last executing test programs: 7m43.640776271s ago: executing program 32 (id=126): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 7m42.795898251s ago: executing program 33 (id=49): eventfd(0x8c66) socket(0xa, 0x3, 0xff) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 7m33.833484914s ago: executing program 3 (id=154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="c62ee5d6a8ec1dc4f4d714ffff87cb40ff", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 7m21.323028116s ago: executing program 3 (id=154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="c62ee5d6a8ec1dc4f4d714ffff87cb40ff", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 7m18.960694948s ago: executing program 3 (id=199): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) recvmmsg(r1, 0x0, 0x0, 0x1000400000de, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000240)={'filter\x00', 0x5, "44bf0863a3"}, &(0x7f0000000180)=0x2d) 7m18.410379754s ago: executing program 3 (id=200): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x95e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}, {@grpid}, {@oldalloc}]}, 0x3, 0x44d, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 7m16.739580253s ago: executing program 3 (id=202): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write(r1, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1500, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x6002) write(r0, &(0x7f00000017c0)="d37fd38d15ace25c801362fec9a4f08aa6ffc93a9e590755537281ab83aa17cc2669fc27d08161bbeee79a4d42d2f8a6ebb7a2aa4d66922103dc46a57312022c575c731c98cf4970d438b2686266f9b943db973ee2c01716ada4fbaf7f1d04a81ea7c256dee76d76457bacffe6bb659268e95d46cfbe", 0x76) r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) 7m16.129439882s ago: executing program 3 (id=205): mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 7m15.372744358s ago: executing program 34 (id=205): mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 5m30.712649725s ago: executing program 5 (id=589): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0) close(r0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 5m28.92486186s ago: executing program 5 (id=600): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 5m28.461900132s ago: executing program 5 (id=602): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x12020) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000080)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x8dc, 0x0, 0x0, 0x1000, 0xffff, 0x0, 0x0, 0x25}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5m28.186899105s ago: executing program 5 (id=604): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$eJzs3M1vVFUbAPDnTqel5eOlLy+vCgGtgpH40dLyIQsTo9GEhUajLjCu6rQQpICBmgghWl1gjAtD4t64NPEvcGF0Y9SViS5xb0iIYQO6uubOvbcfwwxt6dApzO+XXOac+8E5z5x7Zs49904D6FpD2T9JxMaIuBwRmyOi2rjDUP5y49qF2t/XLtSSSNPX/0qyw+L6tQu14r+oL5kN+Yo0LfLrmpR78a2I8ampyTNFfmT65LsjZ8+df+r4yfFjk8cmT40dOrR/386+g2MH2hJnFtf17R+c3rHt8JuXXq4dufT2z99k9d1YbC/jaKeh/N1t6tF2F9Zhm+alk2oHK8KyZO3WWyyXI+3piYHZbZvjxY87WjngTqs2+34uzKTAPSwbqAPdqPyiz65/y2Wx8UIbxx4dd/W5PKIs7hvFkm+pRqXYp7fh+rad+iPiyMw/X2ZL3KF5CACA+b7Pxj9PNhv/VeK+efv9p7iHMhgR/42ILRHxv4jYGhH/j6jve39EPLDM8hvvkNw8/qlcWZBNe5ZZwq1l479nintbC8d/5egvBnuK3KZ6/L3J0eNTk3uL92RP9K7L8qMLDlnohxd++7xx3WfFNPvQvPFftmTlL4ywcqVxgm5ifHp85ZHnrn4Usb3aLP5kdqCfRMS2iNh+m2Ucf/zrHa22NYu/HAsvqg1XIulXEY/l7T8TDfGXkpb3J0efPjh2YKQ/pib3jpRnxYLD6n759eKrrcpfUfxtkLX/+qbnf1797Box6Y84e+78ifr92rO3Ucgfn9SSFpu2FvH3toz/5vO/tjuiL3mjnu4r9ype+5KXspeBcv3749PTZ8bmji3z9dfRPP49u+biH4+5/r8lvzyL5PfXZo/fGREPRsRDRds9HBGPRMSuW4T/0/O732m1rXX732JWvo2y+Cdatv93aZrGYJaaa//lJ3pO/Phtq/LTRc//rP3311N7ijVL+fxbagVX/AYCAADAXaBSfwY+qQzPpiuV4eH8Gf6tsb5SjYgnjp5+79RE/qz8YPRWypmuzfPmQ0eLueEyP9aQ31fMG3/RM1DPD9dOT010Onjochsa+n9a9P/Mn+291QKsRffUE33Asuj/0L30f+he+j90r2frT/vNdLoawGrra776w9WuB9ARyx//99+RegCrz/U/dK96/7/e6VoAneD7H7pSy9/GV1b0k/+7NVFdG9VomhhYG9UoE1FZdJ/KGqnq0hKvfJp3ibVSnzJRXfIfs7jNxLqmm5p+XBzeuLofTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv2bwAAAP//3Irhpw==") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000649, &(0x7f0000000600)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x19}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x400000000001}}, {@user_xattr}, {@grpjquota}, {@data_writeback}, {@noblock_validity}, {@minixdf}, {@journal_checksum}]}, 0x0, 0x60d, &(0x7f0000000800)="$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") syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 5m27.8656391s ago: executing program 5 (id=605): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x1, 0x5, 0x0, 0xc, 0x0, 0xc, 0x2, 0x4, 0x10, 0x7, 0xee, 0x7, 0x9}, 0xe) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5m24.432764873s ago: executing program 5 (id=617): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 5m23.731883707s ago: executing program 35 (id=617): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 3m19.265560893s ago: executing program 7 (id=1147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 3m18.68715662s ago: executing program 7 (id=1149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 3m17.375727273s ago: executing program 7 (id=1151): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) inotify_init1(0x800) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m17.21986805s ago: executing program 7 (id=1152): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0xc) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x4, &(0x7f00000014c0)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_open_dev$loop(0x0, 0x9, 0x200c1) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x500}) 3m16.819200749s ago: executing program 7 (id=1153): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) 3m15.111319241s ago: executing program 7 (id=1157): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 3m14.685154661s ago: executing program 36 (id=1157): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 3m13.629503101s ago: executing program 6 (id=1163): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000034c0)=ANY=[@ANYBLOB='iocharset=maciceland,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,errors=remount-ro,errors=continue,iocharset=koi8-u,dmask=00000000000000000000004,\x00', @ANYRESHEX=0x0, @ANYBLOB=',zero_size_dir,keep_last_dots,gid=', @ANYRESHEX, @ANYRES64], 0x1, 0x152a, &(0x7f0000001f80)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000028000b00000000000000018006"], 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x38, r1, 0x1, 0x0, 0x4003, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x0) 3m13.060605308s ago: executing program 6 (id=1165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m12.509536044s ago: executing program 6 (id=1167): openat$kvm(0xffffffffffffff9c, 0x0, 0x101040, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000240)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m12.356932541s ago: executing program 6 (id=1171): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) symlink(0x0, 0x0) lstat(&(0x7f0000002340)='./file0\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000019280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) fallocate(r2, 0x10, 0x10c01, 0x8000) 3m11.11617844s ago: executing program 6 (id=1174): mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000a74000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x1) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x104) 3m9.060591468s ago: executing program 6 (id=1179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='-2 -3\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='3', 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 2m54.68399763s ago: executing program 37 (id=1179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='-2 -3\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='3', 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 2m36.817018438s ago: executing program 8 (id=1318): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x11, 0x2, 0x2, &(0x7f0000000180)) open(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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") openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 2m35.947068939s ago: executing program 8 (id=1319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = fsopen(0x0, 0x1) fsmount(r6, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2020) 2m34.121627966s ago: executing program 8 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x4) 2m33.040989527s ago: executing program 8 (id=1327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0xa4500001}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYRES16, @ANYBLOB="000826bd7000fbdbdf2518000000fc8b8b5344e820af563c45c7793f259f8398453f1af218bf200e75e4e4d7ca75115390e78d931264ea59a30b56ce693a35c07d921df585f999cf17264121a543a943b69c611ffe050051dee30f112cbc2d92deb3c69440aea13093aa2ae8443970b0f95ec6af9488cec14c661f15d07ddae91e0675af0a50a1c3311b23d118abb84333bb9048fd79e1ae100073ac08d4444c16af49081492cc4674eaf8cf4a9fcb91c515f9391d3b334ea33c605f60e9036068219611c2b3bcdeef28fa5e4fe14969d8940a9ab7ed307e9cf4faa78299ab530833c1e68bd07e835078bf3b38a6925943d90ee5719eaa0d232c6f4b48cecd33516a50ff484c6ecb9e5540a7c99655bda87b9ca3"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004040) write$cgroup_pressure(r3, &(0x7f0000000440)={'full', 0x20, 0x2, 0x20, 0x100}, 0x2f) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) 2m32.898565934s ago: executing program 8 (id=1329): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) ioctl$KVM_RUN(r0, 0xae80, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000240), 0x0}, 0x20) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000003000000000000100c0000000030303000305f5100e669c4"], 0x0, 0x2d, 0x0, 0x1, 0x9d5d}, 0x28) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 2m31.71367739s ago: executing program 8 (id=1341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tcp 20000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) 2m17.354663221s ago: executing program 38 (id=1341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tcp 20000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) 1m48.339802208s ago: executing program 4 (id=1442): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000007fc0)={0x2020}, 0x2020) 1m48.036151503s ago: executing program 4 (id=1445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x9c, 0x11, 0x0, @local, @local, {[], {0x4e23, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "9167922218d8d8cc829b5011f3aae7f76594125f3ca136e54c15ce81323407e7", "93f4e66f7c22b74c282620aa6762ac19bc005a86fc63c76eeb3c2f169ed59955bd1122095b61de86ebca601638f17770", "29191f62beac52934d0d5911e518ac3dc4f2410f881e19619f469606", {"ad0bd09706ed564b3a07165f761b51d1", "a61ea8fe60d866390eacc4e3188504a5"}}}}}}}}, 0x0) 1m47.816435113s ago: executing program 4 (id=1446): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x8001, 0x2, 0x230, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa", 0x32315258}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000100), 0x5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0x7, @loopback, 0x2000009}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, 0xffffffffffffffff, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) 1m46.82461796s ago: executing program 4 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x8, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m44.750992759s ago: executing program 4 (id=1451): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0x53fc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1m43.044982419s ago: executing program 4 (id=1461): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0xbfffffff, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$FE_GET_FRONTEND(0xffffffffffffffff, 0x80246f4d, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) 1m28.29169251s ago: executing program 39 (id=1461): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0xbfffffff, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$FE_GET_FRONTEND(0xffffffffffffffff, 0x80246f4d, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) 12.352737964s ago: executing program 0 (id=1694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) read$ptp(r4, 0x0, 0x0) 11.041416536s ago: executing program 0 (id=1697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, 0x0, &(0x7f00000004c0)="d02f4f5657346f7b142a58de1de2edee659f196c7d8e83d0d075e9be3de7a54602ae7fdb58faf9f035d7fffbd7f398d9a1260a39272d00718968264986de07af1ad7de6cea533e054c6e031d077882e205a994dd8260aaa9c676c2acfa4bf9485690e47268b071346ff91042aaa66586abd051a811f16b90751513654efd11cc6eaa565d037b3a317af2be0bb71c4471e605f7ad1a4f09ea3f055678ae26dc936fb675ceb0aeaf33db768919997d93e3d7117b943f5bcf9e6b8bd4152c39124544fcacc6b0d4ac1cfecdd58ae8d9699530058193940511151a4f6276f0862177b9b1dba420ef8863bfca7e7e579f2f37bf3aae59f465c41ad6d384d74b4872bc37", 0x80, r3, 0x0, 0x7}, 0x38) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x0, 0x1, 0xd, 0x5, 0xf5, 0x8, 0x0, 0xdc, 0x5, 0xff, 0x7fffffff, 0x9, 0xd, 0x8, 0xaed, [0x80, 0x7]}}) 11.039091026s ago: executing program 2 (id=1698): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10.129260729s ago: executing program 2 (id=1702): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x30) 8.329819625s ago: executing program 2 (id=1706): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 5.585496765s ago: executing program 2 (id=1710): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2, 0x25, 0x4, @void}, 0x28) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0xc350, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x186a0}, 0x10) bind$inet(r3, &(0x7f0000000180)={0x2, 0x1f90, @dev}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0x6) sendto$inet(r4, &(0x7f0000000200)='test', 0x4, 0x0, &(0x7f0000000180)={0x2, 0x1f90, @dev}, 0x10) recvfrom$inet(r3, &(0x7f0000000400)=""/100, 0x64, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000480)=""/100, 0x64, 0x0, 0x0, 0x0) 4.898640638s ago: executing program 1 (id=1712): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) syz_io_uring_setup(0x3f34, &(0x7f0000000080)={0x0, 0x5b81, 0x4, 0x2, 0x35}, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 4.813623922s ago: executing program 9 (id=1713): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@noquota}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x474, &(0x7f0000001100)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x7) sendmmsg(r1, 0x0, 0x0, 0x9094) r2 = syz_open_procfs(0x0, 0x0) r3 = openat(r2, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000d00)='nf d 127.0.0.1 20000', 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00'], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) personality(0x60000a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_io_uring_setup(0x4b2, &(0x7f0000000180)={0x0, 0x10c8, 0x100, 0x80004, 0x91}, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) 3.809081809s ago: executing program 0 (id=1714): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 3.720449823s ago: executing program 2 (id=1715): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x10, 0x8a, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x2, 0xa7, {0x7, 0x25, 0x1, 0xc, 0x75}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x1af, 0x2, 0x1, 0x8, {0x7, 0x25, 0x1, 0x0, 0xf, 0xc1cd}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 3.539192602s ago: executing program 9 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) setreuid(0x0, 0xee01) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) 3.109836122s ago: executing program 0 (id=1717): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x50004) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x9, 0x8d], 0x100000, 0x240046}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x5, r0, 'id1\x00'}) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.425296225s ago: executing program 9 (id=1718): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013", @ANYRES32=r1, @ANYBLOB='\x00\x00\"'], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x20040841) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRESHEX=r5, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd9d}, 0x94) rt_sigsuspend(0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x1c9ad6529064729b}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}}, 0x4000000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x8201, 0x4) 2.349538619s ago: executing program 1 (id=1719): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x5) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2200002, 0x0, 0x0, 0x0, 0x0) socketpair(0x10, 0x3, 0xb, &(0x7f0000000000)) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc0040, 0x2c) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2.253952263s ago: executing program 0 (id=1720): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.175919366s ago: executing program 1 (id=1721): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x40}, 0x20008024) socket$inet(0x2, 0x3, 0x8d) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000440)={0x0, 0x6, 0x9, 0x8000, 0xc7b7, 0x4, 0x4, 0x8, 0x7ff, 0x100, 0x3}) syz_emit_ethernet(0x16, &(0x7f0000000500)={@random="e6aa3d26a07a", @random="ed17b3662259", @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0x80, 0x7e, '#X'}}}}}}, &(0x7f00000005c0)={0x0, 0x1, [0x848, 0x1d1, 0x4f, 0x637]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) 1.90355589s ago: executing program 1 (id=1722): openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.571108075s ago: executing program 1 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.497361209s ago: executing program 9 (id=1724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) unshare(0x28000600) syz_clone3(0x0, 0x0) 1.113071347s ago: executing program 2 (id=1725): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) close_range(r1, r2, 0x0) 517.114865ms ago: executing program 0 (id=1726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x8112) 454.520479ms ago: executing program 1 (id=1727): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getrusage(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="61157c000000000061134c0000000000bfa000000000000007000000ee0000052d03010000000000840500000000000069163e0000000000bf07000000000000350507000fff0720670600003f000000140300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 393.550982ms ago: executing program 9 (id=1728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000000080)) pread64(r2, &(0x7f00000022c0)=""/208, 0xd0, 0x1) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000200)={0x13, 0x10, 0x10f, {0x0, r6, 0x3}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x80, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 0s ago: executing program 9 (id=1729): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) syz_usb_disconnect(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05c04, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) kernel console output (not intermixed with test programs): netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.455513][ T7347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.508311][ T7347] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.556609][ T7347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.598475][ T7347] usb 7-1: config 0 descriptor?? [ 256.129234][ T7347] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 256.178129][ T7347] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0001/input/input6 [ 256.543861][ T7347] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 256.687810][ T7347] usb 7-1: USB disconnect, device number 6 [ 256.905473][ T8610] fido_id[8610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 257.247471][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.260109][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.270692][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.279032][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.288546][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.296088][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.358794][ T8615] lo speed is unknown, defaulting to 1000 [ 259.237269][ T8615] chnl_net:caif_netlink_parms(): no params data found [ 259.397489][ T5784] Bluetooth: hci2: command tx timeout [ 259.555608][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.587051][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.610341][ T8615] bridge_slave_0: entered allmulticast mode [ 259.635503][ T8615] bridge_slave_0: entered promiscuous mode [ 259.666705][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.695229][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.722898][ T8615] bridge_slave_1: entered allmulticast mode [ 259.755911][ T8615] bridge_slave_1: entered promiscuous mode [ 259.917258][ T8664] binder: 8663:8664 ioctl c0306201 200000000500 returned -14 [ 260.143198][ T8615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.171295][ T8615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.443814][ T2979] hsr_slave_0: left promiscuous mode [ 260.474414][ T2979] hsr_slave_1: left promiscuous mode [ 260.483728][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.510791][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.532463][ T2979] bridge_slave_1: left allmulticast mode [ 260.547490][ T2979] bridge_slave_1: left promiscuous mode [ 260.558081][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.615470][ T2979] bridge_slave_0: left allmulticast mode [ 260.633086][ T2979] bridge_slave_0: left promiscuous mode [ 260.652700][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.727187][ T8678] xt_TCPMSS: Only works on TCP SYN packets [ 261.477589][ T5784] Bluetooth: hci2: command tx timeout [ 262.309310][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 262.498355][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 262.599870][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.853474][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.094350][ T8714] loop4: detected capacity change from 0 to 1024 [ 263.111402][ T8714] EXT4-fs: Ignoring removed oldalloc option [ 263.144156][ T8714] EXT4-fs: Ignoring removed oldalloc option [ 263.195609][ T8714] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.248244][ T8714] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 263.294918][ T8714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.557395][ T5784] Bluetooth: hci2: command tx timeout [ 263.922485][ T2979] bond0 (unregistering): Released all slaves [ 264.197723][ T8615] team0: Port device team_slave_0 added [ 264.230801][ T8615] team0: Port device team_slave_1 added [ 264.296941][ T8713] lo speed is unknown, defaulting to 1000 [ 264.326462][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.342894][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.385044][ T8615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.402437][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.409602][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.436533][ T8615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.621562][ T8615] hsr_slave_0: entered promiscuous mode [ 264.640145][ T8615] hsr_slave_1: entered promiscuous mode [ 264.647764][ T8615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.655507][ T8615] Cannot create hsr debugfs directory [ 265.564049][ T8615] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 265.595766][ T8615] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 265.626063][ T8615] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 265.653354][ T5784] Bluetooth: hci2: command tx timeout [ 265.682304][ T8615] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 266.057046][ T8756] xt_CT: No such helper "netbios-ns" [ 266.062647][ T8615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.096398][ T8615] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.125738][ T6272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.135250][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.135424][ T7805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.180879][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.188239][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.402550][ T8615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.072941][ T8615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.073107][ T8615] veth0_vlan: entered promiscuous mode [ 268.165630][ T8615] veth1_vlan: entered promiscuous mode [ 268.397967][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 268.413919][ T8615] veth0_macvtap: entered promiscuous mode [ 268.486518][ T8615] veth1_macvtap: entered promiscuous mode [ 268.662866][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.739068][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.785998][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.844569][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.911093][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.987425][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.060396][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.169433][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.231703][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.292583][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.343302][ T8830] fuse: Bad value for 'fd' [ 269.375263][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.439056][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.552039][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.723810][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.759194][ T8615] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.786407][ T8615] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.831829][ T8615] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.857286][ T8615] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.207573][ T7805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.247003][ T7805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.340090][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.359463][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.912572][ T8878] loop7: detected capacity change from 0 to 1024 [ 272.967645][ T8883] ÿÿÿ: renamed from bond_slave_0 [ 273.244147][ T7656] IPVS: starting estimator thread 0... [ 273.345753][ T8888] IPVS: using max 16 ests per chain, 38400 per kthread [ 273.695539][ T8893] loop7: detected capacity change from 0 to 1024 [ 273.713078][ T8893] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 273.747604][ T8893] JBD2: no valid journal superblock found [ 273.792537][ T8893] EXT4-fs (loop7): Could not load journal inode [ 274.228885][ T8901] loop6: detected capacity change from 0 to 256 [ 274.618106][ T8912] syzkaller0: entered promiscuous mode [ 274.623860][ T8912] syzkaller0: entered allmulticast mode [ 274.734635][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 274.988079][ T8919] create_pit_timer: 2 callbacks suppressed [ 274.988096][ T8919] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 275.092682][ T8917] team0: Port device team_slave_0 removed [ 275.152912][ T8927] bridge_slave_0: left allmulticast mode [ 275.159020][ T8927] bridge_slave_0: left promiscuous mode [ 275.193211][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.229662][ T8927] bridge_slave_1: left allmulticast mode [ 275.247277][ T8927] bridge_slave_1: left promiscuous mode [ 275.266524][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.316464][ T8927] bond1: (slave veth0_to_bond): Releasing active interface [ 275.365255][ T8927] bond0: (slave bond_slave_0): Releasing backup interface [ 275.400196][ T8927] bond0: (slave bond_slave_1): Releasing backup interface [ 275.444320][ T8927] team0: Port device team_slave_0 removed [ 275.474677][ T8927] team0: Port device team_slave_1 removed [ 275.488479][ T8927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.519307][ T8927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.538841][ T8927] bond1: (slave veth3): Releasing active interface [ 275.618805][ T8927] bond2: (slave bond3): Releasing backup interface [ 275.640923][ T8927] bond2: (slave bond3): the permanent HWaddr of slave - 02:69:e7:a3:89:a6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 275.708686][ T8927] bond2: (slave gretap1): Releasing backup interface [ 275.876307][ T8929] team0: Mode changed to "loadbalance" [ 276.218628][ T27] kauditd_printk_skb: 88 callbacks suppressed [ 276.218644][ T27] audit: type=1800 audit(1789411601.534:446): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.701" name="syzkaller0" dev="sda1" ino=2054 res=0 errno=0 [ 277.364761][ T8996] bond0: (slave bond_slave_0): Releasing backup interface [ 277.446966][ T8996] bond0: (slave bond_slave_1): Releasing backup interface [ 277.604860][ T8996] team0: Port device team_slave_1 removed [ 277.646119][ T8996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.683042][ T8996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.699434][ T8996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.719757][ T8996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.814559][ T8996] bond1: (slave veth3): Releasing active interface [ 277.867193][ T8996] bond2: (slave veth5): Releasing active interface [ 277.947974][ T8997] team0: Mode changed to "loadbalance" [ 278.607933][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.717'. [ 278.641398][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.717'. [ 280.279852][ T9050] loop7: detected capacity change from 0 to 512 [ 280.381287][ T8399] udevd[8399]: symlink '../../loop7' '/dev/disk/by-diskseq/195.tmp-b7:7' failed: Read-only file system [ 280.428404][ T8399] udevd[8399]: symlink '../../loop7' '/dev/disk/by-label/syzka\x05ler.tmp-b7:7' failed: Read-only file system [ 280.494965][ T9051] udevd[9051]: symlink '../../loop7' '/dev/disk/by-diskseq/195.tmp-b7:7' failed: Read-only file system [ 280.562128][ T9051] udevd[9051]: symlink '../../loop7' '/dev/disk/by-diskseq/195.tmp-b7:7' failed: Read-only file system [ 280.601570][ T9055] Cannot find set identified by id 0 to match [ 280.608726][ T28] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 280.815464][ T28] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.854413][ T28] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 280.886505][ T28] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 280.907699][ T28] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.919532][ T28] usb 8-1: Product: syz [ 280.930207][ T28] usb 8-1: Manufacturer: syz [ 280.945641][ T28] usb 8-1: SerialNumber: syz [ 280.980069][ T28] usb-storage 8-1:1.0: USB Mass Storage device detected [ 281.020139][ T28] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 281.047684][ T28] scsi host1: usb-storage 8-1:1.0 [ 281.389512][ T7656] usb 8-1: USB disconnect, device number 2 [ 281.604858][ T9075] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 281.727598][ T9072] loop6: detected capacity change from 0 to 512 [ 281.740450][ T9079] netlink: 'syz.1.730': attribute type 10 has an invalid length. [ 281.761471][ T9072] EXT4-fs: user quota file already specified [ 281.802534][ T9079] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 281.830201][ T9051] udevd[9051]: symlink '../../loop6' '/dev/disk/by-diskseq/197.tmp-b7:6' failed: Read-only file system [ 281.865031][ T9079] team0: Failed to send options change via netlink (err -105) [ 281.885655][ T9079] team0: Port device netdevsim0 added [ 281.926240][ T9051] udevd[9051]: symlink '../../loop6' '/dev/disk/by-diskseq/197.tmp-b7:6' failed: Read-only file system [ 281.957105][ T9051] udevd[9051]: symlink '../../loop6' '/dev/disk/by-diskseq/197.tmp-b7:6' failed: Read-only file system [ 282.099706][ T9051] udevd[9051]: symlink '../../loop6' '/dev/disk/by-diskseq/198.tmp-b7:6' failed: Read-only file system [ 282.165016][ T8399] udevd[8399]: symlink '../../loop7' '/dev/disk/by-diskseq/196.tmp-b7:7' failed: Read-only file system [ 282.221730][ T9093] netlink: 'syz.7.734': attribute type 12 has an invalid length. [ 282.363824][ T9051] udevd[9051]: symlink '../../loop6' '/dev/disk/by-diskseq/198.tmp-b7:6' failed: Read-only file system [ 283.030731][ T9114] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 283.085471][ T9114] loop7: detected capacity change from 0 to 512 [ 283.094033][ T9114] EXT4-fs: user quota file already specified [ 283.615231][ T9132] vlan1: entered allmulticast mode [ 283.630826][ T9132] veth0_vlan: entered allmulticast mode [ 283.862042][ T9140] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 284.341117][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.753'. [ 284.440634][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.6.753'. [ 284.622318][ T9153] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 284.718633][ T9153] bond4: (slave vti0): Error -95 calling set_mac_address [ 284.787272][ T9149] vlan2: entered allmulticast mode [ 284.800707][ T9149] bond4: entered allmulticast mode [ 285.078518][ T9149] bond4: (slave vlan2): Opening slave failed [ 285.856401][ T9051] udevd[9051]: symlink '../../loop7' '/dev/disk/by-diskseq/200.tmp-b7:7' failed: Read-only file system [ 285.895693][ T8399] udevd[8399]: symlink '../../loop6' '/dev/disk/by-diskseq/198.tmp-b7:6' failed: Read-only file system [ 286.008147][ T9051] udevd[9051]: symlink '../../loop7' '/dev/disk/by-diskseq/200.tmp-b7:7' failed: Read-only file system [ 286.069579][ T8399] udevd[8399]: symlink '../../loop6' '/dev/disk/by-diskseq/198.tmp-b7:6' failed: Read-only file system [ 286.171025][ T27] audit: type=1800 audit(1797800475.983:447): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.764" name=09 dev="sda1" ino=2055 res=0 errno=0 [ 286.607399][ T9189] lo speed is unknown, defaulting to 1000 [ 286.638079][ T9194] loop7: detected capacity change from 0 to 512 [ 286.686906][ T9194] EXT4-fs (loop7): Test dummy encryption mode enabled [ 286.724944][ T9194] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.767: inode has both inline data and extents flags [ 286.746340][ T9194] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.767: couldn't read orphan inode 15 (err -117) [ 286.769538][ T9194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.872701][ T9191] lo speed is unknown, defaulting to 1000 [ 286.990736][ T9194] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 287.419278][ T9194] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 287.502754][ T7347] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 287.530283][ T8615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.696824][ T7347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.709458][ T7347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.722190][ T7347] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.735847][ T7347] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.745585][ T7347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.760871][ T7347] usb 5-1: config 0 descriptor?? [ 288.076519][ T9228] loop6: detected capacity change from 0 to 16 [ 288.110856][ T9228] erofs: (device loop6): mounted with root inode @ nid 36. [ 288.168149][ T7347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 288.189665][ T7347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 288.197471][ T7347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 288.220749][ T7347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 288.251019][ T7347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 288.278980][ T7347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 288.322336][ T7347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 288.344594][ T7347] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 288.423012][ T9223] syz.7.771 (9223) used greatest stack depth: 19728 bytes left [ 288.433927][ T7347] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 288.511206][ T7347] usb 5-1: USB disconnect, device number 2 [ 288.671837][ T9233] fido_id[9233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 290.046176][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 291.254032][ T9289] FAULT_INJECTION: forcing a failure. [ 291.254032][ T9289] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 291.293669][ T9289] CPU: 1 PID: 9289 Comm: syz.7.785 Not tainted syzkaller #0 [ 291.301086][ T9289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.311208][ T9289] Call Trace: [ 291.314543][ T9289] [ 291.317517][ T9289] dump_stack_lvl+0x18c/0x250 [ 291.322271][ T9289] ? show_regs_print_info+0x20/0x20 [ 291.327530][ T9289] ? load_image+0x420/0x420 [ 291.332096][ T9289] ? __might_fault+0xaa/0x120 [ 291.336827][ T9289] ? __lock_acquire+0x7d80/0x7d80 [ 291.341912][ T9289] should_fail_ex+0x394/0x4c0 [ 291.346654][ T9289] _copy_to_user+0x2f/0xa0 [ 291.351129][ T9289] copy_siginfo_to_user+0x24/0xa0 [ 291.356201][ T9289] x64_setup_rt_frame+0x749/0xc30 [ 291.361310][ T9289] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 291.366922][ T9289] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 291.372793][ T9289] arch_do_signal_or_restart+0x411/0x7b0 [ 291.378500][ T9289] ? get_sigframe_size+0x20/0x20 [ 291.383603][ T9289] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 291.389641][ T9289] ? exit_to_user_mode_loop+0x3b/0x110 [ 291.395159][ T9289] exit_to_user_mode_loop+0x70/0x110 [ 291.400513][ T9289] exit_to_user_mode_prepare+0xee/0x180 [ 291.406119][ T9289] syscall_exit_to_user_mode+0x1a/0x50 [ 291.411627][ T9289] do_syscall_64+0x61/0xb0 [ 291.416102][ T9289] ? clear_bhb_loop+0x40/0x90 [ 291.420834][ T9289] ? clear_bhb_loop+0x40/0x90 [ 291.425572][ T9289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.431521][ T9289] RIP: 0033:0x7f9dcdd9e159 [ 291.435981][ T9289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.455642][ T9289] RSP: 002b:00007f9dcebad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 291.464118][ T9289] RAX: 0000000000000000 RBX: 00007f9dce025fa0 RCX: 00007f9dcdd9e159 [ 291.472245][ T9289] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 291.480273][ T9289] RBP: 00007f9dcde3503b R08: 0000000000000000 R09: 0000000000000000 [ 291.488299][ T9289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.496337][ T9289] R13: 00007f9dce026038 R14: 00007f9dce025fa0 R15: 00007ffcbede5da8 [ 291.504383][ T9289] [ 291.699038][ T9293] netlink: 20 bytes leftover after parsing attributes in process `syz.6.786'. [ 291.814560][ T9293] ip6gre1: entered promiscuous mode [ 291.889678][ T9293] ip6gre1: entered allmulticast mode [ 291.908070][ T9299] tipc: Failed to remove unknown binding: 66,0,0/0:3419854363/3419854365 [ 291.939186][ T9299] tipc: Failed to remove unknown binding: 66,0,0/0:3419854363/3419854364 [ 291.956767][ T9299] tipc: Failed to remove unknown binding: 66,0,0/0:3419854363/3419854365 [ 291.983854][ T9299] tipc: Failed to remove unknown binding: 66,0,0/0:3419854363/3419854364 [ 292.160390][ T9298] netlink: 'syz.6.786': attribute type 6 has an invalid length. [ 292.228998][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.786'. [ 292.300961][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.788'. [ 292.422381][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.788'. [ 292.542945][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'. [ 293.803930][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 293.837743][ T9348] bond1: option mode: unable to set because the bond device is up [ 293.939248][ T9348] bond1: (slave ip6erspan0): making interface the new active one [ 293.974699][ T9348] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 294.945034][ T9381] team0: Failed to send options change via netlink (err -105) [ 294.955008][ T9388] futex_wake_op: syz.6.805 tries to shift op by 144; fix this program [ 294.978603][ T9381] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 295.016816][ T9381] team0: Port device netdevsim0 removed [ 295.055890][ T9381] bond1: (slave ip6erspan0): Releasing active interface [ 295.114634][ T9385] team0: Failed to send options change via netlink (err -105) [ 295.129756][ T9389] kvm_intel: kvm [9386]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x80000001 [ 295.218317][ T9385] team0: Failed to send options change via netlink (err -105) [ 295.272263][ T9385] team0: Mode changed to "activebackup" [ 295.594491][ T9404] loop7: detected capacity change from 0 to 256 [ 295.622834][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 296.133707][ T9405] hsr_slave_1 (unregistering): left promiscuous mode [ 296.181359][ T27] audit: type=1804 audit(1797800486.481:448): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.812" name="bus" dev="ramfs" ino=24302 res=1 errno=0 [ 296.232912][ T27] audit: type=1804 audit(1797800486.523:449): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.812" name="bus" dev="ramfs" ino=24302 res=1 errno=0 [ 296.565428][ T9399] loop4: detected capacity change from 0 to 32768 [ 296.685686][ T9399] JBD2: Ignoring recovery information on journal [ 296.798817][ T9399] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 297.032133][ T27] audit: type=1800 audit(1797800487.384:450): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.809" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 297.203107][ T27] audit: type=1804 audit(1797800487.552:451): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.809" name="/newroot/163/file1/bus" dev="loop4" ino=17059 res=1 errno=0 [ 297.891165][ T6272] ocfs2: Unmounting device (7,4) on (node local) [ 298.487128][ T9466] netlink: 'syz.4.820': attribute type 39 has an invalid length. [ 299.329240][ T9484] netlink: 14 bytes leftover after parsing attributes in process `syz.1.826'. [ 300.552303][ T9517] syzkaller0: entered promiscuous mode [ 300.575485][ T9517] syzkaller0: entered allmulticast mode [ 301.411821][ T9533] loop4: detected capacity change from 0 to 8192 [ 301.471411][ T9533] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.011429][ T7656] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 302.216177][ T7656] usb 7-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 302.247267][ T7656] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.282172][ T7656] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 302.311160][ T9553] io-wq is not configured for unbound workers [ 302.324714][ T7656] usb 7-1: config 0 interface 0 has no altsetting 0 [ 302.367434][ T7656] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 302.397127][ T7656] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.436483][ T7656] usb 7-1: config 0 descriptor?? [ 302.845043][ T7656] steelseries 0003:1038:1410.0003: item fetching failed at offset 5/16 [ 302.878957][ T7656] steelseries 0003:1038:1410.0003: parse failed [ 302.905931][ T7656] steelseries: probe of 0003:1038:1410.0003 failed with error -22 [ 303.069565][ T7656] usb 7-1: USB disconnect, device number 7 [ 303.331058][ T9572] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 304.419090][ T9597] kvm_intel: kvm [9596]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x80000001 [ 304.492565][ T9606] loop6: detected capacity change from 0 to 128 [ 304.566894][ T9051] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.639749][ T9606] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 305.493398][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.872'. [ 305.535978][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.543658][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.267731][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.874'. [ 312.404128][ T9634] hsr_slave_1 (unregistering): left promiscuous mode [ 312.455797][ T27] audit: type=1326 audit(1797800503.571:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.7.876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dcdd9e159 code=0x7fc00000 [ 312.532070][ T27] audit: type=1326 audit(1797800503.571:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.7.876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9dcdd9e159 code=0x7fc00000 [ 312.643503][ T27] audit: type=1326 audit(1797800503.571:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.7.876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dcdd9e159 code=0x7fc00000 [ 312.680341][ T27] audit: type=1326 audit(1797800503.571:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.7.876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dcdd9e159 code=0x7fc00000 [ 313.620169][ T9657] FAULT_INJECTION: forcing a failure. [ 313.620169][ T9657] name failslab, interval 1, probability 0, space 0, times 1 [ 313.678491][ T9657] CPU: 0 PID: 9657 Comm: syz.6.879 Not tainted syzkaller #0 [ 313.685914][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.696024][ T9657] Call Trace: [ 313.699334][ T9657] [ 313.702293][ T9657] dump_stack_lvl+0x18c/0x250 [ 313.707010][ T9657] ? show_regs_print_info+0x20/0x20 [ 313.712240][ T9657] ? load_image+0x420/0x420 [ 313.716770][ T9657] ? __might_sleep+0xe0/0xe0 [ 313.721390][ T9657] ? __lock_acquire+0x7d80/0x7d80 [ 313.726444][ T9657] should_fail_ex+0x394/0x4c0 [ 313.731161][ T9657] should_failslab+0x9/0x20 [ 313.735698][ T9657] slab_pre_alloc_hook+0x59/0x300 [ 313.740759][ T9657] ? ceph_get_tree+0x1b7/0x1800 [ 313.745647][ T9657] __kmem_cache_alloc_node+0x53/0x250 [ 313.751057][ T9657] ? end_current_label_crit_section+0x170/0x170 [ 313.757327][ T9657] ? ceph_get_tree+0x1b7/0x1800 [ 313.762207][ T9657] kmalloc_trace+0x2a/0xe0 [ 313.766655][ T9657] ceph_get_tree+0x1b7/0x1800 [ 313.771360][ T9657] ? bpf_lsm_capable+0x9/0x10 [ 313.776062][ T9657] ? security_capable+0x89/0xb0 [ 313.780939][ T9657] vfs_get_tree+0x8c/0x280 [ 313.785381][ T9657] vfs_cmd_create+0xe3/0x230 [ 313.790007][ T9657] __se_sys_fsconfig+0x70a/0x850 [ 313.794977][ T9657] ? __x64_sys_fsconfig+0xc0/0xc0 [ 313.800058][ T9657] ? lockdep_hardirqs_on+0x98/0x150 [ 313.805283][ T9657] ? __x64_sys_fsconfig+0x20/0xc0 [ 313.810340][ T9657] do_syscall_64+0x55/0xb0 [ 313.814782][ T9657] ? clear_bhb_loop+0x40/0x90 [ 313.819484][ T9657] ? clear_bhb_loop+0x40/0x90 [ 313.824190][ T9657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.830131][ T9657] RIP: 0033:0x7ff34b39e159 [ 313.834573][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.854208][ T9657] RSP: 002b:00007ff34c33f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 313.862653][ T9657] RAX: ffffffffffffffda RBX: 00007ff34b625fa0 RCX: 00007ff34b39e159 [ 313.870657][ T9657] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 313.878666][ T9657] RBP: 00007ff34b43503b R08: 0000000000000000 R09: 0000000000000000 [ 313.886659][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.894827][ T9657] R13: 00007ff34b626038 R14: 00007ff34b625fa0 R15: 00007ffdce9e2758 [ 313.902846][ T9657] [ 313.991164][ T9661] loop7: detected capacity change from 0 to 512 [ 314.045201][ T9632] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 314.718227][ T9679] syzkaller0: entered promiscuous mode [ 314.734945][ T9679] syzkaller0: entered allmulticast mode [ 315.075005][ T9687] loop7: detected capacity change from 0 to 8 [ 315.097025][ T9687] unable to read xattr id index table [ 315.231011][ T9688] loop7: detected capacity change from 0 to 1024 [ 315.315658][ T9688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 315.352773][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.359613][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.386088][ T9688] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.509777][ T9688] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 315.560616][ T9695] fuse: Bad value for 'fd' [ 315.594329][ T9695] capability: warning: `syz.1.893' uses deprecated v2 capabilities in a way that may be insecure [ 316.350367][ T9703] syzkaller0: entered promiscuous mode [ 316.369779][ T9703] syzkaller0: entered allmulticast mode [ 316.454566][ T5821] IPVS: starting estimator thread 0... [ 316.575325][ T9706] IPVS: using max 17 ests per chain, 40800 per kthread [ 316.883630][ T27] audit: type=1326 audit(1797800508.222:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 316.920587][ T27] audit: type=1326 audit(1797800508.222:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 316.951834][ T27] audit: type=1326 audit(1797800508.222:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 316.985011][ T27] audit: type=1326 audit(1797800508.243:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 317.016308][ T27] audit: type=1326 audit(1797800508.338:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.060923][ T27] audit: type=1326 audit(1797800508.338:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.233421][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 317.233437][ T27] audit: type=1326 audit(1797800508.590:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.302375][ T27] audit: type=1326 audit(1797800508.590:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.334026][ T27] audit: type=1326 audit(1797800508.590:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.408007][ T27] audit: type=1326 audit(1797800508.611:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.452408][ T27] audit: type=1326 audit(1797800508.621:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.483564][ T27] audit: type=1326 audit(1797800508.621:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.526539][ T27] audit: type=1326 audit(1797800508.621:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.599261][ T27] audit: type=1326 audit(1797800508.632:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.645833][ T27] audit: type=1326 audit(1797800508.632:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.687985][ T27] audit: type=1326 audit(1797800508.632:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.1.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4be55e98e code=0x7ffc0000 [ 317.811483][ T9727] netlink: 'syz.1.905': attribute type 4 has an invalid length. [ 317.875405][ T9732] netlink: 'syz.1.905': attribute type 4 has an invalid length. [ 317.883609][ T7656] lo speed is unknown, defaulting to 1000 [ 317.920890][ T7621] lo speed is unknown, defaulting to 1000 [ 318.681095][ T9743] netlink: 276 bytes leftover after parsing attributes in process `syz.1.908'. [ 319.832880][ T9771] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 319.944375][ T9771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.062510][ T9777] bond3: (slave geneve2): making interface the new active one [ 320.106109][ T9777] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 320.590252][ T9775] syzkaller0: entered promiscuous mode [ 320.751670][ T9775] syzkaller0: entered allmulticast mode [ 323.213669][ T9827] binder: 9826:9827 ioctl c0306201 200000000180 returned -14 [ 324.468647][ T9819] syz_tun: entered allmulticast mode [ 324.486437][ T9830] netlink: 'syz.7.928': attribute type 1 has an invalid length. [ 324.500601][ T9830] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 324.710626][ T5086] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 324.769681][ T9841] netlink: 'syz.7.930': attribute type 1 has an invalid length. [ 324.864770][ T9841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.976882][ T9841] bond1: (slave geneve2): making interface the new active one [ 324.998435][ T9841] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 326.083552][ T9858] x86/PAT: syz.1.937:9858 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 326.210544][ T9863] syzkaller0: entered promiscuous mode [ 326.236247][ T9863] syzkaller0: entered allmulticast mode [ 327.029408][ T9879] netlink: 'syz.6.944': attribute type 3 has an invalid length. [ 327.038812][ T9879] netlink: 'syz.6.944': attribute type 3 has an invalid length. [ 328.620025][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 328.620069][ T27] audit: type=1800 audit(1797800520.547:533): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.949" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 331.181700][ T27] audit: type=1326 audit(1797800523.234:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.1.952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 331.231106][ T27] audit: type=1326 audit(1797800523.234:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.1.952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 331.315455][ T27] audit: type=1326 audit(1797800523.234:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.1.952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 331.451184][ T27] audit: type=1326 audit(1797800523.234:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.1.952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 331.507190][ T27] audit: type=1326 audit(1797800523.234:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.1.952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 331.546243][ T27] audit: type=1326 audit(1797800523.234:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.1.952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 331.583841][ T9908] mmap: syz.7.955 (9908) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 331.623993][ T27] audit: type=1326 audit(1797800523.234:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.1.952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 331.678302][ T27] audit: type=1326 audit(1797800523.245:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.1.952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 331.776491][ T27] audit: type=1326 audit(1797800523.245:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.1.952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 331.829853][ T9913] fuse: Bad value for 'fd' [ 331.968757][ T5821] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 332.182211][ T5821] usb 8-1: config 0 has no interfaces? [ 332.193460][ T5821] usb 8-1: New USB device found, idVendor=1e6d, idProduct=2d51, bcdDevice= 0.00 [ 332.221541][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.250172][ T5821] usb 8-1: config 0 descriptor?? [ 332.528503][ T5821] usb 8-1: USB disconnect, device number 3 [ 333.266889][ T9927] loop7: detected capacity change from 0 to 1024 [ 333.288495][ T9927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.318438][ T9927] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 333.502750][ T9932] netlink: 68 bytes leftover after parsing attributes in process `syz.4.945'. [ 334.375128][ T9943] netlink: 'syz.6.963': attribute type 4 has an invalid length. [ 334.432238][ T9943] netlink: 'syz.6.963': attribute type 4 has an invalid length. [ 335.357794][ T9956] netlink: 'syz.1.968': attribute type 1 has an invalid length. [ 335.727928][ T9960] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 337.003430][ T9973] loop7: detected capacity change from 0 to 1024 [ 337.109960][ T9973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.117311][ T9973] IPv6: NLM_F_CREATE should be set when creating new route [ 339.639000][ T9973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.765715][ T9973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.224882][ T9973] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.244776][ T9973] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.263453][ T9973] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.291078][ T9973] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.541243][ T9956] macvlan2: entered promiscuous mode [ 340.556747][ T9956] macvlan2: entered allmulticast mode [ 340.568615][ T9956] bond4: entered promiscuous mode [ 340.584778][ T9956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 340.626743][ T9956] bond4: left promiscuous mode [ 340.757813][ T9986] vlan2: entered promiscuous mode [ 340.772004][ T9986] bridge0: entered promiscuous mode [ 342.246244][T10020] xt_HMARK: spi-set and port-set can't be combined [ 342.288937][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 342.288952][ T27] audit: type=1326 audit(1797800534.898:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.6.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff34b39e159 code=0x0 [ 343.327901][T10031] vlan3: entered promiscuous mode [ 343.338104][T10031] bridge0: entered promiscuous mode [ 343.576841][ T27] audit: type=1326 audit(1797800536.241:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.6.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34b39e159 code=0x7ffc0000 [ 343.633620][ T27] audit: type=1326 audit(1797800536.241:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.6.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34b39e159 code=0x7ffc0000 [ 343.667488][ T27] audit: type=1326 audit(1797800536.241:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.6.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff34b39e159 code=0x7ffc0000 [ 343.701062][ T27] audit: type=1326 audit(1797800536.241:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.6.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34b39e159 code=0x7ffc0000 [ 343.737302][ T27] audit: type=1326 audit(1797800536.241:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.6.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34b39e159 code=0x7ffc0000 [ 344.581933][ T27] audit: type=1326 audit(1797800537.302:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.6.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff34b39e159 code=0x7ffc0000 [ 344.676439][ T27] audit: type=1326 audit(1797800537.302:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.6.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34b39e159 code=0x7ffc0000 [ 344.759249][ T27] audit: type=1326 audit(1797800537.302:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.6.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34b39e159 code=0x7ffc0000 [ 344.884757][ T27] audit: type=1326 audit(1797800537.312:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.6.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff34b39e159 code=0x7ffc0000 [ 345.148917][T10048] loop6: detected capacity change from 0 to 512 [ 345.157586][T10051] 9pnet_fd: p9_fd_create_unix (10051): problem connecting socket: éq‰Y’3aK: -111 [ 345.189576][T10048] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.270039][T10048] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1000: Failed to acquire dquot type 1 [ 345.328455][T10048] EXT4-fs (loop6): 1 truncate cleaned up [ 345.354653][T10048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 345.430698][T10048] EXT4-fs (loop6): shut down requested (0) [ 345.552844][T10060] EXT4-fs error (device loop6): ext4_lookup:1864: inode #2: comm syz.6.1000: deleted inode referenced: 12 [ 345.753807][ T6740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 345.870067][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1013'. [ 346.433940][T10082] vlan2: entered promiscuous mode [ 346.456010][T10082] bridge0: entered promiscuous mode [ 348.696737][T10130] loop6: detected capacity change from 0 to 512 [ 348.751409][T10130] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.828211][T10130] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1021: corrupted in-inode xattr: e_value size too large [ 349.053214][T10130] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1021: couldn't read orphan inode 15 (err -117) [ 349.163917][T10130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.328207][T10146] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.372295][T10146] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.401343][T10146] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.425454][T10146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.480141][T10146] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 349.693111][ T6740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.704584][T10149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.742058][T10149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.761877][T10149] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 349.791575][T10149] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.808677][T10149] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.847740][T10149] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.864086][T10149] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.892894][T10149] bond0 (unregistering): Released all slaves [ 350.115757][T10162] fuse: Bad value for 'fd' [ 354.830435][ T7565] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 355.038236][ T7565] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 355.049176][ T7565] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.088703][ T7565] usb 7-1: config 0 descriptor?? [ 355.127725][ T7565] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 356.336516][T10266] loop7: detected capacity change from 0 to 1024 [ 356.552237][T10266] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 356.566889][T10266] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.593002][T10266] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 3: comm syz.7.1043: lblock 3 mapped to illegal pblock 3 (length 3) [ 356.649977][ T7565] gspca_stv06xx: I2C: Read error writing address: -71 [ 356.659200][ T7565] usb 7-1: USB disconnect, device number 8 [ 356.671439][T10266] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 356.783982][T10266] EXT4-fs (loop7): This should not happen!! Data will be lost [ 356.783982][T10266] [ 356.887104][T10281] EXT4-fs error (device loop7): ext4_free_blocks:6694: comm syz.7.1043: Freeing blocks not in datazone - block = 3, count = 1 [ 357.193290][ T7805] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 357.300544][ T7805] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 357.355532][ T7805] EXT4-fs (loop7): This should not happen!! Data will be lost [ 357.355532][ T7805] [ 357.414688][ T8615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 364.051058][T10408] futex_wake_op: syz.1.1072 tries to shift op by 144; fix this program [ 364.132455][T10401] loop7: detected capacity change from 0 to 32768 [ 364.328655][T10414] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1074'. [ 364.375223][T10414] ip6gre1: entered promiscuous mode [ 364.394953][T10414] ip6gre1: entered allmulticast mode [ 364.402738][ T27] kauditd_printk_skb: 109 callbacks suppressed [ 364.402752][ T27] audit: type=1800 audit(1797800558.098:713): pid=10401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1069" name="file1" dev="loop7" ino=9 res=0 errno=0 [ 364.444738][T10401] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 8 [ 364.444738][T10401] [ 364.463895][T10401] ERROR: (device loop7): remounting filesystem as read-only [ 364.473028][T10401] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 8 [ 364.473028][T10401] [ 365.422893][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 368.082246][T10478] rt1719: probe of 0-0049 failed with error -5 [ 368.089557][T10478] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 368.834744][T10484] loop0: detected capacity change from 0 to 3904 [ 368.970363][T10484] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 369.000092][T10484] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 369.032696][T10484] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 369.051756][T10484] loop0: [ 370.181581][T10510] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1095'. [ 373.119419][ T5821] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 373.321839][ T5821] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.347935][ T5821] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 373.377079][ T5821] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.401487][ T5821] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 373.433139][ T5821] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 373.467007][ T5821] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.502589][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.526208][ T5821] usb 8-1: Product: syz [ 373.531826][ T5821] usb 8-1: Manufacturer: syz [ 373.556219][ T5821] cdc_wdm 8-1:1.0: skipping garbage [ 373.583013][ T5821] cdc_wdm 8-1:1.0: skipping garbage [ 373.601277][ T5821] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 373.618779][ T5821] cdc_wdm 8-1:1.0: Unknown control protocol [ 373.891841][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.898277][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.943857][T10560] warning: `syz.7.1119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 374.021750][ T5821] usb 8-1: USB disconnect, device number 4 [ 375.559492][T10593] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 375.877438][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 376.074095][T10607] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 379.336518][T10632] loop7: detected capacity change from 0 to 8 [ 379.363062][T10632] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 379.949394][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1144'. [ 379.994772][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1144'. [ 382.831303][T10669] loop7: detected capacity change from 0 to 8 [ 382.905453][T10669] SQUASHFS error: Failed to read block 0x4de: -5 [ 382.920119][T10669] SQUASHFS error: Failed to read block 0x4de: -5 [ 382.929138][ T27] audit: type=1800 audit(1797800583.556:714): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1152" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 383.042783][T10669] SQUASHFS error: Failed to read block 0x4de: -5 [ 383.057798][T10669] SQUASHFS error: Failed to read block 0x4de: -5 [ 383.084362][T10669] SQUASHFS error: Failed to read block 0x4de: -5 [ 383.101585][T10669] SQUASHFS error: Failed to read block 0x4de: -5 [ 383.156281][ T8615] SQUASHFS error: Unable to read directory block [631:72] [ 383.187323][ T8615] SQUASHFS error: Unable to read inode 0x0 [ 383.215016][ T8615] SQUASHFS error: Unable to read inode 0x0 [ 383.702427][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 384.791532][T10679] loop6: detected capacity change from 0 to 512 [ 384.916775][T10679] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.978873][T10679] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 385.775896][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.787042][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.795575][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.840824][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.853160][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 385.861604][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.094454][T10697] syzkaller0: entered promiscuous mode [ 386.131488][T10697] syzkaller0: entered allmulticast mode [ 386.160529][T10692] lo speed is unknown, defaulting to 1000 [ 386.456373][T10692] chnl_net:caif_netlink_parms(): no params data found [ 386.464548][T10702] loop6: detected capacity change from 0 to 256 [ 386.544729][T10702] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 386.646592][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1163'. [ 386.665412][T10692] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.672815][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.681288][T10692] bridge_slave_0: entered allmulticast mode [ 386.688998][T10692] bridge_slave_0: entered promiscuous mode [ 386.698612][T10692] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.706010][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.713530][T10692] bridge_slave_1: entered allmulticast mode [ 386.721274][T10692] bridge_slave_1: entered promiscuous mode [ 386.760996][T10692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.774982][T10692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.839327][T10692] team0: Port device team_slave_0 added [ 386.853721][T10692] team0: Port device team_slave_1 added [ 386.889609][T10692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.897060][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.942556][T10692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.956459][T10692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.963964][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.990710][T10692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.137492][T10692] hsr_slave_0: entered promiscuous mode [ 387.174196][T10692] hsr_slave_1: entered promiscuous mode [ 387.186264][T10692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.198224][T10692] Cannot create hsr debugfs directory [ 387.541726][T10716] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 387.735328][T10724] loop6: detected capacity change from 0 to 1024 [ 387.751968][T10724] EXT4-fs: Ignoring removed bh option [ 387.766611][T10722] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 387.801271][T10724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.817237][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'. [ 387.886582][T10724] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 387.913099][ T5086] Bluetooth: hci2: command tx timeout [ 387.962602][T10722] bond1: (slave geneve3): making interface the new active one [ 388.019762][T10722] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 388.224152][T10692] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 388.252214][T10692] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 388.286024][T10692] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 388.324090][T10692] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 388.534921][T10692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.578983][T10692] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.613708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.620946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.671056][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.678419][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.036090][T10743] futex_wake_op: syz.4.1182 tries to shift op by 144; fix this program [ 389.158236][T10692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.193334][ T6740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.884859][ T5086] Bluetooth: hci2: command tx timeout [ 390.005618][T10692] veth0_vlan: entered promiscuous mode [ 390.040804][T10761] vlan2: entered allmulticast mode [ 390.076034][T10761] veth0_to_bond: entered allmulticast mode [ 390.091180][T10692] veth1_vlan: entered promiscuous mode [ 390.169629][T10692] veth0_macvtap: entered promiscuous mode [ 390.198052][T10692] veth1_macvtap: entered promiscuous mode [ 390.235731][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.257072][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.274107][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.293651][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.314749][T10692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.354275][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.376141][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.397287][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.414847][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.436416][T10692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.476111][T10692] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.495351][T10692] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.510066][T10692] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.529805][T10692] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.788180][ T7802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.829015][ T7802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.892125][ T7795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.907002][ T7795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.622500][T10782] netlink: 'syz.8.1185': attribute type 1 has an invalid length. [ 391.649885][T10782] wireguard0: entered promiscuous mode [ 391.710570][T10786] wireguard0: entered promiscuous mode [ 391.856876][ T5086] Bluetooth: hci2: command tx timeout [ 392.450833][T10815] IPv6: sit4: Disabled Multicast RS [ 392.467114][T10815] sit4: entered allmulticast mode [ 392.690147][T10818] loop8: detected capacity change from 0 to 1024 [ 392.748344][T10818] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 392.769819][T10818] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 392.805096][T10818] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 392.819963][T10818] EXT4-fs error (device loop8): ext4_get_journal_inode:5820: inode #5: comm syz.8.1188: unexpected bad inode w/o EXT4_IGET_BAD [ 392.835542][T10818] EXT4-fs (loop8): no journal found [ 392.841367][T10818] EXT4-fs (loop8): can't get journal size [ 392.859392][T10818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.943619][T10692] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.304324][ T7661] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 393.515759][ T7661] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 393.532661][ T7661] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 393.558151][ T7661] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 393.570616][ T7661] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 393.592556][ T7661] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 393.612779][ T7661] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 393.629867][ T7661] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 393.643840][ T7661] usb 9-1: Product: syz [ 393.653715][ T7661] usb 9-1: Manufacturer: syz [ 393.677119][ T7661] cdc_wdm 9-1:1.0: skipping garbage [ 393.703414][ T7661] cdc_wdm 9-1:1.0: skipping garbage [ 393.720599][ T7661] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 393.730761][ T7661] cdc_wdm 9-1:1.0: Unknown control protocol [ 393.847583][ T5086] Bluetooth: hci2: command tx timeout [ 393.883199][T10828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.903057][T10828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.022082][T10840] lo: entered allmulticast mode [ 394.094708][T10840] mroute: pending queue full, dropping entries [ 394.117610][T10839] lo: left allmulticast mode [ 394.287867][ C1] cdc_wdm 9-1:1.0: Unexpected error -71 [ 394.295186][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.302121][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.309337][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.315982][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.322540][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.329192][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.335726][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.342377][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.348769][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.355422][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.368589][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.375253][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.383259][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.389915][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.397060][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.403718][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.410041][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.416677][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.423039][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 394.429699][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 394.436953][ T7355] usb 9-1: USB disconnect, device number 2 [ 394.437015][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 395.516713][T10879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1209'. [ 396.633174][T10890] bond4: (slave veth0_to_bond): Releasing active interface [ 396.687492][T10895] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1214'. [ 396.710124][T10890] bond3: (slave geneve2): Releasing active interface [ 396.753435][T10890] bond1: (slave geneve3): Releasing active interface [ 397.940553][T10908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.976487][T10908] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 397.987912][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 398.013624][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 398.250939][T10918] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 398.273039][T10918] ref_ctr increment failed for inode: 0x56 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881ab8fa600 [ 398.311267][T10918] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 398.321140][T10918] ref_ctr decrement failed for inode: 0x56 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881ab8fa600 [ 398.434512][T10923] raw_sendmsg: syz.1.1225 forgot to set AF_INET. Fix it! [ 400.841608][T10952] overlayfs: failed to clone upperpath [ 401.202408][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1241'. [ 401.380606][T10970] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 401.450361][T10970] bond1 (unregistering): Released all slaves [ 403.903826][T11006] loop8: detected capacity change from 0 to 2048 [ 403.943277][T11006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.937876][T11038] syzkaller0: entered promiscuous mode [ 405.954841][T11038] syzkaller0: entered allmulticast mode [ 406.278810][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.305181][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.314850][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.328843][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.339069][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 406.346837][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.658283][T11048] lo speed is unknown, defaulting to 1000 [ 408.318835][ T5784] Bluetooth: hci4: command tx timeout [ 408.559197][T11048] chnl_net:caif_netlink_parms(): no params data found [ 408.768150][T11048] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.791185][T11048] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.814738][T11048] bridge_slave_0: entered allmulticast mode [ 408.829886][T11048] bridge_slave_0: entered promiscuous mode [ 408.839827][T11048] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.847700][T11048] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.872459][T11048] bridge_slave_1: entered allmulticast mode [ 408.888224][T11048] bridge_slave_1: entered promiscuous mode [ 408.990219][T11048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.100044][T11048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.245394][T11048] team0: Port device team_slave_0 added [ 409.265067][T11048] team0: Port device team_slave_1 added [ 409.422402][T11048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.455647][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.579632][T11048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.755575][T11048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.772930][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.856896][T11048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.113092][T11048] hsr_slave_0: entered promiscuous mode [ 410.149018][T11048] hsr_slave_1: entered promiscuous mode [ 410.195289][T11048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.214218][T11048] Cannot create hsr debugfs directory [ 410.307356][ T5784] Bluetooth: hci4: command tx timeout [ 410.386649][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1278'. [ 410.403349][T11116] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1276'. [ 410.767364][T11048] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 410.808815][T11048] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 410.847895][T11048] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 410.894134][T11048] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 410.943164][T11128] syzkaller0: entered promiscuous mode [ 410.961862][T11128] syzkaller0: entered allmulticast mode [ 411.552846][T11048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.617880][T11048] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.673312][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.680711][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.751388][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.758682][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.288964][ T5784] Bluetooth: hci4: command tx timeout [ 412.669130][T11048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.720734][T11152] lo speed is unknown, defaulting to 1000 [ 413.857311][ T27] audit: type=1326 audit(1797800616.027:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11160 comm="syz.1.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4be59e159 code=0x0 [ 413.950842][T11048] veth0_vlan: entered promiscuous mode [ 413.967823][T11048] veth1_vlan: entered promiscuous mode [ 414.020527][T11048] veth0_macvtap: entered promiscuous mode [ 414.036372][T11048] veth1_macvtap: entered promiscuous mode [ 414.063060][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.074294][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.084534][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.096033][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.110220][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.121577][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.142471][T11048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.183127][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.221726][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.246711][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.263352][ T5784] Bluetooth: hci4: command tx timeout [ 414.298389][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.308572][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.319295][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.331058][T11048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.344541][T11048] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.354131][T11048] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.385141][T11048] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.415392][T11048] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.644153][T11173] netlink: 'syz.8.1291': attribute type 1 has an invalid length. [ 414.820008][T11175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.852784][T11175] bond1: (slave bond2): making interface the new active one [ 414.869435][T11175] bond1: (slave bond2): Enslaving as an active interface with an up link [ 415.002977][T11173] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 415.061443][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.099846][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.259897][ T7795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.317193][ T7795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.935092][T11228] netlink: 'syz.9.1301': attribute type 1 has an invalid length. [ 419.694779][T11244] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 421.394223][T11257] loop9: detected capacity change from 0 to 512 [ 421.497040][T11257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.534390][T11257] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.078264][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1312'. [ 422.555790][T11267] overlayfs: failed index dir cleanup (-512) [ 422.589218][T11267] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 422.696371][T11048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.756918][T11272] futex_wake_op: syz.8.1316 tries to shift op by 144; fix this program [ 423.755690][T11275] loop8: detected capacity change from 0 to 4096 [ 423.890573][T11275] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.007741][T10692] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.137761][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1328'. [ 427.351761][ T27] audit: type=1326 audit(1797800630.178:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 427.440423][ T27] audit: type=1326 audit(1797800630.178:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 427.485038][ T27] audit: type=1326 audit(1797800630.178:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 427.519917][ T27] audit: type=1326 audit(1797800630.178:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 427.581254][ T27] audit: type=1326 audit(1797800630.178:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 427.626545][ T27] audit: type=1326 audit(1797800630.178:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 427.651634][ T27] audit: type=1326 audit(1797800630.178:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 427.676983][ T27] audit: type=1326 audit(1797800630.178:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 427.722238][ T27] audit: type=1326 audit(1797800630.178:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 427.764860][ T27] audit: type=1326 audit(1797800630.178:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11307 comm="syz.9.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aa59e159 code=0x7ffc0000 [ 428.357905][T11320] futex_wake_op: syz.9.1333 tries to shift op by 144; fix this program [ 428.724529][T11329] lo speed is unknown, defaulting to 1000 [ 428.734817][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1335'. [ 428.778059][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1335'. [ 428.998127][T11334] team0: Port device team_slave_1 removed [ 429.249222][ T7795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.408048][T11341] fuse: Bad value for 'fd' [ 429.444558][ T7795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.617989][ T7795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.796258][ T7795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.906224][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 429.926392][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 429.963283][T11347] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.973033][T11347] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.982016][T11347] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.990841][T11347] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.050520][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 430.070446][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 430.160996][ T7795] netdevsim netdevsim0 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.185737][ T7795] netdevsim netdevsim0 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.283291][ T7795] netdevsim netdevsim0 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.311230][ T7795] netdevsim netdevsim0 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.370320][ T7795] netdevsim netdevsim0 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.398726][T11354] loop9: detected capacity change from 0 to 16 [ 430.412826][ T7795] netdevsim netdevsim0 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.455815][T11354] erofs: (device loop9): mounted with root inode @ nid 36. [ 430.489510][ T7795] netdevsim netdevsim0 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.534164][ T7795] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.553992][T11354] syz.9.1342: attempt to access beyond end of device [ 430.553992][T11354] loop9: rw=0, sector=8, nr_sectors = 32 limit=16 [ 430.663689][T11355] hsr_slave_0: left promiscuous mode [ 432.038459][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 432.088573][T11372] overlayfs: failed to resolve './file0': -2 [ 432.406210][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.412965][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.869631][T11404] gretap0: entered promiscuous mode [ 432.886549][T11404] macvlan2: entered promiscuous mode [ 432.897130][T11404] vlan3: entered promiscuous mode [ 432.921264][T11404] vlan3: left promiscuous mode [ 432.931434][T11404] gretap0: left promiscuous mode [ 433.075528][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1352'. [ 433.093728][T11407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.319779][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 433.319797][ T27] audit: type=1326 audit(1797800636.445:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 433.386261][ T27] audit: type=1326 audit(1797800636.445:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 433.445269][ T27] audit: type=1326 audit(1797800636.456:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 433.521293][ T27] audit: type=1326 audit(1797800636.477:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 433.590335][ T27] audit: type=1326 audit(1797800636.477:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 433.729904][ T27] audit: type=1326 audit(1797800636.477:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 433.803296][ T27] audit: type=1326 audit(1797800636.477:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 433.883042][ T27] audit: type=1326 audit(1797800636.477:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 433.954786][ T27] audit: type=1326 audit(1797800636.477:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 434.025744][ T27] audit: type=1326 audit(1797800636.487:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.1.1353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4be59e159 code=0x7ffc0000 [ 434.188479][ T7795] hsr_slave_0: left promiscuous mode [ 434.211365][ T7795] hsr_slave_1: left promiscuous mode [ 434.224244][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.236470][ T7795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.258270][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.275863][ T7795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.293788][ T7795] bridge_slave_1: left allmulticast mode [ 434.299971][ T7795] bridge_slave_1: left promiscuous mode [ 434.306873][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.329818][ T7795] bridge_slave_0: left allmulticast mode [ 434.359621][ T7795] bridge_slave_0: left promiscuous mode [ 434.374187][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.461048][ T7795] veth1_macvtap: left promiscuous mode [ 434.479328][ T7795] veth0_macvtap: left promiscuous mode [ 434.504108][ T7795] veth1_vlan: left promiscuous mode [ 434.543506][ T7795] veth0_vlan: left promiscuous mode [ 437.102184][ T7795] team0 (unregistering): Port device team_slave_1 removed [ 437.181741][ T7795] team0 (unregistering): Port device team_slave_0 removed [ 437.246068][ T7795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.306114][ T7795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.840215][ T7795] bond0 (unregistering): Released all slaves [ 438.003450][T11452] netlink: 'syz.4.1361': attribute type 10 has an invalid length. [ 439.445310][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 439.475540][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 439.520012][T11473] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.528990][T11473] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.537822][T11473] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.546670][T11473] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.626362][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 439.643790][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 440.770818][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1368'. [ 441.885109][ T7621] IPVS: starting estimator thread 0... [ 441.981157][T11516] IPVS: using max 17 ests per chain, 40800 per kthread [ 445.000512][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.013802][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.023219][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 445.033160][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.045895][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 445.053844][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.202591][T11557] lo speed is unknown, defaulting to 1000 [ 446.016648][T11557] chnl_net:caif_netlink_parms(): no params data found [ 446.455511][T11557] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.496209][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.538908][T11557] bridge_slave_0: entered allmulticast mode [ 446.571708][T11557] bridge_slave_0: entered promiscuous mode [ 446.604474][T11557] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.635975][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.665517][T11557] bridge_slave_1: entered allmulticast mode [ 446.695254][T11557] bridge_slave_1: entered promiscuous mode [ 446.888561][T11557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.929114][T11557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.961205][ T7355] IPVS: starting estimator thread 0... [ 447.033963][ T5086] Bluetooth: hci5: command tx timeout [ 447.169317][T11557] team0: Port device team_slave_0 added [ 447.176321][T11587] IPVS: using max 16 ests per chain, 38400 per kthread [ 447.247369][T11557] team0: Port device team_slave_1 added [ 447.652556][T11557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.211523][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.444659][T11557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.504273][T11557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.541518][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.647775][T11557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.982640][T11557] hsr_slave_0: entered promiscuous mode [ 449.015957][T11557] hsr_slave_1: entered promiscuous mode [ 449.022529][ T5086] Bluetooth: hci5: command tx timeout [ 449.070450][T11557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.117796][T11557] Cannot create hsr debugfs directory [ 449.257520][T11601] jffs2: notice: (11601) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 450.233529][T11557] netdevsim netdevsim0 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.293922][T11557] netdevsim netdevsim0 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.772189][ T5086] Bluetooth: hci5: command tx timeout [ 452.120774][T11557] netdevsim netdevsim0 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.178028][T11557] netdevsim netdevsim0 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.546559][T11557] netdevsim netdevsim0 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.598533][T11557] netdevsim netdevsim0 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.043994][T11557] netdevsim netdevsim0 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.076214][T11557] netdevsim netdevsim0 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.745395][ T5086] Bluetooth: hci5: command tx timeout [ 453.761602][T11557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.811869][T11557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.857734][T11557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.915118][T11557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 456.679975][T11557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.761297][T11557] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.832132][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.839385][ T7798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.892108][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.899438][ T7798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.456516][T11666] netlink: 'syz.1.1395': attribute type 10 has an invalid length. [ 457.535233][T11666] syz_tun: entered promiscuous mode [ 457.559811][T11666] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 457.608282][ T49] bond0: (slave syz_tun): interface is now down [ 457.677030][ T3005] bond0: (slave syz_tun): interface is now down [ 457.713094][T11557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.736495][ T3005] bond0: (slave syz_tun): interface is now down [ 457.764829][ T49] bond0: (slave syz_tun): interface is now down [ 457.784812][ T12] bond0: (slave syz_tun): interface is now down [ 457.831524][ T49] bond0: (slave syz_tun): interface is now down [ 457.863887][ T49] bond0: now running without any active interface! [ 457.968007][T11677] futex_wake_op: syz.1.1397 tries to shift op by 144; fix this program [ 457.985007][T11557] veth0_vlan: entered promiscuous mode [ 458.037969][T11557] veth1_vlan: entered promiscuous mode [ 458.180303][T11557] veth0_macvtap: entered promiscuous mode [ 458.224359][T11557] veth1_macvtap: entered promiscuous mode [ 458.324498][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.383176][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.438742][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.484566][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.523801][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.554341][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.587217][T11557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.647881][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.699670][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.754132][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.795311][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.868561][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.909594][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.972468][T11557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.048140][T11557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.097849][T11557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.141131][T11557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.178158][T11557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.583641][ T7798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.634514][ T7798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.732482][ T7795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.755540][ T7795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.917809][T11772] syzkaller0: entered promiscuous mode [ 463.935916][T11772] syzkaller0: entered allmulticast mode [ 464.065859][T11778] fuse: Bad value for 'fd' [ 466.760321][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 466.853617][T11819] syz_tun (unregistering): left allmulticast mode [ 466.873789][T11819] bond0: (slave syz_tun): Releasing backup interface [ 467.355552][T11839] netlink: 'syz.4.1427': attribute type 4 has an invalid length. [ 468.488051][T11870] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1434'. [ 472.017833][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 472.017849][ T27] audit: type=1326 audit(1797800677.083:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 472.051732][T11930] netlink: 'syz.4.1445': attribute type 10 has an invalid length. [ 472.084228][ T27] audit: type=1326 audit(1797800677.125:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 472.682755][ T27] audit: type=1326 audit(1797800677.786:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 472.742430][ T27] audit: type=1326 audit(1797800677.786:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 472.795181][ T27] audit: type=1326 audit(1797800677.786:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 472.866540][ T27] audit: type=1326 audit(1797800677.786:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 472.906075][ T27] audit: type=1326 audit(1797800677.786:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 472.932085][ T27] audit: type=1326 audit(1797800677.786:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 473.020430][ T27] audit: type=1326 audit(1797800677.786:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 473.067282][ T27] audit: type=1326 audit(1797800677.786:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.1444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7fc00000 [ 473.241759][T11952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.249131][T11952] IPv6: NLM_F_CREATE should be set when creating new route [ 473.895975][T11952] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.903628][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.464753][T11952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.523756][T11952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.010682][T11952] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.020230][T11952] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.031239][T11952] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.040365][T11952] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.310900][T11969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1452'. [ 475.339080][T11969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1452'. [ 477.488598][T12008] capability: warning: `syz.9.1465' uses 32-bit capabilities (legacy support in use) [ 477.678608][T12013] loop0: detected capacity change from 0 to 512 [ 477.716788][T12013] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 477.767775][T12013] EXT4-fs (loop0): 1 truncate cleaned up [ 477.798133][T12013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.395413][T11557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.999844][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 491.006241][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 492.330763][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 492.347094][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 492.359809][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 492.377760][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 492.386824][ T5784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 492.394738][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 492.564375][T12066] lo speed is unknown, defaulting to 1000 [ 492.912335][T12066] chnl_net:caif_netlink_parms(): no params data found [ 493.122269][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.138457][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.150239][T12066] bridge_slave_0: entered allmulticast mode [ 493.168703][T12066] bridge_slave_0: entered promiscuous mode [ 493.195023][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.214539][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.227318][T12066] bridge_slave_1: entered allmulticast mode [ 493.239513][T12066] bridge_slave_1: entered promiscuous mode [ 493.325232][T12066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.350807][T12066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.467499][T12066] team0: Port device team_slave_0 added [ 493.488758][T12066] team0: Port device team_slave_1 added [ 493.574083][T12066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.590149][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.643054][T12066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.670199][T12066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.688113][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.731239][T12066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.352358][ T5784] Bluetooth: hci6: command tx timeout [ 494.688284][T12066] hsr_slave_0: entered promiscuous mode [ 494.726283][T12066] hsr_slave_1: entered promiscuous mode [ 494.744775][T12066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.761561][T12066] Cannot create hsr debugfs directory [ 494.794598][T12083] overlayfs: failed to clone lowerpath [ 494.988910][T12086] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 495.361764][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'. [ 495.714755][T12066] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.730365][T12066] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.759933][T12103] syzkaller0: entered promiscuous mode [ 495.769341][T12103] syzkaller0: entered allmulticast mode [ 495.781667][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 495.864704][T12104] bridge2: port 1(veth7) entered blocking state [ 495.871634][T12104] bridge2: port 1(veth7) entered disabled state [ 495.880159][T12104] veth7: entered allmulticast mode [ 495.901223][T12104] veth7: entered promiscuous mode [ 495.937616][T12107] bridge2: port 2(veth0_to_bond) entered blocking state [ 495.950105][T12107] bridge2: port 2(veth0_to_bond) entered disabled state [ 495.967432][T12107] veth0_to_bond: entered allmulticast mode [ 495.995827][T12107] veth0_to_bond: entered promiscuous mode [ 496.317713][T12066] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.333905][ T5784] Bluetooth: hci6: command tx timeout [ 496.356063][T12066] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.523745][T12127] futex_wake_op: syz.1.1492 tries to shift op by 144; fix this program [ 496.924744][T12066] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.169939][T12066] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.211231][T12138] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 497.761220][T12066] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.900910][T12066] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.420801][ T5784] Bluetooth: hci6: command tx timeout [ 499.789029][T12066] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 499.829758][T12066] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 499.880509][T12066] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 499.937616][T12066] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 500.491886][T12066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.571241][T12066] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.649707][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.657305][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.782352][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.789593][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.382220][ T5086] Bluetooth: hci6: command tx timeout [ 502.667915][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 503.531204][T12066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.776687][T12066] veth0_vlan: entered promiscuous mode [ 503.819156][T12066] veth1_vlan: entered promiscuous mode [ 503.995053][T12066] veth0_macvtap: entered promiscuous mode [ 504.043624][T12066] veth1_macvtap: entered promiscuous mode [ 504.136217][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.182987][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.212971][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.323028][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.356005][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.392084][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.441256][T12066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.499896][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.542716][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.575830][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.611300][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.644625][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.678799][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.716281][T12066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.767095][T12066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.801706][T12066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.831724][T12066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.863071][T12066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.090205][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.120770][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.233982][ T7805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.258422][ T7805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.602715][ T7565] IPVS: starting estimator thread 0... [ 507.720337][T12259] IPVS: using max 20 ests per chain, 48000 per kthread [ 514.348459][ T5784] Bluetooth: Unexpected continuation frame (len 10) [ 517.594870][T12356] netlink: 'syz.0.1532': attribute type 1 has an invalid length. [ 517.700707][T12357] bond1: entered promiscuous mode [ 517.737588][T12357] bond1: entered allmulticast mode [ 517.757516][T12357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.859113][T12358] bridge1: entered promiscuous mode [ 517.876411][T12358] bridge1: entered allmulticast mode [ 517.896343][T12358] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 517.905155][ T7805] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 517.964022][T12359] bridge2: entered promiscuous mode [ 517.996111][T12359] bridge2: entered allmulticast mode [ 518.014268][T12359] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 518.042480][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 518.086740][T12359] bridge3: entered promiscuous mode [ 518.105328][T12359] bridge3: entered allmulticast mode [ 518.112306][T12371] EXT4-fs: Conflicting test_dummy_encryption options [ 518.120131][T12359] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 521.425783][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1544'. [ 521.455151][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1544'. [ 521.536734][T12425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.609337][T12425] bond1: (slave bond0): making interface the new active one [ 521.640698][T12425] bond1: (slave bond0): Enslaving as an active interface with an up link [ 521.685261][T12422] netlink: 'syz.9.1544': attribute type 4 has an invalid length. [ 521.719669][T12422] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1544'. [ 521.772033][T12422] .`: renamed from bond0 (while UP) [ 522.038875][T12434] netlink: 'syz.1.1545': attribute type 1 has an invalid length. [ 522.703495][T12453] bond5: entered promiscuous mode [ 522.714854][T12453] bond5: entered allmulticast mode [ 522.720985][T12453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 522.831836][T12452] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 523.011777][T12434] bridge3: entered promiscuous mode [ 523.035452][T12434] bridge3: entered allmulticast mode [ 523.053416][ T3464] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 523.207096][ T1147] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 523.312173][T12434] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 523.793476][T12453] bridge4: entered promiscuous mode [ 523.836483][T12453] bridge4: entered allmulticast mode [ 524.618751][T12453] bond5: (slave bridge4): Enslaving as a backup interface with a down link [ 526.226076][T12453] bridge5: entered promiscuous mode [ 526.247637][T12453] bridge5: entered allmulticast mode [ 526.529258][T12453] bond5: (slave bridge5): Enslaving as a backup interface with a down link [ 527.047952][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 527.564917][ T7566] IPVS: starting estimator thread 0... [ 527.579470][T12504] xfrm0: entered allmulticast mode [ 527.608200][T12502] IPVS: Error connecting to the multicast addr [ 527.655327][T12503] IPVS: using max 17 ests per chain, 40800 per kthread [ 528.038254][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 528.038270][ T27] audit: type=1326 audit(1797800735.893:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12517 comm="syz.9.1561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7aa59e159 code=0x0 [ 528.437903][T12528] loop2: detected capacity change from 0 to 512 [ 528.520334][T12528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.588268][T12528] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.473019][T12545] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 529.909677][T12066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.724282][T12584] tipc: Enabling of bearer rejected, failed to enable media [ 532.260121][ T59] hsr_slave_0: left promiscuous mode [ 532.275699][ T59] hsr_slave_1: left promiscuous mode [ 532.313995][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.380023][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.413094][T12601] netlink: zone id is out of range [ 532.423914][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.443796][T12601] netlink: zone id is out of range [ 532.461867][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.471431][T12601] netlink: zone id is out of range [ 532.490632][T12601] netlink: zone id is out of range [ 532.499460][ T59] bridge_slave_1: left allmulticast mode [ 532.524506][T12601] netlink: zone id is out of range [ 532.534853][ T59] bridge_slave_1: left promiscuous mode [ 532.547230][T12601] netlink: zone id is out of range [ 532.559337][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.578672][T12601] netlink: zone id is out of range [ 532.599861][T12601] netlink: zone id is out of range [ 532.605495][ T59] bridge_slave_0: left allmulticast mode [ 532.631194][T12601] netlink: zone id is out of range [ 532.637223][ T59] bridge_slave_0: left promiscuous mode [ 532.652796][T12601] netlink: zone id is out of range [ 532.661630][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.897986][ T59] veth1_macvtap: left promiscuous mode [ 532.918269][ T59] veth0_macvtap: left promiscuous mode [ 533.072544][ T59] veth1_vlan: left promiscuous mode [ 533.105664][ T59] veth0_vlan: left promiscuous mode [ 537.254426][ T59] team0 (unregistering): Port device team_slave_1 removed [ 537.331000][ T59] team0 (unregistering): Port device team_slave_0 removed [ 537.405820][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.478318][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.198494][ T59] bond0 (unregistering): Released all slaves [ 538.341881][T12611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1580'. [ 538.411087][T12618] netlink: 'syz.2.1583': attribute type 1 has an invalid length. [ 538.428214][T12619] batadv_slave_1: entered promiscuous mode [ 538.434135][T12619] batadv_slave_1: entered allmulticast mode [ 538.885732][T12683] bridge0: port 3(vxlan1) entered blocking state [ 538.900970][T12683] bridge0: port 3(vxlan1) entered disabled state [ 538.916598][T12683] vxlan1: entered allmulticast mode [ 538.954002][T12683] vxlan1: entered promiscuous mode [ 539.195334][T12698] netlink: 'syz.1.1599': attribute type 4 has an invalid length. [ 539.270347][ T27] audit: type=1800 audit(1797800747.671:833): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1600" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 539.427218][T12703] netlink: 'syz.1.1599': attribute type 4 has an invalid length. [ 539.584466][ T5820] lo speed is unknown, defaulting to 1000 [ 539.591816][ T7565] lo speed is unknown, defaulting to 1000 [ 540.929053][T12738] fuse: Unknown parameter 'o‡¦—A„ñt±(nÆ„/¬‹' [ 540.999767][T12735] kvm_intel: kvm [12734]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 541.298677][T12749] loop2: detected capacity change from 0 to 2048 [ 541.401531][T12749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.735920][T12761] net_ratelimit: 23 callbacks suppressed [ 541.735938][T12761] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 542.505444][T12066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.907159][T12774] netlink: 'syz.2.1614': attribute type 1 has an invalid length. [ 542.922780][T12776] syzkaller0: entered promiscuous mode [ 542.938572][T12776] syzkaller0: entered allmulticast mode [ 543.091774][T12774] bridge1: entered promiscuous mode [ 543.104086][T12774] bridge1: entered allmulticast mode [ 543.432556][T12786] ip_tables: iptables: counters copy to user failed while replacing table [ 544.832283][T12811] fuse: Bad value for 'fd' [ 544.965657][T12814] overlayfs: failed to clone upperpath [ 545.362408][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 546.532663][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1634'. [ 548.762264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 550.183135][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 550.189526][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 550.368333][ T27] audit: type=1326 audit(1797800759.335:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 550.419490][ T27] audit: type=1326 audit(1797800759.335:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 550.513980][ T27] audit: type=1326 audit(1797800759.366:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 550.582096][ T27] audit: type=1326 audit(1797800759.366:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 550.667137][ T27] audit: type=1326 audit(1797800759.366:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 550.758356][ T27] audit: type=1326 audit(1797800759.366:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 550.843773][ T27] audit: type=1326 audit(1797800759.366:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 550.917575][ T27] audit: type=1326 audit(1797800759.366:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 550.987140][ T27] audit: type=1326 audit(1797800759.366:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 551.064130][ T27] audit: type=1326 audit(1797800759.366:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.0.1641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd77f9e159 code=0x7ffc0000 [ 551.194332][T12910] loop2: detected capacity change from 0 to 512 [ 551.246458][T12910] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 551.780617][T12922] wg1: entered promiscuous mode [ 551.801392][T12922] wg1: entered allmulticast mode [ 558.527254][T13020] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 561.411676][T13067] netlink: 'syz.1.1672': attribute type 12 has an invalid length. [ 561.463752][T13065] syzkaller0: entered promiscuous mode [ 561.488700][T13065] syzkaller0: entered allmulticast mode [ 563.295854][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 563.497397][T13096] loop2: detected capacity change from 0 to 128 [ 563.516211][T13098] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1679'. [ 564.254068][T13101] UBIFS error (pid: 13101): cannot open "(null)", error -22 [ 564.378781][T13104] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 566.043977][T13125] netlink: 'syz.0.1686': attribute type 8 has an invalid length. [ 566.060364][ T5784] Bluetooth: hci5: command 0x0406 tx timeout [ 566.494296][T13134] fuse: Bad value for 'fd' [ 567.081830][T13138] syzkaller0: entered promiscuous mode [ 567.094655][T13138] syzkaller0: entered allmulticast mode [ 568.270690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 568.660855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 571.948527][T13179] netlink: 'syz.2.1706': attribute type 1 has an invalid length. [ 573.537987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 574.015721][T13187] veth3: entered allmulticast mode [ 574.065158][T13187] bond2: (slave veth3): Enslaving as an active interface with a down link [ 574.153809][T13189] bond2: (slave veth0_to_bond): making interface the new active one [ 574.187811][T13189] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 574.675648][T13199] netlink: 'syz.9.1709': attribute type 1 has an invalid length. [ 574.735799][T13199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.768356][T13203] bond0: (slave geneve2): making interface the new active one [ 574.795106][T13203] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 575.115141][T13203] syz.9.1709 (13203) used greatest stack depth: 18216 bytes left [ 576.862901][ T5820] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 577.620436][T13226] netlink: 'syz.9.1718': attribute type 4 has an invalid length. [ 577.756566][ T5820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 577.769780][ T5820] usb 3-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 577.798683][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.824802][ T5820] usb 3-1: Product: syz [ 577.829299][ T5820] usb 3-1: Manufacturer: syz [ 577.864640][ T5820] usb 3-1: SerialNumber: syz [ 578.589364][ T5820] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 578.696268][ T5820] usb 3-1: USB disconnect, device number 2 [ 580.549550][ T29] INFO: task syz.8.1341:11321 blocked for more than 143 seconds. [ 580.567605][ T29] Not tainted syzkaller #0 [ 580.577383][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.592400][ T29] task:syz.8.1341 state:D stack:27912 pid:11321 ppid:10692 flags:0x00004004 [ 580.606851][ T29] Call Trace: [ 580.610295][ T29] [ 580.613462][ T29] __schedule+0x15ae/0x4660 [ 580.628745][ T29] ? asan.module_dtor+0x20/0x20 [ 580.640971][ T29] ? __mutex_lock+0x66e/0xc80 [ 580.651004][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 580.661774][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 580.677454][ T29] schedule+0xbd/0x170 [ 580.681785][ T29] schedule_preempt_disabled+0x13/0x20 [ 580.693807][ T29] __mutex_lock+0x673/0xc80 [ 580.698611][ T29] ? __mutex_lock+0x4d2/0xc80 [ 580.710103][ T29] ? write_versions+0x96/0xe00 [ 580.719666][ T29] ? mutex_lock_nested+0x20/0x20 [ 580.730020][ T29] write_versions+0x96/0xe00 [ 580.742949][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 580.767006][ T29] ? __virt_addr_valid+0x10c/0x380 [ 580.788137][ T29] ? write_pool_threads+0x7d0/0x7d0 [ 580.813751][ T29] ? __might_fault+0xaa/0x120 [ 580.831969][ T29] ? __might_fault+0xc6/0x120 [ 580.846176][ T29] ? __might_fault+0xaa/0x120 [ 580.866342][ T29] ? simple_transaction_get+0x11d/0x140 [ 580.878238][ T29] nfsctl_transaction_write+0x10c/0x150 [ 580.891988][ T29] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 580.897901][ T29] vfs_write+0x299/0x9a0 [ 580.911546][ T29] ? file_end_write+0x250/0x250 [ 580.916625][ T29] ? __fget_files+0x28/0x460 [ 580.927956][ T29] ? __fget_files+0x3fc/0x460 [ 580.936815][ T29] ? __fdget_pos+0x2a3/0x330 [ 580.946712][ T29] ? ksys_write+0x74/0x260 [ 580.958320][ T29] ksys_write+0x151/0x260 [ 580.963266][ T29] ? __ia32_sys_read+0x90/0x90 [ 580.979115][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 580.984566][ T29] do_syscall_64+0x55/0xb0 [ 580.996240][ T29] ? clear_bhb_loop+0x40/0x90 [ 581.007364][ T29] ? clear_bhb_loop+0x40/0x90 [ 581.012479][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.027457][ T29] RIP: 0033:0x7f47a799e159 [ 581.034219][ T29] RSP: 002b:00007f47a881a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.051363][ T29] RAX: ffffffffffffffda RBX: 00007f47a7c25fa0 RCX: 00007f47a799e159 [ 581.065291][ T29] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000003 [ 581.086637][ T29] RBP: 00007f47a7a3503b R08: 0000000000000000 R09: 0000000000000000 [ 581.104590][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.117726][ T29] R13: 00007f47a7c26038 R14: 00007f47a7c25fa0 R15: 00007ffd938d3558 [ 581.134030][ T29] [ 581.144126][ T29] INFO: task syz.8.1341:11324 blocked for more than 143 seconds. [ 581.167694][ T29] Not tainted syzkaller #0 [ 581.173583][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.193304][ T29] task:syz.8.1341 state:D stack:27912 pid:11324 ppid:10692 flags:0x00004004 [ 581.207650][ T29] Call Trace: [ 581.211173][ T29] [ 581.214223][ T29] __schedule+0x15ae/0x4660 [ 581.226802][ T29] ? asan.module_dtor+0x20/0x20 [ 581.233384][ T29] ? __mutex_lock+0x66e/0xc80 [ 581.250305][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 581.262456][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 581.273780][ T29] schedule+0xbd/0x170 [ 581.278105][ T29] schedule_preempt_disabled+0x13/0x20 [ 581.289979][ T29] __mutex_lock+0x673/0xc80 [ 581.300976][ T29] ? __mutex_lock+0x4d2/0xc80 [ 581.312156][ T29] ? write_ports+0xb7/0xfa0 [ 581.316923][ T29] ? mutex_lock_nested+0x20/0x20 [ 581.330737][ T29] write_ports+0xb7/0xfa0 [ 581.335310][ T29] ? write_versions+0xe00/0xe00 [ 581.351816][ T29] ? __might_fault+0xaa/0x120 [ 581.361590][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 581.367073][ T29] ? __virt_addr_valid+0x10c/0x380 [ 581.380388][ T29] ? __virt_addr_valid+0x10c/0x380 [ 581.385747][ T29] ? __might_fault+0xaa/0x120 [ 581.399247][ T29] ? __might_fault+0xc6/0x120 [ 581.404908][ T29] ? __might_fault+0xaa/0x120 [ 581.419788][ T29] ? simple_transaction_get+0x11d/0x140 [ 581.430556][ T29] nfsctl_transaction_write+0x10c/0x150 [ 581.444628][ T29] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 581.450566][ T29] vfs_write+0x299/0x9a0 [ 581.464118][ T29] ? file_end_write+0x250/0x250 [ 581.472490][ T29] ? __fget_files+0x28/0x460 [ 581.485805][ T29] ? __fget_files+0x3fc/0x460 [ 581.490770][ T29] ? __fdget_pos+0x2a3/0x330 [ 581.504788][ T29] ? ksys_write+0x74/0x260 [ 581.509570][ T29] ksys_write+0x151/0x260 [ 581.521529][ T29] ? __ia32_sys_read+0x90/0x90 [ 581.527957][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 581.543350][ T29] do_syscall_64+0x55/0xb0 [ 581.548048][ T29] ? clear_bhb_loop+0x40/0x90 [ 581.559433][ T29] ? clear_bhb_loop+0x40/0x90 [ 581.564404][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.576535][ T29] RIP: 0033:0x7f47a799e159 [ 581.586874][ T29] RSP: 002b:00007f47a87f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.600369][ T29] RAX: ffffffffffffffda RBX: 00007f47a7c26090 RCX: 00007f47a799e159 [ 581.617310][ T29] RDX: 000000000000000a RSI: 0000200000000180 RDI: 0000000000000003 [ 581.632215][ T29] RBP: 00007f47a7a3503b R08: 0000000000000000 R09: 0000000000000000 [ 581.649128][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.662752][ T29] R13: 00007f47a7c26128 R14: 00007f47a7c26090 R15: 00007ffd938d3558 [ 581.676718][ T29] [ 581.679932][ T29] INFO: task syz.8.1341:11326 blocked for more than 144 seconds. [ 581.696993][ T29] Not tainted syzkaller #0 [ 581.708244][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.724995][ T29] task:syz.8.1341 state:D stack:27912 pid:11326 ppid:10692 flags:0x00004004 [ 581.745600][ T29] Call Trace: [ 581.752957][ T29] [ 581.756123][ T29] __schedule+0x15ae/0x4660 [ 581.768165][ T29] ? asan.module_dtor+0x20/0x20 [ 581.778162][ T29] ? __mutex_lock+0x66e/0xc80 [ 581.788569][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 581.800732][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 581.815620][ T29] schedule+0xbd/0x170 [ 581.822697][ T29] schedule_preempt_disabled+0x13/0x20 [ 581.852587][ T29] __mutex_lock+0x673/0xc80 [ 581.868946][ T29] ? __mutex_lock+0x4d2/0xc80 [ 581.879039][ T29] ? nfsd_svc+0x65/0xab0 [ 581.888678][ T29] ? mutex_lock_nested+0x20/0x20 [ 581.900666][ T29] ? net_generic+0x1e/0x240 [ 581.911422][ T29] ? net_generic+0x1e/0x240 [ 581.916163][ T29] nfsd_svc+0x65/0xab0 [ 581.920352][ T29] ? qword_get+0x5a9/0x640 [ 581.933530][ T29] write_threads+0x393/0x510 [ 581.944399][ T29] ? write_unlock_fs+0x450/0x450 [ 581.957359][ T29] ? __might_fault+0xaa/0x120 [ 581.965958][ T29] ? __might_fault+0xaa/0x120 [ 581.976467][ T29] ? simple_transaction_get+0x11d/0x140 [ 581.986764][ T29] nfsctl_transaction_write+0x10c/0x150 [ 581.995150][ T29] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 582.008641][ T29] vfs_write+0x299/0x9a0 [ 582.013147][ T29] ? file_end_write+0x250/0x250 [ 582.030897][ T29] ? __fget_files+0x28/0x460 [ 582.041269][ T29] ? __fget_files+0x3fc/0x460 [ 582.052275][ T29] ? __fdget_pos+0x2a3/0x330 [ 582.064479][ T29] ? ksys_write+0x74/0x260 [ 582.069142][ T29] ksys_write+0x151/0x260 [ 582.081752][ T29] ? __ia32_sys_read+0x90/0x90 [ 582.088758][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 582.101835][ T29] do_syscall_64+0x55/0xb0 [ 582.106894][ T29] ? clear_bhb_loop+0x40/0x90 [ 582.123926][ T29] ? clear_bhb_loop+0x40/0x90 [ 582.128900][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.141928][ T29] RIP: 0033:0x7f47a799e159 [ 582.154895][ T29] RSP: 002b:00007f47a87d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 582.173554][ T29] RAX: ffffffffffffffda RBX: 00007f47a7c26180 RCX: 00007f47a799e159 [ 582.185848][ T29] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 582.199840][ T29] RBP: 00007f47a7a3503b R08: 0000000000000000 R09: 0000000000000000 [ 582.213621][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.228454][ T29] R13: 00007f47a7c26218 R14: 00007f47a7c26180 R15: 00007ffd938d3558 [ 582.245518][ T29] [ 582.258846][ T29] [ 582.258846][ T29] Showing all locks held in the system: [ 582.287570][ T29] 1 lock held by khungtaskd/29: [ 582.299040][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 582.314557][ T29] 2 locks held by kworker/u4:7/1147: [ 582.328280][ T29] #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 582.349738][ T29] #1: ffffc90004abfd00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 582.370615][ T29] 2 locks held by getty/5963: [ 582.375626][ T29] #0: ffff888020d180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 582.422044][ T29] #1: ffffc900036fb2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 582.463358][ T29] 2 locks held by kworker/u4:18/7805: [ 582.472136][ T29] #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 582.490129][ T29] #1: ffffc900048ffd00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 582.519653][ T29] 3 locks held by syz.6.1179/10768: [ 582.528918][ T29] #0: ffff88807d9e4348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 582.548450][ T29] #1: ffff88807a9d4418 (sb_writers#35){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 582.562149][ T29] #2: ffffffff8d3e1c88 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 582.579628][ T29] 3 locks held by syz.8.1341/11321: [ 582.585166][ T29] #0: ffff88801bf88d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 582.600138][ T29] #1: ffff88801e76a418 (sb_writers#35){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 582.622875][ T29] #2: ffffffff8d3e1c88 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 [ 582.636494][ T29] 3 locks held by syz.8.1341/11324: [ 582.641924][ T29] #0: ffff88801bf89248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 582.658972][ T29] #1: ffff88801e76a418 (sb_writers#35){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 582.673679][ T29] #2: ffffffff8d3e1c88 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 582.688791][ T29] 3 locks held by syz.8.1341/11326: [ 582.700208][ T29] #0: ffff88801e71b248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 582.715631][ T29] #1: ffff88801e76a418 (sb_writers#35){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 582.738776][ T29] #2: ffffffff8d3e1c88 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 [ 582.749472][ T29] 3 locks held by syz.2.1725/13247: [ 582.756518][ T29] 2 locks held by syz.1.1727/13252: [ 582.774932][ T29] [ 582.780752][ T29] ============================================= [ 582.780752][ T29] [ 582.805704][ T29] NMI backtrace for cpu 0 [ 582.810114][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 582.817357][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.827456][ T29] Call Trace: [ 582.830779][ T29] [ 582.833754][ T29] dump_stack_lvl+0x18c/0x250 [ 582.838482][ T29] ? __wake_up_klogd+0xd9/0x100 [ 582.843388][ T29] ? show_regs_print_info+0x20/0x20 [ 582.848740][ T29] ? load_image+0x420/0x420 [ 582.853318][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 582.858319][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 582.864532][ T29] ? load_image+0x420/0x420 [ 582.869080][ T29] ? wq_watchdog_touch+0xef/0x170 [ 582.874167][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 582.880330][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 582.886371][ T29] watchdog+0xf59/0xfa0 [ 582.890578][ T29] ? watchdog+0x1e1/0xfa0 [ 582.894981][ T29] kthread+0x2fa/0x390 [ 582.899096][ T29] ? hungtask_pm_notify+0x50/0x50 [ 582.904188][ T29] ? kthread_blkcg+0xd0/0xd0 [ 582.908832][ T29] ret_from_fork+0x48/0x80 [ 582.913308][ T29] ? kthread_blkcg+0xd0/0xd0 [ 582.917941][ T29] ret_from_fork_asm+0x11/0x20 [ 582.922753][ T29] [ 582.926478][ T29] Sending NMI from CPU 0 to CPUs 1: [ 582.931862][ C1] NMI backtrace for cpu 1 [ 582.931873][ C1] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 582.931889][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.931899][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 582.931928][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x17/0x90 [ 582.931954][ C1] Code: 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 c3 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 10 2a 7c 7e 65 8b 0d 11 2a 7c 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 [ 582.931974][ C1] RSP: 0018:ffffc90000b9f218 EFLAGS: 00000293 [ 582.931987][ C1] RAX: ffffffff8a112e4d RBX: 0000000000000004 RCX: 0000000080000000 [ 582.931998][ C1] RDX: ffff88801d651e00 RSI: 0000000000000032 RDI: 0000000000000040 [ 582.932027][ C1] RBP: ffffc90000b9f5f0 R08: ffffc90000b9f567 R09: 1ffff92000173eac [ 582.932040][ C1] R10: dffffc0000000000 R11: fffff52000173ead R12: ffff88802487fb0d [ 582.932053][ C1] R13: dffffc0000000000 R14: 0000000000000032 R15: ffff88802487fb00 [ 582.932065][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 582.932079][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.932090][ C1] CR2: 0000558ad6a6d280 CR3: 0000000077098000 CR4: 00000000003506e0 [ 582.932105][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 582.932116][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 582.932127][ C1] Call Trace: [ 582.932132][ C1] [ 582.932138][ C1] _ieee802_11_parse_elems_full+0xb8d/0x37f0 [ 582.932163][ C1] ? arch_stack_walk+0x16e/0x190 [ 582.932223][ C1] ? ieee802_11_parse_elems_full+0x20c0/0x20c0 [ 582.932248][ C1] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 582.932270][ C1] ? cfg80211_find_elem_match+0x1bc/0x1f0 [ 582.932293][ C1] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 582.932318][ C1] ieee802_11_parse_elems_full+0xdd9/0x20c0 [ 582.932348][ C1] ? trace_contention_end+0x39/0xe0 [ 582.932372][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x123/0x2dc0 [ 582.932399][ C1] ? mutex_lock_nested+0x20/0x20 [ 582.932417][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 582.932446][ C1] ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 [ 582.932471][ C1] ? verify_lock_unused+0x140/0x140 [ 582.932492][ C1] ? verify_lock_unused+0x140/0x140 [ 582.932519][ C1] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 582.932548][ C1] ? mark_lock+0x94/0x320 [ 582.932569][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 582.932589][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 582.932609][ C1] ? lock_chain_count+0x20/0x20 [ 582.932627][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 582.932652][ C1] ? kcov_remote_start+0x8b/0x810 [ 582.932679][ C1] ? skb_dequeue+0x124/0x160 [ 582.932705][ C1] ieee80211_iface_work+0x730/0xc90 [ 582.932735][ C1] cfg80211_wiphy_work+0x228/0x260 [ 582.932760][ C1] ? process_scheduled_works+0x975/0x1600 [ 582.932784][ C1] process_scheduled_works+0xa60/0x1600 [ 582.932821][ C1] ? worker_attach_to_pool+0x370/0x370 [ 582.932850][ C1] ? assign_work+0x3cc/0x5d0 [ 582.932875][ C1] worker_thread+0xa5e/0xfe0 [ 582.932909][ C1] kthread+0x2fa/0x390 [ 582.932926][ C1] ? pr_cont_work+0x550/0x550 [ 582.932947][ C1] ? kthread_blkcg+0xd0/0xd0 [ 582.932963][ C1] ret_from_fork+0x48/0x80 [ 582.932983][ C1] ? kthread_blkcg+0xd0/0xd0 [ 582.933000][ C1] ret_from_fork_asm+0x11/0x20 [ 582.933031][ C1] [ 583.277946][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 583.284845][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 583.292094][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.302174][ T29] Call Trace: [ 583.305474][ T29] [ 583.308419][ T29] dump_stack_lvl+0x18c/0x250 [ 583.313129][ T29] ? show_regs_print_info+0x20/0x20 [ 583.318361][ T29] ? load_image+0x420/0x420 [ 583.322893][ T29] panic+0x2ca/0x720 [ 583.326813][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 583.331343][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 583.336904][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 583.342335][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 583.348519][ T29] watchdog+0xf98/0xfa0 [ 583.352699][ T29] ? watchdog+0x1e1/0xfa0 [ 583.357059][ T29] kthread+0x2fa/0x390 [ 583.361175][ T29] ? hungtask_pm_notify+0x50/0x50 [ 583.366241][ T29] ? kthread_blkcg+0xd0/0xd0 [ 583.370860][ T29] ret_from_fork+0x48/0x80 [ 583.375306][ T29] ? kthread_blkcg+0xd0/0xd0 [ 583.379922][ T29] ret_from_fork_asm+0x11/0x20 [ 583.384717][ T29] [ 583.387923][ T29] Kernel Offset: disabled [ 583.392257][ T29] Rebooting in 86400 seconds..