last executing test programs: 3m0.837302268s ago: executing program 1 (id=116): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) 2m58.829180172s ago: executing program 1 (id=123): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$null(0xffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) 2m58.498836463s ago: executing program 1 (id=127): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x884) 2m58.032978418s ago: executing program 1 (id=130): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m57.269970262s ago: executing program 1 (id=138): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m54.422073223s ago: executing program 1 (id=151): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 2m54.013161985s ago: executing program 32 (id=151): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 2m50.482660948s ago: executing program 4 (id=181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='cmdline\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x132, r0, 0x6ad42000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) read$FUSE(r0, &(0x7f0000001400)={0x2020}, 0x2020) socket$inet6(0xa, 0x2, 0x0) 2m48.036187415s ago: executing program 4 (id=198): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000050e000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2m46.115175567s ago: executing program 4 (id=208): creat(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0) 2m45.772128847s ago: executing program 4 (id=211): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x301001a, &(0x7f0000000180), 0x1, 0x4cb, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffd, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr(&(0x7f0000000080)='./file2\x00', &(0x7f0000000240)=@known='com.apple.FinderInfo\x00', 0x0, 0x0, 0x1) 2m44.806376058s ago: executing program 4 (id=221): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 2m40.748156378s ago: executing program 4 (id=240): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x20000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000006c0)={r3, @in6={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x58}}}, 0x84) 2m40.401617998s ago: executing program 33 (id=240): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x20000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000006c0)={r3, @in6={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x58}}}, 0x84) 2m24.813296694s ago: executing program 6 (id=242): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 2m24.444208886s ago: executing program 6 (id=311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 2m24.078766668s ago: executing program 6 (id=315): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x991480, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 2m22.418690961s ago: executing program 6 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) landlock_create_ruleset(&(0x7f0000000080)={0x3000, 0x2, 0x2}, 0x18, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) 2m18.500146445s ago: executing program 6 (id=344): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7dd256967c7126}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0xcc, 0x4, 0x6}}]}]}}}]}, 0x88}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2m18.167567465s ago: executing program 34 (id=344): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7dd256967c7126}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0xcc, 0x4, 0x6}}]}]}}}]}, 0x88}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m49.194400857s ago: executing program 3 (id=473): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x103882, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) 1m48.973087214s ago: executing program 3 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) 1m48.671894334s ago: executing program 3 (id=475): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 1m48.17024621s ago: executing program 3 (id=489): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x28) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4880) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="200a09000000090902"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1m46.126872535s ago: executing program 3 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m44.954888772s ago: executing program 3 (id=496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000600)="87"}) 1m28.775521847s ago: executing program 35 (id=496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000600)="87"}) 8.585205647s ago: executing program 7 (id=872): pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40), 0x1, 0xeb0, &(0x7f0000000f80)="$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") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000003c0)=@chain={'key_or_keyring:', r3}) mount$9p_fd(0x0, &(0x7f0000001500)='.\x00', &(0x7f0000000000), 0x1000052, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8.054478823s ago: executing program 8 (id=875): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) 7.748837763s ago: executing program 8 (id=877): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000040)={0xcc, 0x0, 0x80}) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) fstat(r2, 0x0) setresuid(0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) 7.687560575s ago: executing program 7 (id=878): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x4d6, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 7.168219012s ago: executing program 7 (id=882): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000140)=0x2, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/191, 0xbf) 7.014540487s ago: executing program 7 (id=883): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x401) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6.91473838s ago: executing program 8 (id=884): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.336340078s ago: executing program 2 (id=889): pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40), 0x1, 0xeb0, &(0x7f0000000f80)="$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") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000003c0)=@chain={'key_or_keyring:', r3}) mount$9p_fd(0x0, &(0x7f0000001500)='.\x00', &(0x7f0000000000), 0x1000052, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.091886926s ago: executing program 7 (id=893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) 5.590950752s ago: executing program 2 (id=896): r0 = socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r2, &(0x7f00000001c0)='m', 0x1, 0x1}]) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xcf) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 4.370391801s ago: executing program 0 (id=899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000003800)=""/4092, 0xffc}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 4.06972776s ago: executing program 0 (id=901): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 3.500691058s ago: executing program 8 (id=903): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 3.314176524s ago: executing program 2 (id=905): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r2, 0x245}, {r2, 0x6200}], 0x2, 0x0, 0x0, 0x0) close(0x3) 2.743900902s ago: executing program 2 (id=907): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00!\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.728112693s ago: executing program 7 (id=908): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 2.719008193s ago: executing program 0 (id=909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(0x3) 2.19387131s ago: executing program 36 (id=908): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 2.18935296s ago: executing program 0 (id=912): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e21, @rand_addr=0x64010103}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x80000000000008}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.18238975s ago: executing program 5 (id=913): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000838}, 0x4044057) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0xfd9b}, 0x1, 0x0, 0x0, 0x400088d4}, 0x60a30c9b14323f1f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x38, 0x49, 0x11, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.18192567s ago: executing program 2 (id=914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2.110964903s ago: executing program 8 (id=915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000005c0)={0x1, 0x0, [{0xd, 0x4d3e, 0x8b7f, 0x5e1, 0x2}]}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) exit(0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2.004143366s ago: executing program 2 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f0000004080)={0x2020}, 0x2020) 1.962865237s ago: executing program 0 (id=917): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8000, &(0x7f0000000d40)={[{@data_err_abort}, {@nodelalloc}, {@dioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@noblock_validity}, {@grpid}, {@acl}, {@nodiscard}]}, 0x1, 0x627, &(0x7f0000000e00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0xff}, 0x3c, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x2, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xf40, 0x800, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 1.908053689s ago: executing program 5 (id=918): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r1, 0x8000) 1.640814077s ago: executing program 0 (id=919): syz_open_procfs(0x0, 0x0) fchmod(0xffffffffffffffff, 0x1) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x80010, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='unhide,iocharset=cp949\x00\x00\x00\x00=forget,session=00000000000000004072,noadinicb,anchor=00000000000000000000,uidOforget,\x00'], 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x113) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setpipe(r2, 0x407, 0xffffffffffffff53) preadv2(r1, &(0x7f0000001800)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1, 0xffffff80, 0x9, 0xa) 1.613948598s ago: executing program 5 (id=920): socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) 1.263987839s ago: executing program 5 (id=921): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0x8, 0x6}, @window={0x3, 0xfffe}, @mss={0x2, 0x9}, @sack_perm, @sack_perm, @window={0x3, 0x6, 0x7}, @sack_perm, @timestamp], 0x8) sendto$inet(r0, &(0x7f0000002200)="1d80", 0x2, 0x8000, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 1.111525024s ago: executing program 8 (id=922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 980.837778ms ago: executing program 5 (id=923): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) shutdown(r1, 0x1) 0s ago: executing program 5 (id=924): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfd, 0xc41, &(0x7f0000001b80)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000002c0)=0x100000, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): g VLAN 0 to HW filter on device batadv0 [ 85.264700][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.273363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.312346][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.322191][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.341216][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.361273][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.381051][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.393286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.441538][ T4275] device veth0_vlan entered promiscuous mode [ 85.462214][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.475464][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.492221][ T4279] device veth0_vlan entered promiscuous mode [ 85.506900][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.518833][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.528776][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.538759][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.559100][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.583253][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.602232][ T4276] device veth0_vlan entered promiscuous mode [ 85.613967][ T4275] device veth1_vlan entered promiscuous mode [ 85.656379][ T4279] device veth1_vlan entered promiscuous mode [ 85.669392][ T4276] device veth1_vlan entered promiscuous mode [ 85.714299][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.742768][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.759572][ T4275] device veth0_macvtap entered promiscuous mode [ 85.798021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.812823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.839124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.856825][ T4275] device veth1_macvtap entered promiscuous mode [ 85.868525][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.880332][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.891265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.905156][ T4279] device veth0_macvtap entered promiscuous mode [ 85.931918][ T4279] device veth1_macvtap entered promiscuous mode [ 85.948284][ T4276] device veth0_macvtap entered promiscuous mode [ 85.962903][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.974167][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.982979][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.991330][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.998815][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.016969][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.029519][ T4276] device veth1_macvtap entered promiscuous mode [ 86.040540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.049498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.063932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.083205][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.105558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.115151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.125137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.134587][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.144739][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.156132][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.168391][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.181325][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 86.187393][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 86.193624][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 86.193652][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 86.199639][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 86.214085][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.225323][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.254440][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.264474][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.274121][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.283196][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.292166][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.305215][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.315103][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.324156][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.334355][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.344422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.365520][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.379247][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.400514][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.416072][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.427748][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.445547][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.457871][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.471881][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.481053][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.489798][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.520765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.529565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.544970][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.555564][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.567037][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.584717][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.597238][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.637983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.653382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.666948][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.683345][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.693885][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.704068][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.716539][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.727563][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.884562][ T4281] device veth0_vlan entered promiscuous mode [ 86.917873][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.932985][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.961606][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.981711][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.007719][ T4281] device veth1_vlan entered promiscuous mode [ 87.094286][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.109907][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.155586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.164065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.191764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.230570][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.232742][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.238597][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.259140][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.277715][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.286062][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.296696][ T4281] device veth0_macvtap entered promiscuous mode [ 87.318246][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.329961][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.339886][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.358371][ T4281] device veth1_macvtap entered promiscuous mode [ 87.365496][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.386861][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.427260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.461436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.485218][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.488138][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.525842][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.530668][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.557922][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.570775][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.581391][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.600784][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.642505][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.668894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.727888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.739069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.761462][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.777516][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.797387][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.808075][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.823845][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.839383][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.857267][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.884668][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.902099][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.919899][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.929138][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.945981][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.959243][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.985303][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.994747][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.006658][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.018089][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.036820][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.090322][ T4362] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 88.213778][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.251324][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.261197][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 88.267279][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 88.274667][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 88.274700][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 88.286481][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 88.331550][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.381992][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.438116][ T4282] device veth0_vlan entered promiscuous mode [ 88.474464][ T4371] bridge0: port 3(vlan2) entered blocking state [ 88.508784][ T4371] bridge0: port 3(vlan2) entered disabled state [ 88.524591][ T4371] device vlan2 entered promiscuous mode [ 88.568817][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.679997][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.702915][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.722479][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.754651][ T4374] device bridge_slave_1 left promiscuous mode [ 88.768182][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.789342][ T4374] bond0: (slave bond_slave_0): Releasing backup interface [ 88.843539][ T4374] bond0: (slave bond_slave_1): Releasing backup interface [ 88.921579][ T4374] team0: Port device team_slave_0 removed [ 88.989255][ T4374] team0: Port device team_slave_1 removed [ 89.018648][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.031601][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.048637][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.068945][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.133161][ T4374] device vlan2 left promiscuous mode [ 89.144550][ T4374] device bridge_slave_0 left promiscuous mode [ 89.158582][ T4374] bridge0: port 3(vlan2) entered disabled state [ 89.190773][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.230450][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.269903][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.361980][ T4282] device veth1_vlan entered promiscuous mode [ 89.466747][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.482303][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.496224][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.561831][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.594217][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.609126][ T4282] device veth0_macvtap entered promiscuous mode [ 89.632428][ T4282] device veth1_macvtap entered promiscuous mode [ 89.677073][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.695175][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.714093][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.728016][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.736176][ T4379] loop0: detected capacity change from 0 to 1024 [ 89.759228][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.789760][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.828947][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.858291][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.898589][ T4379] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.913366][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.942576][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.971450][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.983062][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.996912][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.009494][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.067194][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.078658][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.090149][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.117723][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.132261][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.147618][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.167408][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.178038][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.196010][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.206446][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.212383][ T4386] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7546266866099511129 [ 90.257453][ T26] audit: type=1804 audit(1780944802.848:2): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.8" name="/newroot/1/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 90.259518][ T4379] EXT4-fs error (device loop0) in ext4_setattr:5695: Out of memory [ 90.458060][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.479272][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.523124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.578085][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.594591][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.631727][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.660323][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 90.712762][ T4394] device bridge1 entered promiscuous mode [ 90.877417][ T4398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 91.419574][ T4415] loop0: detected capacity change from 0 to 512 [ 92.020391][ C0] sched: RT throttling activated [ 92.037536][ T7] cfg80211: failed to load regulatory.db [ 92.050160][ T4406] loop1: detected capacity change from 0 to 131072 [ 92.189598][ T4428] netlink: 'syz.4.21': attribute type 11 has an invalid length. [ 92.230667][ T4406] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.300799][ T4406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.323351][ T4435] loop2: detected capacity change from 0 to 256 [ 92.335720][ T4435] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.351949][ T4406] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 92.369317][ T26] audit: type=1800 audit(1780944804.958:3): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 92.370008][ T4435] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 92.401016][ T4406] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 92.463549][ T4437] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 92.517380][ T4437] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=fff70000, run fsck to fix. [ 92.561748][ T4435] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 92.728225][ T4441] netlink: 'syz.0.24': attribute type 3 has an invalid length. [ 92.793356][ T4441] netlink: 'syz.0.24': attribute type 3 has an invalid length. [ 93.000576][ T4320] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.152991][ C1] Unknown status report in ack skb [ 93.200505][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 93.233894][ T4320] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.259236][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.285374][ T4320] usb 5-1: Product: syz [ 93.327881][ T4320] usb 5-1: Manufacturer: syz [ 93.350693][ T4320] usb 5-1: SerialNumber: syz [ 93.390303][ T4320] usb 5-1: config 0 descriptor?? [ 93.431373][ T4453] Illegal XDP return value 4294967294 on prog (id 5) dev syz_tun, expect packet loss! [ 93.746607][ T4465] loop2: detected capacity change from 0 to 8 [ 93.835056][ T4465] SQUASHFS error: xz decompression failed, data probably corrupt [ 93.843443][ T4465] SQUASHFS error: Failed to read block 0x108: -5 [ 93.849995][ T4465] SQUASHFS error: Unable to read metadata cache entry [106] [ 93.857679][ T4465] SQUASHFS error: Unable to read inode 0x11f [ 94.466331][ T4320] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.091546][ T4320] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 96.141888][ T4320] usb 5-1: USB disconnect, device number 2 [ 96.509721][ T4492] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.894175][ T4501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 97.012510][ T4505] process 'syz.1.44' launched './file0' with NULL argv: empty string added [ 97.054366][ T4509] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 97.269604][ T4505] Invalid argument reading file caps for ./file0 [ 98.057198][ T4515] loop3: detected capacity change from 0 to 720 [ 98.213926][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49'. [ 98.489178][ T4527] loop3: detected capacity change from 0 to 128 [ 98.592727][ T4531] loop2: detected capacity change from 0 to 1764 [ 98.622432][ T4527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.664060][ T4540] ======================================================= [ 98.664060][ T4540] WARNING: The mand mount option has been deprecated and [ 98.664060][ T4540] and is ignored by this kernel. Remove the mand [ 98.664060][ T4540] option from the mount to silence this warning. [ 98.664060][ T4540] ======================================================= [ 98.767599][ T4527] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.373375][ T4527] syz.3.52 (pid 4527) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 99.668493][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 99.836454][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.891837][ T22] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.087544][ T4551] loop2: detected capacity change from 0 to 4096 [ 100.171743][ T4551] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.715186][ T4551] EXT4-fs: Ignoring removed orlov option [ 100.751071][ T4551] EXT4-fs (loop2): Test dummy encryption mode enabled [ 100.811540][ T4551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.048425][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 102.575811][ T4595] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 102.890936][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 103.005925][ T4599] Zero length message leads to an empty skb [ 104.376162][ T4618] loop1: detected capacity change from 0 to 512 [ 104.413944][ T4618] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.463528][ T4616] loop4: detected capacity change from 0 to 512 [ 104.511822][ T4616] EXT4-fs: Ignoring removed i_version option [ 104.523866][ T4616] EXT4-fs: Ignoring removed oldalloc option [ 104.562465][ T4616] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.629185][ T4618] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.82: corrupted inode contents [ 104.664931][ T4618] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #16: comm syz.1.82: mark_inode_dirty error [ 104.686819][ T4618] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.82: corrupted inode contents [ 104.719136][ T4618] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.82: mark_inode_dirty error [ 104.767498][ T4618] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.82: corrupted inode contents [ 104.831393][ T4618] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 104.865835][ T4618] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.82: corrupted inode contents [ 104.909010][ T4618] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.82: mark_inode_dirty error [ 104.939944][ T4618] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 104.978716][ T4618] EXT4-fs (loop1): 1 truncate cleaned up [ 104.993754][ T4467] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.995152][ T4618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.036412][ T4618] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.058210][ T4467] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 1 [ 105.138961][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 105.368072][ T4640] loop0: detected capacity change from 0 to 4096 [ 105.469725][ T4640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.625194][ T4650] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.684626][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 105.765455][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 106.476492][ T4665] loop4: detected capacity change from 0 to 1024 [ 108.727722][ T4687] binder: 4684:4687 ioctl c0306201 200000000080 returned -14 [ 108.765155][ T4687] binder: 4684:4687 ioctl c0306201 2000000003c0 returned -14 [ 108.950054][ T4697] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.159488][ T4701] loop4: detected capacity change from 0 to 4096 [ 109.194677][ T4701] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 109.467523][ T4282] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 109.489116][ T4282] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 109.500877][ T4282] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 111.978908][ T4742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.122'. [ 112.276837][ T4753] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 112.501670][ T4756] device macvlan2 entered promiscuous mode [ 112.539175][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 112.600979][ T4760] overlayfs: failed to clone upperpath [ 112.619804][ T4761] device macvlan2 entered promiscuous mode [ 112.763913][ T4763] loop1: detected capacity change from 0 to 512 [ 112.771263][ T4765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.131'. [ 112.808536][ T4763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.841795][ T4763] EXT4-fs (loop1): 1 truncate cleaned up [ 112.855488][ T4763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.911282][ T4763] loop1: detected capacity change from 512 to 0 [ 112.917840][ T4765] netlink: 36 bytes leftover after parsing attributes in process `syz.3.131'. [ 112.940729][ C0] I/O error, dev loop1, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 112.950329][ T4763] EXT4-fs error (device loop1): __ext4_find_entry:1685: inode #2: comm syz.1.130: reading directory lblock 0 [ 112.956096][ C0] I/O error, dev loop1, sector 56 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.972122][ C0] Buffer I/O error on dev loop1, logical block 28, async page read [ 112.980093][ C0] I/O error, dev loop1, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.989389][ C0] Buffer I/O error on dev loop1, logical block 29, async page read [ 112.997388][ C0] I/O error, dev loop1, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.006685][ C0] Buffer I/O error on dev loop1, logical block 30, async page read [ 113.014672][ C0] I/O error, dev loop1, sector 62 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.023962][ C0] Buffer I/O error on dev loop1, logical block 31, async page read [ 113.032221][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 113.074306][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 113.083931][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 113.093889][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 113.102214][ T4763] EXT4-fs (loop1): I/O error while writing superblock [ 113.102336][ C0] I/O error, dev loop1, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 113.153120][ T4774] EXT4-fs error (device loop1): __ext4_find_entry:1685: inode #2: comm syz.1.130: reading directory lblock 0 [ 113.271295][ T4700] loop: Write error at byte offset 9223372036854776831, length 1024. [ 113.295114][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 113.304877][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 113.314402][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 113.322861][ T4774] EXT4-fs (loop1): I/O error while writing superblock [ 113.391204][ T4786] loop0: detected capacity change from 0 to 512 [ 113.417159][ T4279] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 113.462683][ T4786] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.524777][ T4786] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.593022][ T4279] EXT4-fs error (device loop1): ext4_get_inode_loc:4658: inode #2: block 5: comm syz-executor: unable to read itable block [ 113.626971][ T4786] EXT4-fs (loop0): unmounting filesystem. [ 113.672821][ T4699] loop: Write error at byte offset 9223372036854776831, length 1024. [ 113.696283][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 113.704730][ T4279] EXT4-fs (loop1): I/O error while writing superblock [ 113.720449][ T4279] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: IO failure [ 113.749741][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 113.767002][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 113.775366][ T4279] EXT4-fs (loop1): I/O error while writing superblock [ 113.802015][ T4279] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 113.841574][ T4330] loop: Write error at byte offset 9223372036854776831, length 1024. [ 113.850581][ T4795] kvm: vcpu 0: requested 131088 ns lapic timer period limited to 200000 ns [ 113.851140][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 113.868232][ T4279] EXT4-fs (loop1): I/O error while writing superblock [ 113.952380][ T4330] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4643: inode #2: block 5: comm kworker/u4:6: unable to read itable block [ 113.979244][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 114.001263][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 114.009663][ T4330] EXT4-fs (loop1): I/O error while writing superblock [ 114.023466][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 114.037777][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 114.057729][ T4279] EXT4-fs (loop1): I/O error while writing superblock [ 114.130004][ T4802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 114.145687][ T4782] sctp: failed to load transform for md5: -2 [ 114.157830][ T4802] bridge0: port 1(syz_tun) entered blocking state [ 114.180838][ T4802] bridge0: port 1(syz_tun) entered disabled state [ 114.250072][ T4802] device syz_tun entered promiscuous mode [ 114.340538][ T4802] bridge0: port 1(syz_tun) entered blocking state [ 114.347600][ T4802] bridge0: port 1(syz_tun) entered forwarding state [ 115.520414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.560425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 115.580414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 115.650409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 115.750418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 115.770424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 115.820416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 115.876977][ T4823] syz.0.148 uses obsolete (PF_INET,SOCK_PACKET) [ 116.273707][ T4813] syz.4.145 (4813): drop_caches: 2 [ 116.634248][ T4834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.152'. [ 116.738653][ T4838] overlayfs: failed to clone upperpath [ 117.159397][ T4839] loop4: detected capacity change from 0 to 8 [ 117.396526][ T4839] SQUASHFS error: lzo decompression failed, data probably corrupt [ 117.420946][ T4839] SQUASHFS error: Failed to read block 0x144: -5 [ 117.431623][ T4839] SQUASHFS error: Unable to read metadata cache entry [142] [ 117.442724][ T4839] SQUASHFS error: Unable to read inode 0x11f [ 117.541874][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.554139][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.567607][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.576437][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.584558][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 117.600486][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.808412][ T4863] device bond1 entered promiscuous mode [ 117.838967][ T4868] device vcan1 entered promiscuous mode [ 117.885971][ T4868] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 117.925450][ T4868] bond1: (slave vcan1): Error -95 calling set_mac_address [ 118.269590][ T4855] chnl_net:caif_netlink_parms(): no params data found [ 118.474661][ T26] audit: type=1800 audit(1780944831.068:4): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.162" name="/" dev="fuse" ino=2 res=0 errno=0 [ 118.515629][ T4855] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.523086][ T4855] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.531407][ T4855] device bridge_slave_0 entered promiscuous mode [ 118.542408][ T4855] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.549791][ T4855] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.585405][ T4855] device bridge_slave_1 entered promiscuous mode [ 118.633622][ T4855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.670129][ T4855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.787142][ T4855] team0: Port device team_slave_0 added [ 118.811848][ T4855] team0: Port device team_slave_1 added [ 118.875326][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.893412][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.927964][ T4855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.957928][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.972743][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.010168][ T4855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.069862][ T4855] device hsr_slave_0 entered promiscuous mode [ 119.082652][ T4855] device hsr_slave_1 entered promiscuous mode [ 119.090049][ T4855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.104453][ T4855] Cannot create hsr debugfs directory [ 119.558253][ T4855] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 119.632467][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 119.713132][ T4855] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.231931][ T4855] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.271841][ T4855] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.559373][ T4855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.581810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.606919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.637416][ T4855] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.671811][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.704876][ T4939] overlayfs: failed to clone upperpath [ 120.711294][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.750214][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.757447][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.797600][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.836325][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.859687][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.896903][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.904141][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.944609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.983607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.039293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.072457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.102241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.131157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.180291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.209332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.229375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.251548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.271655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.305383][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.711179][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 121.909241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.929423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.981376][ T4855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.144754][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.181110][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.194448][ T4986] netlink: 452 bytes leftover after parsing attributes in process `syz.2.200'. [ 123.246952][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.271809][ T26] audit: type=1326 audit(1780944835.858:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f390cb9ce59 code=0x0 [ 123.291837][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.331309][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.355189][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.381756][ T4855] device veth0_vlan entered promiscuous mode [ 123.418624][ T4855] device veth1_vlan entered promiscuous mode [ 123.503079][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.528120][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.547343][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.601407][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.641878][ T4855] device veth0_macvtap entered promiscuous mode [ 123.670028][ T4855] device veth1_macvtap entered promiscuous mode [ 123.737756][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.777411][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.785027][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 123.801132][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.808721][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.927841][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.942850][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.960141][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.976257][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.993413][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.010506][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.029433][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.067278][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.079099][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.108031][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.131749][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.167491][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.216607][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.240496][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.258054][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.269919][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.284541][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.330841][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.339532][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.358406][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.624202][ T4855] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.660474][ T4855] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.669274][ T4855] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.723899][ T4855] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.991879][ T5019] loop4: detected capacity change from 0 to 512 [ 125.007229][ T4699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.035268][ T4699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.067968][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.098636][ T5019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.217175][ T4699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.250952][ T4699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.258612][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.365369][ T5030] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.211: bg 0: bad block bitmap checksum [ 125.527629][ T5035] netlink: 128 bytes leftover after parsing attributes in process `syz.2.215'. [ 125.547457][ T5040] netlink: 'syz.5.153': attribute type 4 has an invalid length. [ 125.602924][ T5040] netlink: 'syz.5.153': attribute type 17 has an invalid length. [ 125.641739][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 125.690899][ T5030] syz.4.211 (5030) used greatest stack depth: 18488 bytes left [ 125.860574][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 126.122037][ T4282] EXT4-fs error (device loop4): ext4_lookup:1858: inode #17: comm syz-executor: iget: checksum invalid [ 126.151136][ T4321] syzkaller0: tun_net_xmit 76 [ 126.158025][ T4321] syzkaller0: tun_net_xmit 48 [ 126.186844][ T4282] EXT4-fs error (device loop4): ext4_lookup:1858: inode #17: comm syz-executor: iget: checksum invalid [ 126.199104][ T4285] syzkaller0: tun_net_xmit 76 [ 126.586810][ T14] syzkaller0: tun_net_xmit 76 [ 126.618499][ T5037] syzkaller0: delete flow: hash 940182303 index 1 [ 129.585184][ T5082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.592809][ T5082] IPv6: NLM_F_CREATE should be set when creating new route [ 129.806026][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 129.872167][ T5102] capability: warning: `syz.2.239' uses 32-bit capabilities (legacy support in use) [ 130.127306][ T5085] bridge0: port 1(syz_tun) entered disabled state [ 130.783127][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.792701][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.800569][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.809631][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.821848][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.829257][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.561972][ T5085] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.571572][ T5085] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.582264][ T5085] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.591470][ T5085] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.870711][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.967077][ T5119] loop3: detected capacity change from 0 to 1024 [ 131.996611][ T5119] EXT4-fs: Ignoring removed bh option [ 132.032996][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.050108][ T5123] netlink: 32 bytes leftover after parsing attributes in process `syz.5.247'. [ 132.128683][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.142086][ T5119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.156074][ T5123] netlink: 32 bytes leftover after parsing attributes in process `syz.5.247'. [ 132.254595][ T5119] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 132.267329][ T5119] EXT4-fs error (device loop3): ext4_ext_tree_init:879: inode #18: comm syz.3.246: mark_inode_dirty error [ 132.280165][ T5119] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 132.291208][ T5119] EXT4-fs error (device loop3): __ext4_new_inode:1355: inode #18: comm syz.3.246: mark_inode_dirty error [ 132.305265][ T5119] EXT4-fs error (device loop3) in __ext4_new_inode:1357: Corrupt filesystem [ 132.322925][ T5119] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 132.344193][ T5119] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #18: comm syz.3.246: mark_inode_dirty error [ 132.371466][ T5119] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 132.399980][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.512204][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 132.752699][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 132.823768][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850526][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.909057][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 133.059624][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.067033][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.076028][ T5114] device bridge_slave_0 entered promiscuous mode [ 133.086741][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.094300][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.102841][ T5114] device bridge_slave_1 entered promiscuous mode [ 133.159382][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.217534][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.542737][ T5114] team0: Port device team_slave_0 added [ 133.574885][ T5114] team0: Port device team_slave_1 added [ 133.801749][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.808780][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.876409][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.947559][ T5153] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.010994][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.018074][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.113469][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.434174][ T5114] device hsr_slave_0 entered promiscuous mode [ 134.458259][ T5114] device hsr_slave_1 entered promiscuous mode [ 134.500657][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.549829][ T5114] Cannot create hsr debugfs directory [ 134.980488][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 135.487784][ T5103] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 135.720502][ T5103] usb 4-1: Using ep0 maxpacket: 8 [ 135.732115][ T5103] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.746531][ T5103] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 135.768328][ T5103] usb 4-1: config 179 has no interface number 0 [ 135.774933][ T5103] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.790619][ T5103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.895460][ T33] device hsr_slave_0 left promiscuous mode [ 135.912654][ T33] device hsr_slave_1 left promiscuous mode [ 135.945205][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.957122][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.999303][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.011845][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.046929][ T33] device bridge_slave_1 left promiscuous mode [ 136.058803][ T3601] usb 4-1: USB disconnect, device number 2 [ 136.084998][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.111717][ T33] device bridge_slave_0 left promiscuous mode [ 136.118963][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.236208][ T33] device veth1_macvtap left promiscuous mode [ 136.248616][ T33] device veth0_macvtap left promiscuous mode [ 136.262894][ T33] device veth1_vlan left promiscuous mode [ 136.281457][ T33] device veth0_vlan left promiscuous mode [ 137.060795][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 137.450280][ T33] team0 (unregistering): Port device team_slave_1 removed [ 137.512794][ T33] team0 (unregistering): Port device team_slave_0 removed [ 137.559825][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.616459][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.136073][ T33] bond0 (unregistering): Released all slaves [ 138.319779][ T5199] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.390795][ T5216] tipc: Failed to remove unknown binding: 66,0,0/0:2048936483/2048936484 [ 138.429153][ T5216] tipc: Failed to remove unknown binding: 66,0,0/0:2048936483/2048936484 [ 138.474154][ T5114] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.523333][ T5114] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.594314][ T5114] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.653350][ T5114] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 139.011670][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.063747][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.083993][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.114877][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.140513][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 139.164845][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.187173][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.226121][ T4967] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.233385][ T4967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.305217][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.339529][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.383199][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.407526][ T4967] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.414806][ T4967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.437643][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.482710][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.497738][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.521348][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.568267][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.594637][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.629419][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.661426][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.707195][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.760113][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.835984][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.862645][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.901324][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.116308][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.138504][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.174513][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.322476][ T5242] loop5: detected capacity change from 0 to 32768 [ 141.350057][ T5242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.275 (5242) [ 141.478922][ T5242] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.493509][ T5273] fuse: Bad value for 'fd' [ 141.519713][ T5242] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 141.546276][ T5242] BTRFS info (device loop5): setting nodatasum [ 141.565489][ T5242] BTRFS info (device loop5): force zlib compression, level 3 [ 141.588228][ T5242] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 141.622933][ T5242] BTRFS info (device loop5): use lzo compression, level 0 [ 141.644394][ T5242] BTRFS info (device loop5): turning on flush-on-commit [ 141.668536][ T5242] BTRFS info (device loop5): enabling auto defrag [ 141.694035][ T5242] BTRFS info (device loop5): max_inline at 4096 [ 141.717492][ T5242] BTRFS info (device loop5): using free space tree [ 141.774042][ T5284] tipc: Failed to remove unknown binding: 66,0,0/0:4136335717/4136335718 [ 141.785284][ T5284] tipc: Failed to remove unknown binding: 66,0,0/0:4136335717/4136335718 [ 141.912423][ T5293] fuse: Bad value for 'fd' [ 142.109616][ T5242] BTRFS info (device loop5): enabling ssd optimizations [ 142.753040][ T5328] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 142.808154][ T5328] team0: Port device macvlan1 added [ 142.875059][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.901259][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.981857][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.012651][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.071194][ T5114] device veth0_vlan entered promiscuous mode [ 143.101550][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.119308][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.164689][ T5114] device veth1_vlan entered promiscuous mode [ 143.221246][ T4855] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.255831][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.282357][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.298369][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.336526][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.397972][ T5114] device veth0_macvtap entered promiscuous mode [ 143.503336][ T5114] device veth1_macvtap entered promiscuous mode [ 143.618690][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.669649][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.710108][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.722324][ T5347] binder: 5346:5347 ioctl c0306201 200000000080 returned -14 [ 143.749336][ T5347] binder: 5346:5347 ioctl c0306201 2000000003c0 returned -14 [ 143.758035][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.776668][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.821982][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.863223][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.897174][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.925816][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.960479][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.036949][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.089110][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.143555][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.163945][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.212539][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.267134][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.305597][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.346799][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.380498][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.414087][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.445032][ T5114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.475985][ T5114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.497145][ T5114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.515507][ T5114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.472899][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.490488][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.548872][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.644316][ T4967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.652397][ T4967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.685220][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.479737][ T5406] loop6: detected capacity change from 0 to 4096 [ 147.824211][ T5406] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 148.331341][ T5114] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 148.459180][ T5114] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 148.549580][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 148.563883][ T5114] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 148.656533][ T5114] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 148.786865][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 148.859071][ T5114] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 148.880121][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.966832][ T5439] loop3: detected capacity change from 0 to 256 [ 148.991855][ T5439] exfat: Unknown parameter '(' [ 149.110107][ T5114] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 149.307254][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 149.422476][ T5114] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 149.657765][ T5114] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 149.693846][ T5450] binder: 5449:5450 ioctl c018620c 2000000002c0 returned -22 [ 149.820882][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 149.931490][ T5114] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 150.130220][ T5114] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 150.293793][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 150.407044][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 150.502952][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 150.541746][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 150.570458][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 150.620410][ T5114] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 150.678884][ T5472] bridge0: port 3(vlan2) entered blocking state [ 150.722128][ T5472] bridge0: port 3(vlan2) entered disabled state [ 150.777957][ T5472] device vlan2 entered promiscuous mode [ 150.816879][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.885178][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.930807][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.956910][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.126361][ T5476] loop5: detected capacity change from 0 to 128 [ 151.142873][ T5473] device bridge_slave_1 left promiscuous mode [ 151.170676][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.186888][ T5476] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.235438][ T5476] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.294810][ T5473] bond0: (slave bond_slave_0): Releasing backup interface [ 151.392096][ T5473] bond0: (slave bond_slave_1): Releasing backup interface [ 151.489801][ T4967] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.558451][ T5473] team0: Port device team_slave_0 removed [ 151.618760][ T5473] team0: Port device team_slave_1 removed [ 151.648556][ T5473] device vlan2 left promiscuous mode [ 151.675600][ T5473] device bridge_slave_0 left promiscuous mode [ 151.692205][ T5473] bridge0: port 3(vlan2) entered disabled state [ 152.001471][ T5114] EXT4-fs (loop6): unmounting filesystem. [ 152.196294][ T4693] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.280818][ T5490] netlink: 'syz.5.341': attribute type 1 has an invalid length. [ 152.297250][ T4280] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 152.438953][ T5493] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 152.499572][ T4693] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.586543][ T5506] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 152.598938][ T5499] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 152.606373][ T5506] netlink: 'syz.3.347': attribute type 2 has an invalid length. [ 152.701362][ T4693] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.892586][ T4693] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.017413][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.349'. [ 153.092559][ T5517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.349'. [ 153.113193][ T5517] netlink: 2092 bytes leftover after parsing attributes in process `syz.5.349'. [ 153.275628][ C1] Unknown status report in ack skb [ 153.659011][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.677938][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.688032][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.724609][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.732525][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.741787][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.230465][ T4320] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.420905][ T4320] usb 6-1: Using ep0 maxpacket: 8 [ 154.429046][ T4320] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 154.476084][ T4320] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 154.513835][ T4320] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.524079][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.532391][ T4320] usb 6-1: Product: syz [ 154.536750][ T4320] usb 6-1: Manufacturer: syz [ 154.541960][ T4320] usb 6-1: SerialNumber: syz [ 154.766872][ T4320] cdc_ncm 6-1:1.0: bind() failure [ 154.812242][ T4320] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 154.839651][ T4320] cdc_ncm 6-1:1.1: bind() failure [ 154.892257][ T4320] usb 6-1: USB disconnect, device number 2 [ 155.018336][ T5530] chnl_net:caif_netlink_parms(): no params data found [ 155.062860][ T5566] netlink: 'syz.2.363': attribute type 11 has an invalid length. [ 155.392658][ T5579] loop3: detected capacity change from 0 to 256 [ 155.479500][ T5579] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.552434][ T5579] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 155.652124][ T5579] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 155.727603][ T5530] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.745326][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.766809][ T5530] device bridge_slave_0 entered promiscuous mode [ 155.780622][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 155.824644][ T5587] netlink: 'syz.5.366': attribute type 3 has an invalid length. [ 155.845073][ T5587] netlink: 'syz.5.366': attribute type 3 has an invalid length. [ 155.898459][ T5530] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.923575][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.957748][ T5530] device bridge_slave_1 entered promiscuous mode [ 156.129307][ T5592] loop3: detected capacity change from 0 to 256 [ 156.186768][ T5592] exfat: Deprecated parameter 'utf8' [ 156.222763][ T5592] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 156.616648][ T4693] device hsr_slave_0 left promiscuous mode [ 157.297525][ T4693] device hsr_slave_1 left promiscuous mode [ 157.448042][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.471396][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.540028][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.569018][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.590874][ T5605] overlayfs: failed to clone upperpath [ 157.637246][ T4693] device bridge_slave_1 left promiscuous mode [ 157.650685][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.680185][ T4693] device bridge_slave_0 left promiscuous mode [ 157.697646][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.774417][ T4693] device veth1_macvtap left promiscuous mode [ 157.792431][ T4693] device veth0_macvtap left promiscuous mode [ 157.809018][ T4693] device veth1_vlan left promiscuous mode [ 157.817888][ T4693] device veth0_vlan left promiscuous mode [ 157.860851][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 158.029603][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 158.085876][ T5625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 158.693555][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 158.739938][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 158.785494][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.831911][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.155030][ T4693] bond0 (unregistering): Released all slaves [ 159.247911][ T5530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.271344][ T5530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.347647][ T5530] team0: Port device team_slave_0 added [ 159.399166][ T5530] team0: Port device team_slave_1 added [ 159.529075][ T5530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.538041][ T5530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.617341][ T5530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.654584][ T5530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.678929][ T5530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.715591][ T5530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.950544][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 160.023846][ T5530] device hsr_slave_0 entered promiscuous mode [ 160.055931][ T5530] device hsr_slave_1 entered promiscuous mode [ 160.080042][ T5530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.881487][ T5530] Cannot create hsr debugfs directory [ 161.300373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 161.480368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 161.660368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 162.020691][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 162.139356][ T5530] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 162.206401][ T5530] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 162.244252][ T5530] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 162.281734][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 162.363464][ T5530] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 162.687510][ T5530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.747269][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.761490][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.971749][ T5530] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.249435][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.345453][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.488024][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.495281][ T4694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.689882][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.703155][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.760954][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.870597][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.877793][ T4968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.955296][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.985979][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.044304][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.070154][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.108997][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.135591][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.172530][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.201617][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.223008][ T5694] loop3: detected capacity change from 0 to 4096 [ 164.230845][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.273171][ T5530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.298039][ T5694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.331057][ T5530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.372818][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 164.394989][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.424213][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.735277][ T26] audit: type=1800 audit(1780944877.318:6): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.392" name="/" dev="fuse" ino=4 res=0 errno=0 [ 164.940606][ T5709] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.028592][ T5712] loop5: detected capacity change from 0 to 1024 [ 165.761674][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.787528][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.840846][ T5530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.247604][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 167.706444][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.741353][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.819511][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.874856][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.894203][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.921876][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.946819][ T5530] device veth0_vlan entered promiscuous mode [ 167.989704][ T5530] device veth1_vlan entered promiscuous mode [ 168.071190][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.091372][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.111623][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.138354][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.160310][ T5530] device veth0_macvtap entered promiscuous mode [ 168.206073][ T5530] device veth1_macvtap entered promiscuous mode [ 168.259740][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.287935][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.350385][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.392368][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.420404][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.457328][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.541679][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.578689][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.600290][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.639419][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.684653][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.717091][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.750509][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.788645][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.846367][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.922036][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.978521][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.016191][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.068104][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.077941][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.113689][ T5530] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.123096][ T5530] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.169314][ T5530] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.189976][ T5775] netlink: 28 bytes leftover after parsing attributes in process `syz.5.411'. [ 169.200215][ T5530] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.467882][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.513687][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.537781][ T5782] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 169.658350][ T5782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.785663][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.874533][ T5789] bond2: (slave ip6gretap1): making interface the new active one [ 169.917809][ T5789] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 170.025648][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.057717][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.087223][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.823434][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.345'. [ 173.926193][ T5707] Set syz1 is full, maxelem 65536 reached [ 176.017138][ T5917] syz.7.446 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.240135][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.466'. [ 180.404427][ T6007] device syz_tun left promiscuous mode [ 180.412118][ T6007] bridge0: port 1(syz_tun) entered disabled state [ 180.531496][ T6007] team0: Port device macvlan1 removed [ 181.814017][ T6039] loop5: detected capacity change from 0 to 8 [ 181.913435][ T6039] SQUASHFS error: lzo decompression failed, data probably corrupt [ 181.935627][ T6039] SQUASHFS error: Failed to read block 0x144: -5 [ 181.945419][ T6039] SQUASHFS error: Unable to read metadata cache entry [142] [ 181.973985][ T6039] SQUASHFS error: Unable to read inode 0x11f [ 182.960458][ T5106] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 183.172097][ T5106] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.194445][ T5106] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.231280][ T5106] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.267281][ T5106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.318106][ T5106] hub 4-1:4.0: USB hub found [ 183.511955][ T5106] hub 4-1:4.0: 2 ports detected [ 183.516943][ T5106] usb 4-1: selecting invalid altsetting 1 [ 183.546046][ T5106] hub 4-1:4.0: Using single TT (err -22) [ 183.957455][ T5106] usb 4-1: USB disconnect, device number 3 [ 184.703298][ T6089] netlink: 128 bytes leftover after parsing attributes in process `syz.0.484'. [ 185.261983][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 185.334103][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 185.434565][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 185.706881][ T6118] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 187.782675][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 189.006191][ T6183] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 189.055419][ T6183] pit: kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 189.085222][ T6183] pit: kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 189.107393][ T6183] pit: kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 189.131823][ T6183] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 189.150828][ T6183] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 189.174159][ T6183] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 189.183667][ T6183] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 189.210513][ T6183] pit: kvm: requested 168457 ns i8254 timer period limited to 200000 ns [ 189.224275][ T6183] pit: kvm: requested 152533 ns i8254 timer period limited to 200000 ns [ 191.496003][ T26] audit: type=1804 audit(1780946428.096:7): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.520" name="/newroot/23/file0" dev="fuse" ino=1 res=1 errno=0 [ 191.637318][ T6238] overlayfs: failed to resolve './file0': -2 [ 192.591221][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 192.631711][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 192.702703][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 193.528213][ T6281] overlayfs: failed to clone upperpath [ 193.729951][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'. [ 194.263146][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269565][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.384491][ T6314] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 196.404971][ T6314] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 196.425802][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 196.556285][ T6317] loop5: detected capacity change from 0 to 8192 [ 196.565302][ T6314] bond0: (slave bridge0): Releasing backup interface [ 197.296632][ T6333] capability: warning: `syz.0.539' uses deprecated v2 capabilities in a way that may be insecure [ 197.358799][ T6333] overlayfs: failed to clone upperpath [ 198.221233][ T6355] loop5: detected capacity change from 0 to 1764 [ 203.245045][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.270566][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.279075][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.957081][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.000608][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.008043][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.478458][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.605970][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.680686][ T6414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.700107][ T6414] device bridge_slave_0 left promiscuous mode [ 204.706961][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.734953][ T6414] device bridge_slave_1 left promiscuous mode [ 204.761851][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.828659][ T6414] bond0: (slave bond_slave_0): Releasing backup interface [ 204.902707][ T6414] bond0: (slave bond_slave_1): Releasing backup interface [ 205.019152][ T6414] team0: Port device team_slave_0 removed [ 205.070181][ T6414] team0: Port device team_slave_1 removed [ 205.085700][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.096251][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.117269][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.128248][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.472580][ T6399] chnl_net:caif_netlink_parms(): no params data found [ 205.873809][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.891940][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.912721][ T6399] device bridge_slave_0 entered promiscuous mode [ 205.933781][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.966546][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.061593][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 206.366532][ T6399] device bridge_slave_1 entered promiscuous mode [ 206.693048][ T6399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.702645][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 206.709515][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 206.753129][ T6399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.956678][ T6399] team0: Port device team_slave_0 added [ 206.975672][ T6399] team0: Port device team_slave_1 added [ 207.075612][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.155673][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.243737][ T6399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.284017][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.310525][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.462158][ T6399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.190642][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 208.434133][ T6399] device hsr_slave_0 entered promiscuous mode [ 208.527425][ T6399] device hsr_slave_1 entered promiscuous mode [ 208.571484][ T6399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.579123][ T6399] Cannot create hsr debugfs directory [ 208.758701][ T6482] loop7: detected capacity change from 0 to 1024 [ 208.972553][ T6485] hfsplus: bad catalog entry type [ 209.101588][ T4922] hfsplus: b-tree write err: -5, ino 25 [ 209.107497][ T4922] hfsplus: b-tree write err: -5, ino 4 [ 209.132450][ T4922] hfsplus: b-tree write err: -5, ino 2 [ 209.356921][ T6399] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 209.408126][ T6399] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 209.547653][ T6399] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 209.605467][ T6399] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 209.941375][ T6515] dns_resolver: Unsupported server list version (55) [ 210.262011][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 211.060838][ T6528] loop7: detected capacity change from 0 to 512 [ 211.953574][ T6399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.146938][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.163733][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.176315][ T6399] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.227947][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.317134][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.341698][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 212.352921][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.360093][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.464269][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.539882][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.568102][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.601149][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.608365][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.747539][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.756728][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.766146][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.803501][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.883142][ T6545] tmpfs: Bad value for 'nr_inodes' [ 213.608227][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.743222][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.764136][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.807193][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.846475][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.898233][ T6549] netlink: 'syz.0.586': attribute type 4 has an invalid length. [ 213.926748][ T6555] netlink: 'syz.0.586': attribute type 4 has an invalid length. [ 214.026789][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.036568][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.080905][ T6399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.747894][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.771054][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.817309][ T6399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.372962][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.390702][ T27] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 217.440936][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.610723][ T27] usb 8-1: Using ep0 maxpacket: 8 [ 217.629036][ T27] usb 8-1: config 1 has an invalid interface number: 216 but max is 0 [ 217.641200][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.741879][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.823302][ T27] usb 8-1: config 1 has no interface number 0 [ 217.909911][ T6399] device veth0_vlan entered promiscuous mode [ 217.944097][ T27] usb 8-1: config 1 interface 216 has no altsetting 0 [ 217.968555][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.153933][ T27] usb 8-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7 [ 218.166787][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.242675][ T6399] device veth1_vlan entered promiscuous mode [ 218.257769][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.301350][ T27] usb 8-1: Product: syz [ 218.305595][ T27] usb 8-1: Manufacturer: syz [ 218.327760][ T27] usb 8-1: SerialNumber: syz [ 218.347941][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.380994][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.416373][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.435800][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.464225][ T6399] device veth0_macvtap entered promiscuous mode [ 218.511426][ T6399] device veth1_macvtap entered promiscuous mode [ 218.599435][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.657431][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.688961][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.717178][ T27] usb 8-1: USB disconnect, device number 2 [ 218.720031][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.766801][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.795433][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.898378][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.957813][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.968962][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.979886][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.002818][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.014849][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.025917][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.038194][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.077021][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.611'. [ 219.104600][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.117019][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.410590][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.524072][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.713284][ T6399] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.770519][ T6399] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.809741][ T6399] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.864941][ T6399] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.048105][ T5987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.085515][ T5987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.103350][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.198485][ T4968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.214464][ T4968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.241196][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.026348][ T6702] loop5: detected capacity change from 0 to 4096 [ 221.157561][ T6702] ntfs: volume version 3.1. [ 228.310271][ T6797] tmpfs: Bad value for 'nr_inodes' [ 229.538382][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.7.650'. [ 229.635825][ T6822] bridge1: port 1(dummy0) entered blocking state [ 229.683506][ T6822] bridge1: port 1(dummy0) entered disabled state [ 229.717404][ T6822] device dummy0 entered promiscuous mode [ 229.738624][ T6817] netlink: 'syz.7.650': attribute type 10 has an invalid length. [ 229.759405][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.7.650'. [ 229.809942][ T6817] bridge1: port 1(dummy0) entered blocking state [ 229.816501][ T6817] bridge1: port 1(dummy0) entered forwarding state [ 229.865105][ T6817] bridge1: port 1(dummy0) entered disabled state [ 230.475290][ T6839] netlink: 'syz.2.657': attribute type 4 has an invalid length. [ 231.770682][ T6847] netlink: 'syz.2.657': attribute type 4 has an invalid length. [ 232.530815][ T6872] tmpfs: Bad value for 'nr_inodes' [ 233.160437][ T22] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 233.362536][ T22] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 233.396039][ T22] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 233.432594][ T26] audit: type=1326 audit(1780946470.036:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.2.664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x0 [ 233.441569][ T22] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 233.548393][ T22] usb 8-1: Product: syz [ 233.559745][ T22] usb 8-1: Manufacturer: syz [ 233.585702][ T22] usb 8-1: SerialNumber: syz [ 233.625143][ T22] usb 8-1: config 0 descriptor?? [ 233.856734][ T22] usb 8-1: USB disconnect, device number 3 [ 234.308046][ T4288] Bluetooth: hci2: Invalid handle: 0xff00 > 0x0eff [ 234.319282][ T6894] loop5: detected capacity change from 0 to 256 [ 234.416574][ T6894] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.480487][ T6894] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 234.553015][ T6894] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 235.006619][ T22] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 235.200665][ T22] usb 9-1: Using ep0 maxpacket: 16 [ 235.211718][ T22] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.237457][ T22] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.275048][ T22] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.285581][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.300838][ T22] usb 9-1: Product: syz [ 235.305181][ T22] usb 9-1: Manufacturer: syz [ 235.310871][ T22] usb 9-1: SerialNumber: syz [ 235.540873][ T22] usb 9-1: 0:2 : does not exist [ 235.564009][ T22] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 235.689678][ T22] usb 9-1: USB disconnect, device number 2 [ 235.934471][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.234614][ T6936] device syzkaller0 entered promiscuous mode [ 236.256153][ T6940] tipc: Failed to remove unknown binding: 66,0,0/0:583682241/583682243 [ 236.302633][ T6936] tipc: Started in network mode [ 236.309831][ T6940] tipc: Failed to remove unknown binding: 66,0,0/0:583682241/583682242 [ 236.338786][ T6936] tipc: Node identity 8a4719cdc343, cluster identity 4711 [ 236.359872][ T6940] tipc: Failed to remove unknown binding: 66,0,0/0:583682241/583682243 [ 236.369921][ T6936] tipc: Enabled bearer , priority 0 [ 236.396710][ T6940] tipc: Failed to remove unknown binding: 66,0,0/0:583682241/583682242 [ 236.446680][ T6935] tipc: Resetting bearer [ 236.815670][ T6935] tipc: Disabling bearer [ 239.389664][ T26] audit: type=1326 audit(1780946475.986:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 239.475058][ T26] audit: type=1326 audit(1780946476.016:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 239.509935][ T6987] netlink: 180 bytes leftover after parsing attributes in process `syz.2.680'. [ 239.646813][ T26] audit: type=1326 audit(1780946476.016:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 239.799247][ T26] audit: type=1326 audit(1780946476.016:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 239.842737][ T6990] tmpfs: Bad value for 'nr_inodes' [ 240.544927][ T26] audit: type=1326 audit(1780946476.026:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 240.781012][ T26] audit: type=1326 audit(1780946476.026:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 241.531057][ T26] audit: type=1326 audit(1780946476.026:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 241.636153][ T26] audit: type=1326 audit(1780946476.036:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 241.760410][ T26] audit: type=1326 audit(1780946476.036:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 241.810442][ T26] audit: type=1326 audit(1780946476.036:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.7.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8d9ce59 code=0x7ffc0000 [ 241.912130][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.687'. [ 242.070439][ T7011] device wlan1 entered promiscuous mode [ 242.930584][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 243.287902][ T7030] loop8: detected capacity change from 0 to 512 [ 243.335691][ T7030] EXT4-fs: Ignoring removed i_version option [ 243.364321][ T7030] EXT4-fs: Ignoring removed oldalloc option [ 243.419635][ T7030] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 243.934801][ T6399] EXT4-fs (loop8): unmounting filesystem. [ 248.527666][ T7087] netlink: 'syz.5.713': attribute type 10 has an invalid length. [ 248.847964][ T7087] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 248.883459][ T7086] loop7: detected capacity change from 0 to 8192 [ 248.937325][ T7087] team0: Failed to send options change via netlink (err -105) [ 248.966895][ T7087] team0: Port device netdevsim0 added [ 248.985085][ T7086] loop7: p1 < > p3[EZD] [ 249.027375][ T7086] loop7: p3 start 3238002688 is beyond EOD, truncated [ 249.603928][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 249.954288][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 251.399464][ T7132] loop5: detected capacity change from 0 to 1024 [ 251.525175][ T7132] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #3: block 1: comm syz.5.724: lblock 1 mapped to illegal pblock 1 (length 1) [ 251.679058][ T7132] __quota_error: 54 callbacks suppressed [ 251.679077][ T7132] Quota error (device loop5): write_blk: dquota write failed [ 251.807923][ T7132] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 251.965330][ T7132] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.724: Failed to acquire dquot type 0 [ 252.061989][ T7132] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.724: Freeing blocks not in datazone - block = 0, count = 4096 [ 252.317432][ T7132] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.724: Invalid inode bitmap blk 0 in block_group 0 [ 252.399031][ T7132] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 252.399327][ T11] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 252.437028][ T7132] EXT4-fs (loop5): 1 orphan inode deleted [ 252.470976][ T7132] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 252.520558][ T11] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 252.576139][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 252.813470][ T4855] EXT4-fs (loop5): unmounting filesystem. [ 252.830621][ T5985] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 252.889901][ T5985] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 252.912558][ T5985] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:27: Failed to release dquot type 0 [ 253.912660][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.7.732'. [ 255.730541][ T26] audit: type=1326 audit(1780946492.316:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 255.755006][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761375][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.866146][ T26] audit: type=1326 audit(1780946492.326:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 256.030378][ T26] audit: type=1326 audit(1780946492.326:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 256.325419][ T26] audit: type=1326 audit(1780946492.326:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 256.538484][ T26] audit: type=1326 audit(1780946492.326:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 256.720402][ T125] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 256.772506][ T26] audit: type=1326 audit(1780946492.326:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 256.950454][ T125] usb 8-1: Using ep0 maxpacket: 16 [ 256.969799][ T125] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.054359][ T26] audit: type=1326 audit(1780946492.326:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 257.295226][ T125] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.763259][ T26] audit: type=1326 audit(1780946492.326:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 257.785874][ T125] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.924822][ T125] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.974057][ T125] usb 8-1: Product: syz [ 258.019192][ T26] audit: type=1326 audit(1780946492.396:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 258.064079][ T125] usb 8-1: Manufacturer: syz [ 258.109475][ T125] usb 8-1: SerialNumber: syz [ 258.330685][ T26] audit: type=1326 audit(1780946492.396:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 258.411421][ T125] usb 8-1: 0:2 : does not exist [ 258.447134][ T125] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 258.594641][ T7240] netlink: 'syz.0.747': attribute type 10 has an invalid length. [ 258.619044][ T26] audit: type=1326 audit(1780946492.396:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 258.671472][ T125] usb 8-1: USB disconnect, device number 4 [ 258.779314][ T7240] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 258.827007][ T26] audit: type=1326 audit(1780946492.406:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 258.851784][ T26] audit: type=1326 audit(1780946492.406:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 258.880703][ T7240] team0: Failed to send options change via netlink (err -105) [ 258.908633][ T7240] team0: Port device netdevsim0 added [ 258.919210][ T26] audit: type=1326 audit(1780946492.406:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 259.028412][ T26] audit: type=1326 audit(1780946492.456:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.742" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd39ce59 code=0x7ffc0000 [ 259.077082][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.909295][ T7278] netlink: 'syz.5.758': attribute type 4 has an invalid length. [ 259.966101][ T7278] netlink: 'syz.5.758': attribute type 4 has an invalid length. [ 260.445135][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.764'. [ 260.510637][ T7289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.764'. [ 260.542538][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.764'. [ 260.574015][ T7289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.764'. [ 260.951737][ T5105] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 261.150571][ T5105] usb 6-1: Using ep0 maxpacket: 16 [ 261.165848][ T5105] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.207541][ T5105] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.255909][ T5105] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.279365][ T5105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.291254][ T5105] usb 6-1: Product: syz [ 261.295946][ T5105] usb 6-1: Manufacturer: syz [ 261.320469][ T5105] usb 6-1: SerialNumber: syz [ 261.558554][ T5105] usb 6-1: 0:2 : does not exist [ 261.579460][ T5105] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 261.662473][ T5105] usb 6-1: USB disconnect, device number 3 [ 261.922695][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.044896][ T7330] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 262.106195][ T7330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.224561][ T7330] bond3: (slave geneve2): making interface the new active one [ 262.236477][ T7330] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 262.265095][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 264.541685][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.7.791'. [ 265.873325][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.8.795'. [ 266.158947][ T7383] team0: Port device team_slave_0 removed [ 267.215812][ T7405] netlink: 'syz.7.805': attribute type 1 has an invalid length. [ 267.355767][ T7405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.420517][ T7407] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 267.613077][ T7408] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 270.141354][ T7455] loop7: detected capacity change from 0 to 1024 [ 270.340667][ T7459] netlink: 'syz.5.823': attribute type 1 has an invalid length. [ 270.398531][ T7465] delete_channel: no stack [ 270.406545][ T7465] delete_channel: no stack [ 272.374118][ T7484] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 275.873120][ T7521] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.882987][ T7521] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.891950][ T7521] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.900757][ T7521] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.973810][ T7523] tipc: Failed to remove unknown binding: 66,0,0/0:716685649/716685651 [ 275.993357][ T7523] tipc: Failed to remove unknown binding: 66,0,0/0:716685649/716685650 [ 276.002035][ T7521] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.011115][ T7521] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.020034][ T7521] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.029429][ T7521] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.062502][ T7525] tipc: Failed to remove unknown binding: 66,0,0/0:716685649/716685651 [ 276.080701][ T7525] tipc: Failed to remove unknown binding: 66,0,0/0:716685649/716685650 [ 276.206456][ T7524] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.215790][ T7524] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.224610][ T7524] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.233500][ T7524] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.408580][ T7524] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.417962][ T7524] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.426916][ T7524] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.435861][ T7524] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.056858][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.5.850'. [ 278.090571][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.5.850'. [ 278.264223][ T7548] device ip6gretap0 entered promiscuous mode [ 278.270526][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 278.358467][ T7548] device syz_tun entered promiscuous mode [ 278.387567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 280.350207][ T4290] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 280.359648][ T4290] Bluetooth: hci2: Injecting HCI hardware error event [ 280.372038][ T4290] Bluetooth: hci2: hardware error 0x00 [ 280.422392][ T7568] tipc: Started in network mode [ 280.427355][ T7568] tipc: Node identity ac14140f, cluster identity 4711 [ 280.481527][ T7568] tipc: New replicast peer: 255.255.255.255 [ 280.488903][ T7568] tipc: Enabled bearer , priority 10 [ 280.557041][ T7568] tipc: Cannot configure node identity twice [ 281.292846][ T7568] tipc: Cannot configure node identity twice [ 281.524882][ T22] tipc: Node number set to 2886997007 [ 282.240188][ T7618] loop7: detected capacity change from 0 to 4096 [ 282.318513][ T7618] NILFS (loop7): invalid segment: Checksum error in segment payload [ 282.347443][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.8.873'. [ 282.355493][ T7618] NILFS (loop7): trying rollback from an earlier position [ 282.421399][ T4290] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 282.492593][ T7618] NILFS (loop7): recovery complete [ 282.540194][ T7626] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.922098][ T7630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.876'. [ 283.764966][ T7651] loop7: detected capacity change from 0 to 512 [ 283.859416][ T7651] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 283.891144][ T7651] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.641613][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 284.710370][ T5530] EXT4-fs (loop7): Remounting filesystem read-only [ 284.721302][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 284.750637][ T5530] EXT4-fs (loop7): Remounting filesystem read-only [ 284.757717][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 284.800839][ T5530] EXT4-fs (loop7): Remounting filesystem read-only [ 284.807927][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 284.912283][ T5530] EXT4-fs (loop7): Remounting filesystem read-only [ 284.919447][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 284.972226][ T5530] EXT4-fs (loop7): Remounting filesystem read-only [ 285.015033][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 285.058800][ T5530] EXT4-fs (loop7): Remounting filesystem read-only [ 285.066098][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 285.091130][ T5530] EXT4-fs (loop7): Remounting filesystem read-only [ 285.098786][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 285.125750][ T5530] EXT4-fs (loop7): Remounting filesystem read-only [ 285.173531][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 285.552945][ T5530] EXT4-fs (loop7): Remounting filesystem read-only [ 285.758210][ T5530] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 285.775887][ T7685] loop5: detected capacity change from 0 to 512 [ 285.873273][ T7685] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 286.281826][ T4855] EXT4-fs (loop5): unmounting filesystem. [ 286.534933][ T7697] device syzkaller0 entered promiscuous mode [ 286.574135][ T7697] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 286.866065][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.960583][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 287.058270][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.236526][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.325515][ T7713] netlink: 11 bytes leftover after parsing attributes in process `syz.5.904'. [ 287.422761][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.698102][ T7718] device macvlan2 entered promiscuous mode [ 287.706026][ T7718] device bond2 entered promiscuous mode [ 287.712985][ T7718] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.741146][ T7718] device bond2 left promiscuous mode [ 288.227323][ T7728] loop5: detected capacity change from 0 to 256 [ 288.295782][ T7728] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 288.319575][ T11] bond1: (slave ip6gretap1): Releasing active interface [ 289.690592][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.710704][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.733641][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.748448][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.756792][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 289.764497][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.880290][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 395.887328][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7755/1:b..l [ 395.896045][ C1] (detected by 1, t=10502 jiffies, g=36429, q=26 ncpus=2) [ 395.903373][ C1] task:syz.0.919 state:R running task stack:25840 pid:7755 ppid:4276 flags:0x00004000 [ 395.915762][ C1] Call Trace: [ 395.919101][ C1] [ 395.922079][ C1] __schedule+0x11d1/0x40e0 [ 395.926671][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 395.932718][ C1] ? __sched_text_start+0x8/0x8 [ 395.937614][ C1] ? lock_chain_count+0x20/0x20 [ 395.942525][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 395.947854][ C1] preempt_schedule_irq+0xbb/0x160 [ 395.953021][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 395.958895][ C1] ? rcu_is_watching+0x11/0xa0 [ 395.963730][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 395.969609][ C1] irqentry_exit+0x63/0x70 [ 395.974259][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 395.980295][ C1] RIP: 0010:preempt_count_sub+0x61/0x160 [ 395.985999][ C1] Code: ff ff ff 7f 39 cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 65 8b 05 80 7f a9 7e f7 df 65 01 3d 77 7f a9 7e <5b> 5d c3 e8 07 55 b5 02 85 c0 74 f4 48 c7 c0 a8 5e 20 8e 48 c1 e8 [ 396.005667][ C1] RSP: 0018:ffffc90003957338 EFLAGS: 00000297 [ 396.011794][ C1] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 396.019812][ C1] RDX: ffffc90003957401 RSI: dffffc0000000000 RDI: 00000000ffffffff [ 396.027829][ C1] RBP: ffffffff8ea944c8 R08: ffffc90003957d70 R09: ffffc90003957478 [ 396.035857][ C1] R10: dffffc0000000000 R11: fffff5200072ae91 R12: ffffc90003950000 [ 396.043876][ C1] R13: dffffc0000000000 R14: ffffc90003957438 R15: ffffc90003957d80 [ 396.051932][ C1] unwind_next_frame+0x1880/0x20b0 [ 396.057140][ C1] ? do_mas_align_munmap+0xcc2/0x12b0 [ 396.062575][ C1] ? stack_trace_save+0xf0/0xf0 [ 396.067483][ C1] arch_stack_walk+0x10c/0x140 [ 396.072300][ C1] ? do_mas_munmap+0x240/0x2b0 [ 396.077132][ C1] stack_trace_save+0xa6/0xf0 [ 396.081860][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 396.087028][ C1] ? mark_lock+0x94/0x320 [ 396.091423][ C1] save_stack+0x121/0x230 [ 396.095809][ C1] ? __reset_page_owner+0x1a0/0x1a0 [ 396.101050][ C1] ? free_unref_page_prepare+0x8b4/0x9a0 [ 396.106739][ C1] ? free_unref_page_list+0xbb/0x8e0 [ 396.112080][ C1] ? release_pages+0x1fa6/0x2220 [ 396.117077][ C1] ? tlb_flush_mmu+0x105/0x220 [ 396.121902][ C1] ? tlb_finish_mmu+0xf5/0x220 [ 396.126716][ C1] ? unmap_region+0x29c/0x300 [ 396.131451][ C1] ? do_mas_align_munmap+0xcc2/0x12b0 [ 396.136888][ C1] ? page_ext_get+0x1de/0x2a0 [ 396.141633][ C1] __reset_page_owner+0x51/0x1a0 [ 396.146635][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 396.152172][ C1] free_unref_page_list+0xbb/0x8e0 [ 396.157363][ C1] release_pages+0x1fa6/0x2220 [ 396.162199][ C1] ? lru_cache_disable+0x30/0x30 [ 396.167198][ C1] ? free_swap_cache+0xe5/0x590 [ 396.172106][ C1] tlb_flush_mmu+0x105/0x220 [ 396.176756][ C1] tlb_finish_mmu+0xf5/0x220 [ 396.181411][ C1] unmap_region+0x29c/0x300 [ 396.185974][ C1] ? do_brk_munmap+0x80/0x80 [ 396.190641][ C1] do_mas_align_munmap+0xcc2/0x12b0 [ 396.195896][ C1] ? verify_lock_unused+0x140/0x140 [ 396.201157][ C1] ? do_mas_align_munmap+0x745/0x12b0 [ 396.206588][ C1] ? do_mas_munmap+0x2b0/0x2b0 [ 396.211409][ C1] ? mtree_range_walk+0x672/0x7b0 [ 396.216507][ C1] ? mas_walk+0x15f/0x180 [ 396.220897][ C1] ? mas_find+0x1e8/0x230 [ 396.225288][ C1] do_mas_munmap+0x240/0x2b0 [ 396.229940][ C1] __vm_munmap+0x1ac/0x2d0 [ 396.234408][ C1] ? vm_munmap+0x20/0x20 [ 396.238713][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 396.244756][ C1] ? syscall_enter_from_user_mode+0x21/0x80 [ 396.250720][ C1] __x64_sys_munmap+0x5c/0x70 [ 396.255455][ C1] do_syscall_64+0x4c/0xa0 [ 396.259912][ C1] ? clear_bhb_loop+0x60/0xb0 [ 396.264638][ C1] ? clear_bhb_loop+0x60/0xb0 [ 396.269387][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.275336][ C1] RIP: 0033:0x7f390cb9cc87 [ 396.279807][ C1] RSP: 002b:00007f390daafe08 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 396.288278][ C1] RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007f390cb9cc87 [ 396.296298][ C1] RDX: 0000000001000000 RSI: 0000000008400000 RDI: 00007f39029f7000 [ 396.304328][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 396.312338][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 396.320351][ C1] R13: 00007f390daafee0 R14: 00007f390daafea0 R15: 00007f39029f7000 [ 396.328379][ C1] [ 396.331451][ C1] rcu: rcu_preempt kthread starved for 10541 jiffies! g36429 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 396.342695][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 396.352701][ C1] rcu: RCU grace-period kthread stack dump: [ 396.358630][ C1] task:rcu_preempt state:R running task stack:26864 pid:16 ppid:2 flags:0x00004000 [ 396.369462][ C1] Call Trace: [ 396.372779][ C1] [ 396.375752][ C1] __schedule+0x11d1/0x40e0 [ 396.380323][ C1] ? __sched_text_start+0x8/0x8 [ 396.385215][ C1] ? __mod_timer+0x91e/0xd00 [ 396.389857][ C1] schedule+0xb9/0x180 [ 396.393973][ C1] schedule_timeout+0x184/0x2d0 [ 396.398875][ C1] ? console_conditional_schedule+0x40/0x40 [ 396.404821][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 396.410776][ C1] ? update_process_times+0x1b0/0x1b0 [ 396.416211][ C1] ? prepare_to_swait_event+0x335/0x350 [ 396.421819][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 396.426734][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 396.431643][ C1] ? dump_blkd_tasks+0x810/0x810 [ 396.436636][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 396.441448][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 396.446351][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 396.451608][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 396.456864][ C1] rcu_gp_kthread+0x99/0x3b0 [ 396.461502][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 396.466661][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 396.472611][ C1] ? __kthread_parkme+0x162/0x1c0 [ 396.477703][ C1] kthread+0x29d/0x330 [ 396.481811][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 396.487577][ C1] ? kthread_blkcg+0xd0/0xd0 [ 396.492215][ C1] ret_from_fork+0x1f/0x30 [ 396.496703][ C1] [ 396.499763][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 396.506144][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 396.513228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.523321][ C1] RIP: 0010:default_idle+0xb/0x10 [ 396.528402][ C1] Code: 48 89 df e8 37 34 9a f7 e9 44 ff ff ff e8 cd 06 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d a7 5a 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 396.548052][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 396.554167][ C1] RAX: 6002ee669efd7000 RBX: ffffffff8a395407 RCX: 6002ee669efd7000 [ 396.562192][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 396.570308][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 396.578374][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 396.586407][ C1] R13: dffffc0000000000 R14: ffff888017739e00 R15: 1ffff9200002efc8 [ 396.594440][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 396.603431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.610069][ C1] CR2: 00007f43bb62a440 CR3: 000000006123c000 CR4: 00000000003506e0 [ 396.618100][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.626117][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.634232][ C1] Call Trace: [ 396.637560][ C1] [ 396.640530][ C1] default_idle_call+0x84/0xc0 [ 396.645354][ C1] do_idle+0x3a2/0x680 [ 396.649497][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 396.654755][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 396.660982][ C1] ? schedule_idle+0x57/0x90 [ 396.665619][ C1] cpu_startup_entry+0x3f/0x60 [ 396.670434][ C1] start_secondary+0xe4/0xf0 [ 396.675085][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 396.681043][ C1]