 [ 416.393098][ T9188] ___sys_sendmsg+0x236/0x2e0 [ 416.398511][ T9188] ? __sys_sendmsg+0x290/0x290 [ 416.403760][ T9188] ? sock_do_ioctl+0x1b4/0x320 [ 416.408737][ T9188] __se_sys_sendmsg+0x1b7/0x2a0 [ 416.414337][ T9188] ? __x64_sys_sendmsg+0x80/0x80 [ 416.419735][ T9188] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 416.426087][ T9188] ? lockdep_hardirqs_on+0x94/0x140 [ 416.431909][ T9188] do_syscall_64+0x4c/0xa0 [ 416.436489][ T9188] ? clear_bhb_loop+0x30/0x80 [ 416.441224][ T9188] ? clear_bhb_loop+0x30/0x80 [ 416.446341][ T9188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.452436][ T9188] RIP: 0033:0x7fb3846f9159 [ 416.456905][ T9188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.476722][ T9188] RSP: 002b:00007fb382951028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.487754][ T9188] RAX: ffffffffffffffda RBX: 00007fb384980fa0 RCX: 00007fb3846f9159 [ 416.495923][ T9188] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 416.504035][ T9188] RBP: 00007fb38479006b R08: 0000000000000000 R09: 0000000000000000 [ 416.512159][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.520268][ T9188] R13: 00007fb384981038 R14: 00007fb384980fa0 R15: 00007ffdc279a928 [ 416.528527][ T9188] [ 416.532232][ T9188] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 416.539738][ T9188] CPU: 1 PID: 9188 Comm: syz.8.1063 Not tainted syzkaller #0 [ 416.547151][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 416.557237][ T9188] Call Trace: [ 416.560641][ T9188] [ 416.563597][ T9188] dump_stack_lvl+0x188/0x250 [ 416.568309][ T9188] ? show_regs_print_info+0x20/0x20 [ 416.573532][ T9188] ? load_image+0x410/0x410 [ 416.578072][ T9188] panic+0x2f8/0x850 [ 416.582085][ T9188] ? bpf_jit_dump+0xd0/0xd0 [ 416.586627][ T9188] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 416.593095][ T9188] __warn+0x248/0x2b0 [ 416.597155][ T9188] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 416.603622][ T9188] report_bug+0x1b9/0x2e0 [ 416.608005][ T9188] handle_bug+0x3a/0x70 [ 416.612205][ T9188] exc_invalid_op+0x16/0x40 [ 416.616918][ T9188] asm_exc_invalid_op+0x16/0x20 [ 416.621778][ T9188] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 416.628848][ T9188] Code: 9f 79 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 51 39 8b 4c 89 e6 89 ea e8 a5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 69 6b 34 f8 0f 0b e9 b1 fe ff ff e8 5d 6b [ 416.648508][ T9188] RSP: 0018:ffffc9000353f240 EFLAGS: 00010246 [ 416.654699][ T9188] RAX: 190c2e7fc1c5f100 RBX: 0000000000400000 RCX: 0000000000080000 [ 416.662695][ T9188] RDX: ffffc90017135000 RSI: 00000000000041d1 RDI: 00000000000041d2 [ 416.670782][ T9188] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 416.678801][ T9188] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88805f18c000 [ 416.686818][ T9188] R13: ffff88805f18d290 R14: ffff888059be0e00 R15: ffff88805f18e268 [ 416.694838][ T9188] ? netif_carrier_on+0x71/0x120 [ 416.699936][ T9188] ieee80211_ocb_leave+0x27f/0x320 [ 416.705187][ T9188] __cfg80211_leave_ocb+0x219/0x400 [ 416.710431][ T9188] cfg80211_leave_ocb+0x53/0x70 [ 416.715340][ T9188] cfg80211_change_iface+0x4ec/0xe10 [ 416.720690][ T9188] nl80211_set_interface+0x5b8/0x810 [ 416.726032][ T9188] ? nl80211_dump_interface+0x560/0x560 [ 416.731616][ T9188] ? mutex_lock_nested+0x17/0x20 [ 416.736620][ T9188] ? nl80211_pre_doit+0x27b/0x540 [ 416.741693][ T9188] genl_rcv_msg+0xd0b/0xfa0 [ 416.746235][ T9188] ? genl_bind+0x370/0x370 [ 416.750688][ T9188] ? __dev_queue_xmit+0x1b64/0x2e50 [ 416.756023][ T9188] ? verify_lock_unused+0x140/0x140 [ 416.761348][ T9188] ? dev_queue_xmit+0x20/0x20 [ 416.766318][ T9188] ? nl80211_dump_interface+0x560/0x560 [ 416.771986][ T9188] netlink_rcv_skb+0x1e9/0x430 [ 416.777043][ T9188] ? genl_bind+0x370/0x370 [ 416.781856][ T9188] ? netlink_ack+0xb10/0xb10 [ 416.786588][ T9188] ? down_read+0x1aa/0x2e0 [ 416.791061][ T9188] genl_rcv+0x24/0x40 [ 416.795059][ T9188] netlink_unicast+0x78f/0x940 [ 416.799865][ T9188] netlink_sendmsg+0x8ba/0xbe0 [ 416.804672][ T9188] ? netlink_getsockopt+0x570/0x570 [ 416.810006][ T9188] ? aa_sock_msg_perm+0x94/0x150 [ 416.814974][ T9188] ? apparmor_socket_sendmsg+0x88/0x230 [ 416.820550][ T9188] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 416.825865][ T9188] ? security_socket_sendmsg+0x7c/0xa0 [ 416.831383][ T9188] ? netlink_getsockopt+0x570/0x570 [ 416.836711][ T9188] ____sys_sendmsg+0x5be/0x8f0 [ 416.841527][ T9188] ? __sys_sendmsg_sock+0x30/0x30 [ 416.848068][ T9188] ? import_iovec+0x6f/0xa0 [ 416.852626][ T9188] ___sys_sendmsg+0x236/0x2e0 [ 416.857344][ T9188] ? __sys_sendmsg+0x290/0x290 [ 416.862264][ T9188] ? sock_do_ioctl+0x1b4/0x320 [ 416.867073][ T9188] __se_sys_sendmsg+0x1b7/0x2a0 [ 416.872083][ T9188] ? __x64_sys_sendmsg+0x80/0x80 [ 416.877170][ T9188] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 416.883357][ T9188] ? lockdep_hardirqs_on+0x94/0x140 [ 416.888731][ T9188] do_syscall_64+0x4c/0xa0 [ 416.893196][ T9188] ? clear_bhb_loop+0x30/0x80 [ 416.897931][ T9188] ? clear_bhb_loop+0x30/0x80 [ 416.902738][ T9188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.908669][ T9188] RIP: 0033:0x7fb3846f9159 [ 416.913099][ T9188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.933479][ T9188] RSP: 002b:00007fb382951028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.941938][ T9188] RAX: ffffffffffffffda RBX: 00007fb384980fa0 RCX: 00007fb3846f9159 [ 416.950103][ T9188] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 416.958087][ T9188] RBP: 00007fb38479006b R08: 0000000000000000 R09: 0000000000000000 [ 416.966288][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.974321][ T9188] R13: 00007fb384981038 R14: 00007fb384980fa0 R15: 00007ffdc279a928 [ 416.982450][ T9188] [ 416.985758][ T9188] Kernel Offset: disabled [ 416.990709][ T9188] Rebooting in 86400 seconds..