last executing test programs: 7m24.385705506s ago: executing program 1 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) 7m22.665217175s ago: executing program 1 (id=542): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x20) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000002100)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) r1 = openat$comedi(0xffffff9c, 0x0, 0x101080, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000040)={'comedi_bond\x00', [0x7, 0xfffffffc, 0x6000, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa23, 0xfffff6aa, 0x2, 0xffffdffc, 0x6, 0x93, 0x1000007, 0x1, 0x9, 0x801000, 0x80000000, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x5, 0x3, 0x7ffd, 0x7, 0xc, 0x5, 0x400, 0x3, 0xfffd]}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x12, 0x40000180}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r4, 0x0}) syz_open_dev$video4linux(0x0, 0x7, 0x20040) r6 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) readv(r6, &(0x7f0000000480)=[{&(0x7f0000000400)=""/105, 0x69}], 0x1) close(0x3) r7 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r7}, &(0x7f00000000c0)=0x0) timer_settime(r8, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) read$FUSE(r9, &(0x7f0000003d00)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000080)={r4, r5, 0x1, 0x0, 0x202}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xec) 7m20.902692384s ago: executing program 1 (id=547): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[]) socket$kcm(0x10, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) 7m16.741430259s ago: executing program 1 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x20001, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x80000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) 7m15.245779202s ago: executing program 1 (id=553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x6, 0x4}, {0xd4c8, 0x5}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) 7m13.467345113s ago: executing program 1 (id=556): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r3) 6m56.723075781s ago: executing program 32 (id=556): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r3) 21.290454818s ago: executing program 2 (id=1076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @empty, 0x4e21, 0x3, 'lblc\x00', 0x1, 0x10000004, 0x40005}, 0x2c) socket$kcm(0xa, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c0d0}, 0x8000) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = getpgrp(0x0) tkill(r3, 0x2e) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 15.764092904s ago: executing program 0 (id=1091): syz_usb_connect$uac1(0x2, 0xb8, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x800, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000e00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9b2, 0xf) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 13.495463405s ago: executing program 2 (id=1084): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x17, &(0x7f0000000080)=@gcm_256={{0x304}, "1a01c783a8bc563d", "e9a0bd986e338580fdbaaa4d000000000069e2374e1961e19500", '\x00', "1d7265a045a85572"}, 0x38) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r3) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x4000410) keyctl$unlink(0x9, r4, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x8000, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1}, 0x40}, {{0x0, 0x0, 0x0}, 0xfffff7fb}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = add_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$link(0x8, r7, r4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 12.801074451s ago: executing program 4 (id=1085): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB="0000000000000000b7080000000000000c00000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x4, &(0x7f0000000180)={0x0, 0x1f, 0x1}, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x9}, {0x5, 0xc9}}}}, 0x9) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, 0x0, 0x8000) 12.800855641s ago: executing program 3 (id=1086): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket(0xa, 0x3, 0x87) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") socket$inet6_udp(0xa, 0x2, 0x0) 11.437381401s ago: executing program 3 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="15010000000000001400128009000100766c616e00000000040002800a002800aaaaaaaaaa16"], 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x6, 0x0, 0xffffff0c, 0xb, 0xfffffffffffffac8, 0x4, 0x6f, 0x8, 0x91}, 0x0) write(r6, &(0x7f0000000000)="2d000000010001", 0x7) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32]) 11.435142051s ago: executing program 2 (id=1096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x6, 0x4}, {0xd4c8, 0x5}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 11.434260311s ago: executing program 0 (id=1088): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fcdbdf25010000e808000300", @ANYRES32=0x0, @ANYBLOB="0800010003000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(r5, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfdc833e20586afd9a2c4e96bf196", 0x68}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.390390473s ago: executing program 4 (id=1089): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="77000005040000880000000000000000000000c52aacf61fa920580400ac7bc989ce571bff7c53b3cc6a5ac38db0101d28ae9b382bee493be2385aac9de475aa3df4451dddf2a7874c3f103472d0ee7e33bec8dd7bbee9dcc6951bebf767c70e28c702d2e22ffc15f982eedbbbd4238d7e200225a61bff6eff5cccd804a2d368c18a74d486bf3f"]) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={0xffffffffffffffff, &(0x7f0000000880)="4ac6a6728c7057c003ef14ffac9a8ede36268acefa248ac0847fbd52a6b941d0056b15e142d1ace4efd6bd4e5e6af46cbfb203b1bb8f4cbbb6c93d2830ff33bdf8e772619bb8b597ff939dbe3f8450766f786bfc46329bdc255d2df667412e93f8d31d81ede15db8f94b45131aab7201f29866b2dc17511e9ad3d73233b27a2c6b762e19ae058e19b3211efd5dd379afabd9337ac8f6fa6a048c3393a6833ef97932f4c845825fcacaab0629e420cabac4c87239f6212888881ae6169d2bb1506e06b00afb65f7f1b142496b2bd919266190d34c3e3a00dd2ba7953ac030d74abea09cc2780b61a88e83c46e9a8a605e3f8fa28f23e15ed5329eedd31ec396688a155467e318d0b8ba34c7d191a4ddd14ceb3a6c337de63d36c303233b0818b2a8481a602a5230d5e601905f07c1fed05d7605737b3d37cbac980494997f85e61c510a70d4ce705a7badc197c700c9a2b2d506decaf301983361b57ecc4f64f89bbfc552400a0b7eae787607e32a0cf985813cca32ea18dee39da4bc4ded12ec983eb9b5b51fdb94f11da9eb87b86756d2f6c2df637ef6a89432c68ebff0e7826efe9e633f072a1e29de97fcff16b30693dd1df20e1a89dc4ca728073bf0edfce4644da3b48468a1c2433636f4d2e48db8ddb3d942496bb11d9ac7c388ae2062916018b4eaf8843465c40962e1b7cb062d32db236020e99d8de18a70862885532a4dd17ad383cc1db443f23c6e5ab44ddb5fcfebe1225dcaed0595194f179db455d7e5efe5df5961b437293a8f2436a90cf94a64c07e86bf1989bbc7044c4e15021f9c33c31740a8ae7a073e8b507341b70896b44fd00af117e601635a8d9613695848934e22b30587476062185a2d9a1f258dbf77cacb8ffe6cca1cc024fb11659a637e9bdfcf07b5a1ec0226425ad19e9bf0744501db925d2f46daebba755f3e44585e981816f53c32f105130f6757fad9fae496dbe4507c56d4ff3e2eaaacdab05e0bd46bd2822791ba43b2adf2e0954a1629ba06a30374997669e96ffe5003e7f661ded0631fd23c982496025dcb3cc5dbe1aae56389c09958b0e620b0453921fa21a6bfeab349930a6e9051e2491b9c87c89bfb0c54389a5a90671fab22538b6acb50d9140f0d3770c0f2683dfe442823242ae5bc84084971e96a666ff449a9bcc27022271443def7565264aa8ea5a4afbf1421ec72469c4d260122b8fd560b6f7acd2089c526deb89207375ee2ffa4c47b103560eac98b6b9b6a300dd6e23986b711a8a0b1918fccd2debef558886a0edebbd3ab7ba0b9368582ac287623a90cc443b55b563f1ec60edbb45d2734452222519ab04957f2b0bd5577080216c02c3aefa15a92c8f35eb72a4a282f2d167b91f5ec4ab61fcb4d0831c49a8a1e4e00cb48959a95211e85fd2150c5d046c5c759e0d579f75198cb57157e84cccadb281be9d4038d67589558c69a2743225713093c2f9b365b719b465f7e4dc7ae68403b4d049dce986ed04f624cac63ff0664ac14bc8a32aad5faf86f12cbce5e5ddd0d1daf1a224912ac53a0366d9c2725cc1ce359bfb5f5cd4e7d7ed8b7d5db761f8343e03fa1b638d8bc81b66f945d26f7519d2aeb77cabcf707a9a5ecb4b9e593aa5a6a961421f3c5fac0a1da1ad02d9e47369867ba3a4c57d01e2cd4f778249dd1f5fc7b59f5a7f8c1d6f5ede07fb95d5c954ea7723d4181219b71c8c7807cd87144049f3890b754c81882112827a37fa305ba3159fe920f1fdc255c8dc991941771c5f4ff580bce744a8b9639260ec345cd2328f8c467f970b897af04159f235f72f6cab529429ede677cd57fa6c5bfbff6cd2480e33c57d486714601f48162e8750fb1c2c815b54df3525ee311c591fa41f00812680fd7b9be619caf4af568437d77db5c6e42fa91facdde0893393e87f28039dabba1c29273517ca7bd224773dbcd0d0849003cdfcf6122d372623eba7e4f35773b11c840db2cd8c220c7f1482ab139f8ae3a7cea70e7a430dddc09be9017ee9f5e92dc3061309624c38cef0f695eacaa9932a2a935c8ba799c28e4b2f3e16fc2f643cef9e48ff344ecee342a7c1e13ce51f5d48958f954c76b45f8e9a7a4ee69c4fb53bff92659f461ae5b914ba66cc2e8ca64edded17de4f8d86f50ea1c4094b88e9151217302b9e233d306fb297a67178a75d52416bfe44938c174f9233f22a7d9fff3556f7eeb40d200af605160ec7342f3811faea07418701358d4bfc6d18e161ee6128edd7d321291da90dc852930ed0cf8098431e375124f4919f66f2cf539990f0f7f99a8e3bc55275cf60ea03251f9892d9b959efed12b84a27604687ae4469b5d1c28d03cb29e8cbf1b1ecde50c612b8c8890d8c985740604b4e3e4cea832ecfd3bb5038dbaea276eaa3938b20be57d66ceccbd4990a8d3682913a277e7b02181ec9d96f0bbab2892338326facfff4fb05323506be340d1556795dd8a49fd7d2f45ad0dadffef52533eb9105c89f61461d440292100f59229b260a70e3f9b831ab2c9f60996a9644d6676363cb05068460f538173408f6854a39bb7a999ab1047eddd3f6122aa0679995cd0dafca218766698a68fbf75056991ab5e7f8362cfa67b3c6a05ad87841dc8be1edd5d8a6972a8c7038cf6585ffdb8d549902a5dc58fb98847829871c23fe4ab996e9417018be5ff3f6da37b4cf48176f1dd8a257ffa739d8a2061baa1935439cd7e2f313aedbb003a96cdace07cc72d86dcbcc61f8c2938dbce32c9f17ddf115126c83a2dbadb44493dcc42dca8a785f5d9759e59cfe2758ae0910384a076325ca2b3c67f83a3c010f82f762978c8aabe38c30fdb7b881644175c2b6a828f60431707336d64d3768aeab7bd806a42dd18a239b95745f7f803b6110f5ef0d65dfad9b1e8d04bd42c651eee489d46bd296c790aaa34f739534070a76b0b876871edac7d2304099bb54884590b51aa680220cc2dbc9c3ecf5bf954eb51c1acd6549329e47140a1245f344274fd72a05d5c76ac6faeabdc7561aa375ffc54887720ecd405ff82dc4f9ed27f440d6be57f0653736e876d7109d03f126d52dc9d546eea34d00b442e9be7b5fa33b98e605926c8e39c1644c9cb39334d28a83cbc02f05e73e9b5d0a3be0caded1e7be2e7ed0b078bc0d749ac5483270692f39ed2b648b847d2fecbf56581745c0c15a6faa5dfac40e94f249cac74fcc297bb3645969590cb99ee9b630c61e0ca8c622f1f66732eec4af330a91ad60444d4de2c2aa47a902488b6202511b542935ee478880378d4e18ad26abde96a1c21c917dbd0c9e4233b79595a871b8abe23b078c1721d45fb36a9fa5249b7a9624774ac5e8f64785fa9c2421d717ff97cfa497d7b730d7d62d2c4678bf36a1a69cbecd94bd916949827fcd7f4ba30f7d5ebc6c851f7232fc98680154770b98e00f5294a87044150e0501686fdd409b060fe8773bc6e48b3ed6d96a0b2c06b05ed6382b8d6571e7704256e0589ec91cec529a587a6f5924c8089d1af458a2c058f465ee0bac693867a9ba3c1622eab93f0cb82dee81f49a825426c52f93e92efa2d516ada9fb34735ddc72243de09de60aca6e7738fd731d724d91b97ac59ce73012937de00f31b899f62677ae0ced6413d087b087d4af995305c2e286039b9c96d397e285eeba5f1b88a809550d7df9634b98f38fa37b881ce74b54d5e39e5fa21b4f1bfb50d2615d026a175f26bf41931905f416a16d7c1b98631987156982af8d09a86d51d1075614bb94b35f1fd039571489200902830da3d130ce2e0e70687c57d150ba6810db46a9841fe22502135a007bf5ef07621c0e0cb3c5cd2f02044b50481f92c2dcdcd2ded742d6209f476160f55934b4952474d31ae2fe4e3c062526f90f1d157e218689548b9428fe85d353c9c53acce7fae82211326cffeaa55e1d5f7b3d8d33ddf64db181942648ead68fa50d0221fc56faf2b6ee0819d0343272ab343aeed2915c03615d39d149d44e8d7665ce1a38435acd7024028f156ba5c325833d1c67e026048ed7eb8510f9a2e93ddd2bcd67a005d8cca6018179bcfa06ce3926390c53b6d5e7b8e1457e292e7e7e3b61c4004ea8f69bc07afcc38668f7321fbb1bfda0a34f833f99cbac160d71813070c9a6e8e0e726519dc93bf2036eef5aeaed26bf87fc2cb8eab8cd9418f518446dff64478541fcced68c874a88075f0a5968670bde512a2444c6abfd4dc8cbbc2d1025afa13a69caadf1896b343bacce6fc84dbc214bc8d512f62327cced78f1334dde05a19cd0c4442229f3af1ddace078aad37106f20e53b1c5fe92dd2dacdc4f07ba07397ff72ec9913ab6c8e66fc2c7a2622c4ff7ba27fd7def9dab918a0c7876f5b620b48eb893e608f332f483cf85594d3e71b309fcf9580e0ee83ac45cce642aa4d79fecc6ada27e6104f9238119e2b43122a15ac43e88c442a723eccac43ab5ae47050ac54c87590bdab5f8d6c195ef67520a4a7aedf10930e197f06cf546e036385d587db366180adf0f670ebd0e42e91ea3d33cf972d878af7fe93d6720a0d0adcd20f57495ae9e334f06916ce5d67b19da0228d1820a14f7c1d0077d683ff6ff8d93f8ec7753906f6351c8d34663a6b35edc9ea7d2be17fbe5cb5d1f3d6f08e511af7e4835e9f7f9d3e3259432924ae25bbb3ea463683f42a12cad569a7bb43c335ee153e21aa3a76f16d90a1cd4d7f4bd9d6928ce1750c62e79ab0c19e9af5dfe17af1bbdd041fd3c936b546a8f5e5b796dc1488c433e3fdf58309df4f7df6f84e9c9fba3bdffe4dffe9d300c339f8fffb92f3b3c4fe75b55c955a0ef42536c8181dc6131dbfb7d6a779ba7fd4075d46cd8a7e9e9dc41e33102da8a55db8c4e544a636c34ab557339dbc2337359508f15dc00ceb300469eace213e5271e9065e903fb54953288e593024cce2c6c0e3f295b354d57389686270512d171d055d4c5d1b1e519f8899829cd81b7577274ef337720b3ade83aa8826a6e5341d472191878b9326702e506f1847a2f7b25eedba0a04b0b118779497e1ab31be8bae65abf492407291be8a54346c333c75860c6de779b4c13b6e7305331e7db6506e88e91587c81bf816b1b9315763fd7ebfe6beb4f47014e3a9f198c4fc83944b4991b57cdbff3d7c7351becbfc0db7175fec16dd89b9fea469b1d81bc4da4ea137d0f871e72c065f318ddcb289108030b924b26b97f4a40df7"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) 10.282448617s ago: executing program 3 (id=1090): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4159, &(0x7f0000000180)={0x0, 0xac26, 0x10000, 0x2, 0x136}, &(0x7f0000000440), &(0x7f0000000400), 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{}], 0x1}}], 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x4, &(0x7f0000000140)=[{0x0, 0xf, 0x9d}, {0x5, 0x1, 0x0, 0x742c}, {0x9, 0x3f, 0x7, 0x40}, {0xf, 0xff, 0x8, 0xd1}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') 10.270771528s ago: executing program 2 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303030303030303030302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666d61736b3d30303030303030303030303030303030e3a513334f6f9a6a6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c648bb5e16f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c0016a3b6cfc30a6b6ea8fea18cfc48fdd94c0591b42f43fe4be411b5eba2b809955bea57e386f8294c57f39de988284b07250e04596d1625907104c7f7796ae6f91c6d546cb460e8b2c9f6166ae1ff7a5e66800828d764d89a7151af89d574fa143d4284ea920ab7710355977cb7d4b018aee77791a5e50d85c1613c85812975fd5e3d04fd210f76395f7105bf864c063699d12dd45cc1460e03464dc0d782ea786b15ba648d54b57be073d0eeb56c7d2c5af204a735e18b4d736bf0c43c8c9a9778e1e7952cc6c38049d08f73b01e70c6b5c24fea92b569adeb26efdef668541efc1e32038bd2498b929710e0be39045a86e3f654705943bcaecd1cf6a32d51da0a12de44dd93c1cc98711ac512d7dade70b92f7c4e34d987f0c5af374a9baaa8644fa97bc143ea5a761e234dcf880549870e770adf64caa74cf759c1828206"], 0xf5, 0x2f4, &(0x7f0000000bc0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000072e"], 0x0, 0x52}, 0x28) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aac2aaaaaa10060407ab1d7b94a7920c00"/32], 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r3 = socket$inet6(0xa, 0x3, 0xff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x4e20, 0x1000, 0x4, 0x5, 0x2, 0x80, 0x20, 0x2e, 0x0, 0xffffffffffffffff}, {0xff00000000, 0x1000000005, 0x6, 0x7, 0x3fd, 0x7fd, 0x3, 0xc}, {0xffffffff, 0x5, 0x8, 0x5}, 0x2, 0x6e6bb6, 0x0, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d7, 0x3c}, 0x2, @in=@empty, 0x3503, 0x3, 0x3, 0x5, 0x10, 0x5, 0x2}}, 0xe8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x10000, 0x7305be4b}) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000100)=0x89, 0x8) 8.247819473s ago: executing program 2 (id=1093): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_emit_vhci(0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev(r4, &(0x7f0000000040), 0x2) 7.51890559s ago: executing program 0 (id=1094): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c815}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TSC(0x1a, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000e4ff00000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000004080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x844) 7.210239997s ago: executing program 3 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @empty, 0x4e21, 0x3, 'lblc\x00', 0x1, 0x10000004, 0x40005}, 0x2c) socket$kcm(0xa, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c0d0}, 0x8000) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = getpgrp(0x0) tkill(r3, 0x2e) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 7.208719377s ago: executing program 4 (id=1097): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @broadcast}, 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 6.328157647s ago: executing program 0 (id=1098): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, &(0x7f0000000840)={0x9, 0x401}, &(0x7f0000000880)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000008c0)={0x5}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x8000200, &(0x7f0000000700)="211f620a57b1", 0x6, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="42f1d77a032190040855") setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.608828393s ago: executing program 3 (id=1099): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48044) socket$l2tp(0x2, 0x2, 0x73) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0xfff7}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 4.612500406s ago: executing program 4 (id=1100): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x400202, 0x2) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none, 0x80}, 0xa) syz_emit_ethernet(0x9e, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x17, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7fffffff, 0xffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x30}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000041a40800840000851752000c00000000000000"], 0x18}, 0x1400c0c0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) 4.101643867s ago: executing program 0 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget(0x3, 0x0, 0x608) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x220, 0x260, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x80000, 0x80) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, r5, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x800, 0xfff) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r6], 0x1, 0x19f, &(0x7f0000000480)="$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") r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f000000a140)={0x0, 0x0, &(0x7f000000a100)={&(0x7f0000009f40)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x44080) 3.021333111s ago: executing program 4 (id=1102): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x6, 0x4}, {0xd4c8, 0x5}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 3.020655202s ago: executing program 0 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 1.356777039s ago: executing program 3 (id=1104): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="77000005040000880000000000000000000000c52aacf61fa920580400ac7bc989ce571bff7c53b3cc6a5ac38db0101d28ae9b382bee493be2385aac9de475aa3df4451dddf2a7874c3f103472d0ee7e33bec8dd7bbee9dcc6951bebf767c70e28c702d2e22ffc15f982eedbbbd4238d7e200225a61bff6eff5cccd804a2d368c18a74d486bf3f"]) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={0xffffffffffffffff, &(0x7f0000000880)="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"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) 1.031213946s ago: executing program 4 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) 0s ago: executing program 2 (id=1106): r0 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x804, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000600)={0x14, 0x2d, 0x101, 0x70bd25, 0x25dfdbfb, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x40040080}, 0x8000) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES8=r0], 0x7c}}, 0x4080) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6800000006080b040000000000000000020000003c000480380001800b00010064796e73657400002800028008000340000000000900010073797a3000000000080004400000000008000940000000000900010073797a30000000000900020073797a3200cf72aa3db6b952320001f6ffffff00000000000000000a50a1ef150746de963f4c814d199c51e5a740bf1727382bff485c87ef26b300d9701732a976c9b6dd1c67d045ef335c7e10090c2805c7134dc5326f65ae0186cffaba724171bcb36bf7dba983178d8fb872"], 0xe0}, 0x1, 0x0, 0x0, 0x4880}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000002000000000000000000000006f0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) listen(r8, 0xf7f) accept4(r8, &(0x7f0000000240)=@x25, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x100, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4, @private=0xa010102}, {0x2, 0x0, @private=0xa010105}, 0x2de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffeffffffffe}) kernel console output (not intermixed with test programs): 89.533066][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.546100][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.555047][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.595657][ T4589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.627225][ T4589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.658745][ T5794] Bluetooth: hci2: command tx timeout [ 89.681881][ T4589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.720070][ T4589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.743418][ T5794] Bluetooth: hci0: command tx timeout [ 89.749207][ T5794] Bluetooth: hci3: command tx timeout [ 89.754667][ T5794] Bluetooth: hci1: command tx timeout [ 90.105629][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.320642][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.395820][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.445396][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.553818][ T5853] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.854489][ T1301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.883899][ T1301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.438357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.235571][ T51] Bluetooth: hci2: command tx timeout [ 93.241566][ T51] Bluetooth: hci1: command tx timeout [ 93.247133][ T5794] Bluetooth: hci3: command tx timeout [ 93.252760][ T51] Bluetooth: hci0: command tx timeout [ 93.290470][ T9] cfg80211: failed to load regulatory.db [ 94.845105][ T5869] netlink: 'syz.1.6': attribute type 3 has an invalid length. [ 94.922958][ T5875] syz.3.4[5875]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.253033][ T5875] loop3: detected capacity change from 0 to 32768 [ 95.484861][ T5875] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.793255][ T5875] XFS (loop3): Ending clean mount [ 96.773661][ T5779] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.314683][ T5895] loop3: detected capacity change from 0 to 512 [ 97.416877][ T5898] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 97.426881][ T5895] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.453368][ T5895] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.724975][ T5895] EXT4-fs (loop3): 1 truncate cleaned up [ 98.110009][ T5895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.410620][ T5909] loop0: detected capacity change from 0 to 512 [ 99.472501][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.509452][ T5909] ======================================================= [ 99.509452][ T5909] WARNING: The mand mount option has been deprecated and [ 99.509452][ T5909] and is ignored by this kernel. Remove the mand [ 99.509452][ T5909] option from the mount to silence this warning. [ 99.509452][ T5909] ======================================================= [ 99.607395][ T5909] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.640905][ T5909] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.13: corrupted xattr entries [ 100.677506][ T5909] EXT4-fs (loop0): Remounting filesystem read-only [ 100.705082][ T5909] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.728813][ T5909] EXT4-fs (loop0): 1 truncate cleaned up [ 100.738268][ T5909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.910109][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.976397][ T5932] sctp: failed to load transform for md5: -2 [ 106.978461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 107.753705][ T5949] loop0: detected capacity change from 0 to 2048 [ 107.790809][ T5949] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value [ 108.928759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.562258][ T5970] xt_hashlimit: size too large, truncated to 1048576 [ 113.569478][ T5970] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 114.658565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.605208][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28'. [ 118.274121][ T5995] loop3: detected capacity change from 0 to 512 [ 120.273234][ T5995] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.297386][ T5995] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.29: EA inode hash validation failed [ 120.311337][ T5995] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.326327][ T5995] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.29: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 120.468617][ T5995] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.29: ea_inode dec ref err=-117 [ 120.545412][ T5995] EXT4-fs (loop3): 1 orphan inode deleted [ 120.581343][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 120.723814][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.816087][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.938838][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 120.994387][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 121.028475][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 121.437852][ T6009] mmap: syz.3.32 (6009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.289719][ T23] usb 3-1: string descriptor 0 read error: -71 [ 122.296097][ T23] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 122.306206][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.371654][ T23] usb 3-1: config 0 descriptor?? [ 122.406622][ T23] usb 3-1: can't set config #0, error -71 [ 122.575813][ T23] usb 3-1: USB disconnect, device number 2 [ 122.899638][ T6017] loop2: detected capacity change from 0 to 16 [ 123.779593][ T6017] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.898486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 126.089329][ T6023] loop3: detected capacity change from 0 to 32768 [ 126.836719][ T6023] read_mapping_page failed! [ 126.874269][ T6023] ialloc: diAlloc returned -5! [ 129.632576][ T6038] syz.2.36 (6038) used greatest stack depth: 16760 bytes left [ 132.578587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.814124][ T6053] loop3: detected capacity change from 0 to 4096 [ 132.839699][ T6053] EXT4-fs: inline encryption not supported [ 132.845592][ T6053] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.876874][ T6053] EXT4-fs: Ignoring removed bh option [ 132.900855][ T6053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.932465][ T6053] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 132.946979][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.958478][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.023210][ T6053] System zones: 0-5 [ 133.049481][ T6053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.388942][ T6064] loop1: detected capacity change from 0 to 4096 [ 134.448809][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.944413][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 137.310318][ T6088] netlink: 'syz.3.47': attribute type 13 has an invalid length. [ 137.318057][ T6088] netlink: 'syz.3.47': attribute type 17 has an invalid length. [ 140.225939][ T6088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.269657][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.50'. [ 145.355397][ T6126] IPVS: length: 30 != 120 [ 146.904853][ T6139] loop3: detected capacity change from 0 to 32768 [ 146.920471][ T6139] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.61 (6139) [ 146.937243][ T6141] loop2: detected capacity change from 0 to 4096 [ 147.085357][ T6145] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.178602][ T6139] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 147.189419][ T6139] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 147.198609][ T6139] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 147.208474][ T6139] BTRFS info (device loop3): use zstd compression, level 3 [ 147.215744][ T6139] BTRFS info (device loop3): force clearing of disk cache [ 147.224299][ T6139] BTRFS info (device loop3): enabling disk space caching [ 147.231469][ T6139] BTRFS info (device loop3): disk space caching is enabled [ 147.880841][ T6139] BTRFS info (device loop3): enabling ssd optimizations [ 147.887921][ T6139] BTRFS info (device loop3): auto enabling async discard [ 147.901102][ T6139] BTRFS info (device loop3): rebuilding free space tree [ 147.960660][ T6139] BTRFS info (device loop3): disabling free space tree [ 147.967801][ T6139] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.977876][ T6139] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.634262][ T6176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.61'. [ 149.318688][ T5779] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 157.430489][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 165.556529][ T6251] loop0: detected capacity change from 0 to 64 [ 165.848238][ T6253] overlayfs: failed to clone lowerpath [ 166.074792][ T6253] overlayfs: failed to clone lowerpath [ 166.901911][ T6259] syz.0.85: attempt to access beyond end of device [ 166.901911][ T6259] loop0: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 166.916115][ T6259] Buffer I/O error on dev loop0, logical block 8388608, lost async page write [ 167.917237][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 168.448446][ T28] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.488011][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.529710][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.562875][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.609953][ T6271] process 'syz.1.90' launched '/dev/fd/3' with NULL argv: empty string added [ 168.625992][ T28] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.656857][ T28] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.694839][ T28] usb 1-1: Product: syz [ 168.711227][ T28] usb 1-1: Manufacturer: syz [ 168.786234][ T28] cdc_wdm 1-1:1.0: skipping garbage [ 168.801551][ T28] cdc_wdm 1-1:1.0: skipping garbage [ 168.810243][ T28] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 169.881940][ T968] usb 1-1: USB disconnect, device number 2 [ 170.853648][ T6289] xt_CT: No such helper "pptp" [ 175.074910][ T6315] capability: warning: `syz.2.97' uses 32-bit capabilities (legacy support in use) [ 175.990687][ T6313] loop3: detected capacity change from 0 to 4096 [ 176.025847][ T6313] EXT4-fs: inline encryption not supported [ 176.052956][ T6313] EXT4-fs: quotafile must be on filesystem root [ 176.553090][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 178.658410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 180.828302][ C1] sched: RT throttling activated [ 185.433702][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 185.949713][ T6373] netlink: 80 bytes leftover after parsing attributes in process `syz.1.110'. [ 188.898540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.126299][ T6397] overlayfs: failed to clone lowerpath [ 192.144631][ T6397] overlayfs: failed to clone lowerpath [ 192.923353][ T6403] loop0: detected capacity change from 0 to 512 [ 192.949527][ T6403] EXT4-fs: Ignoring removed i_version option [ 192.955592][ T6403] EXT4-fs: Ignoring removed nobh option [ 192.996540][ T6403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.129829][ T6403] EXT4-fs (loop0): 1 truncate cleaned up [ 193.137042][ T6403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.503756][ T6410] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 194.228148][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.740502][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.746962][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.890131][ T6424] loop0: detected capacity change from 0 to 32768 [ 195.961673][ T6424] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.609991][ T6440] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 196.860359][ T6424] XFS (loop0): Ending clean mount [ 196.881897][ T6424] XFS (loop0): Quotacheck needed: Please wait. [ 196.978135][ T6424] XFS (loop0): Quotacheck: Done. [ 197.774891][ T27] audit: type=1800 audit(1784275000.769:2): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.125" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 197.983835][ T28] IPVS: starting estimator thread 0... [ 198.016146][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.263096][ T6450] IPVS: using max 18 ests per chain, 43200 per kthread [ 198.489794][ T6453] loop3: detected capacity change from 0 to 32768 [ 199.203611][ T6453] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.670803][ T6453] XFS (loop3): Ending clean mount [ 199.683638][ T6453] XFS (loop3): Quotacheck needed: Please wait. [ 199.743356][ T6453] XFS (loop3): Quotacheck: Done. [ 201.208474][ T5779] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.863109][ T6489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 206.818386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.191770][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 207.191793][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 207.198105][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 207.204165][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 211.908811][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 214.498426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 219.013874][ T6588] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 220.616775][ T6603] loop3: detected capacity change from 0 to 512 [ 220.638958][ T6603] EXT4-fs: Ignoring removed oldalloc option [ 221.760678][ T6603] EXT4-fs (loop3): 1 truncate cleaned up [ 221.767920][ T6603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.099756][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 223.832456][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.843231][ T6648] ubi0: attaching mtd0 [ 226.850584][ T6648] ubi0: scanning is finished [ 226.855252][ T6648] ubi0: empty MTD device detected [ 227.048571][ T6648] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 232.043877][ T6688] ALSA: mixer_oss: invalid OSS volume '' [ 238.243212][ T5086] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 238.243312][ T5086] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 238.251673][ T5086] Bluetooth: hci2: Malformed LE Event: 0x02 [ 240.345452][ T6743] Zero length message leads to an empty skb [ 241.790357][ T6753] loop3: detected capacity change from 0 to 40427 [ 241.846705][ T6753] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 243.661865][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 245.369051][ T6783] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 246.825954][ T6796] overlayfs: failed to clone upperpath [ 249.943192][ T6818] pim6reg: entered allmulticast mode [ 251.209625][ T6823] syzkaller0: entered promiscuous mode [ 251.238070][ T6823] syzkaller0: entered allmulticast mode [ 251.270561][ T6823] tipc: Started in network mode [ 251.286523][ T6823] tipc: Node identity 12f9dd94dbbf, cluster identity 4711 [ 251.318678][ T6823] tipc: Enabled bearer , priority 0 [ 251.401242][ T6823] tipc: Resetting bearer [ 251.733659][ T6822] tipc: Resetting bearer [ 252.428802][ T6822] tipc: Disabling bearer [ 252.864644][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 252.875016][ T6834] netlink: 'syz.3.219': attribute type 2 has an invalid length. [ 252.883385][ T6834] netlink: 'syz.3.219': attribute type 1 has an invalid length. [ 255.708186][ T5086] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 255.708271][ T5086] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 255.717454][ T5086] Bluetooth: hci0: Malformed LE Event: 0x02 [ 257.023857][ T6836] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 257.051009][ T6836] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 257.164180][ T6836] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 257.834850][ T6861] loop3: detected capacity change from 0 to 8192 [ 257.989058][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.995588][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.040773][ T6861] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 258.054276][ T6861] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 258.064293][ T6861] REISERFS (device loop3): using ordered data mode [ 258.070930][ T6861] reiserfs: using flush barriers [ 258.199740][ T6861] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 258.216825][ T6861] REISERFS (device loop3): checking transaction log (loop3) [ 258.255098][ T6861] REISERFS (device loop3): Using r5 hash to sort names [ 258.265585][ T6861] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 259.637890][ T6875] syzkaller0: entered promiscuous mode [ 260.997730][ T6875] syzkaller0: entered allmulticast mode [ 261.511270][ T6875] tipc: Enabled bearer , priority 0 [ 261.567195][ T6875] tipc: Resetting bearer [ 261.728337][ T6872] tipc: Resetting bearer [ 262.785290][ T6886] loop3: detected capacity change from 0 to 256 [ 263.166570][ T6872] tipc: Disabling bearer [ 263.253059][ T6886] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 263.262557][ T6886] exFAT-fs (loop3): Filesystem has been set read-only [ 263.269457][ T6886] exFAT-fs (loop3): failed to count the number of clusters in root [ 263.277495][ T6886] exFAT-fs (loop3): failed to recognize exfat type [ 264.217569][ T171] tipc: Node number set to 3376864660 [ 271.004790][ T6917] loop3: detected capacity change from 0 to 128 [ 271.373359][ T6917] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 271.430033][ T6922] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 271.882541][ T6917] hpfs: filesystem error: improperly stopped [ 272.140341][ T6917] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 272.148267][ T6917] hpfs: You really don't want any checks? You are crazy... [ 272.155660][ T6917] hpfs: Code page index out of array [ 272.161007][ T6917] hpfs: code page support is disabled [ 272.168038][ T6917] hpfs: hpfs_map_4sectors(): unaligned read [ 272.283067][ T6917] hpfs: hpfs_map_4sectors(): unaligned read [ 272.289050][ T6917] hpfs: filesystem error: unable to find root dir [ 274.795911][ T6939] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 278.370892][ T6956] bridge0: entered promiscuous mode [ 278.377348][ T6956] vlan2: entered promiscuous mode [ 280.525031][ T6961] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.562667][ T8] IPVS: starting estimator thread 0... [ 281.256700][ T6967] netlink: 'syz.0.250': attribute type 4 has an invalid length. [ 282.263011][ T6963] IPVS: using max 17 ests per chain, 40800 per kthread [ 283.011030][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 284.377159][ T6979] loop3: detected capacity change from 0 to 32768 [ 284.554210][ T6979] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 284.835672][ T6979] XFS (loop3): Ending clean mount [ 284.947200][ T6979] XFS (loop3): Quotacheck needed: Please wait. [ 285.086808][ T6979] XFS (loop3): Quotacheck: Done. [ 285.478665][ T27] audit: type=1800 audit(1784275084.701:3): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.255" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 285.908629][ T5779] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 287.859490][ T7010] loop0: detected capacity change from 0 to 512 [ 287.977115][ T7011] NILFS (nullb0): couldn't find nilfs on the device [ 289.675364][ T7015] syzkaller0: entered promiscuous mode [ 289.686645][ T7015] syzkaller0: entered allmulticast mode [ 289.697329][ T7010] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 289.726666][ T7010] FAT-fs (loop0): Filesystem has been set read-only [ 289.744996][ T7015] tipc: Started in network mode [ 289.753796][ T7015] tipc: Node identity d614565685dd, cluster identity 4711 [ 289.787839][ T7015] tipc: Enabled bearer , priority 0 [ 289.850385][ T7015] tipc: Resetting bearer [ 289.951506][ T7014] tipc: Resetting bearer [ 290.214928][ T7014] tipc: Disabling bearer [ 292.621028][ T7019] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 297.189081][ T7059] tipc: Enabling of bearer rejected, failed to enable media [ 298.056678][ T7066] trusted_key: syz.3.274 sent an empty control message without MSG_MORE. [ 305.643310][ T7096] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 308.486211][ T7111] loop3: detected capacity change from 0 to 128 [ 308.535429][ T7111] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.581957][ T7111] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.659193][ T7124] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 310.950493][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.219494][ T7154] loop3: detected capacity change from 0 to 256 [ 316.584308][ T7171] loop0: detected capacity change from 0 to 1024 [ 317.254623][ T7171] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 317.265683][ T7171] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 317.286483][ T7171] JBD2: no valid journal superblock found [ 317.324126][ T7171] EXT4-fs (loop0): Could not load journal inode [ 322.810311][ T23] IPVS: starting estimator thread 0... [ 322.823101][ T7205] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.868163][ T27] audit: type=1326 audit(1784275119.709:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 322.934046][ T27] audit: type=1326 audit(1784275119.709:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 322.966240][ T7209] IPVS: using max 18 ests per chain, 43200 per kthread [ 323.014736][ T27] audit: type=1326 audit(1784275119.719:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 323.096151][ T27] audit: type=1326 audit(1784275119.719:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 323.158580][ T27] audit: type=1326 audit(1784275119.719:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 323.226673][ T27] audit: type=1326 audit(1784275119.719:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 323.311070][ T27] audit: type=1326 audit(1784275119.719:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 323.405395][ T27] audit: type=1326 audit(1784275119.719:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 323.430081][ T27] audit: type=1326 audit(1784275119.719:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 323.454832][ T27] audit: type=1326 audit(1784275119.719:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.1.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f568879de99 code=0x7ffc0000 [ 323.479797][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.486145][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.504438][ T7207] netlink: 14 bytes leftover after parsing attributes in process `syz.2.306'. [ 326.209650][ T7229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 326.221326][ T7229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 327.258240][ T7234] tipc: Can't bind to reserved service type 1 [ 327.273408][ T7233] bridge1: entered promiscuous mode [ 329.344805][ T7253] syz.2.316 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 331.296818][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 332.864610][ T7274] Cannot find add_set index 0 as target [ 333.835503][ T7285] futex_wake_op: syz.1.323 tries to shift op by 144; fix this program [ 334.844553][ T7286] netlink: 'syz.3.322': attribute type 4 has an invalid length. [ 334.852588][ T7286] netlink: 17 bytes leftover after parsing attributes in process `syz.3.322'. [ 337.421435][ T7311] syz.1.331 uses obsolete (PF_INET,SOCK_PACKET) [ 340.991880][ T7336] netlink: 'syz.2.336': attribute type 4 has an invalid length. [ 340.999648][ T7336] netlink: 17 bytes leftover after parsing attributes in process `syz.2.336'. [ 341.026013][ T7334] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 341.364072][ T7340] loop3: detected capacity change from 0 to 1024 [ 341.426568][ T7340] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 341.426568][ T7340] [ 341.581427][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 341.581482][ T27] audit: type=1326 audit(1784275137.162:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 341.883961][ T27] audit: type=1326 audit(1784275137.162:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 342.543390][ T27] audit: type=1326 audit(1784275137.171:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 342.746791][ T27] audit: type=1326 audit(1784275137.171:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 343.759910][ T27] audit: type=1326 audit(1784275137.171:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 343.889508][ T27] audit: type=1326 audit(1784275137.171:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 343.977713][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 343.987297][ T27] audit: type=1326 audit(1784275137.171:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 344.074873][ T27] audit: type=1326 audit(1784275137.171:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 344.100776][ T27] audit: type=1326 audit(1784275137.171:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 344.124584][ T27] audit: type=1326 audit(1784275137.181:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 344.424796][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 347.498029][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 353.743984][ T7375] loop3: detected capacity change from 0 to 512 [ 353.751487][ T7375] EXT4-fs: Ignoring removed orlov option [ 353.808506][ T7376] bridge1: entered promiscuous mode [ 353.981328][ T7378] loop0: detected capacity change from 0 to 8 [ 354.106839][ T7375] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 354.118250][ T7375] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 354.118643][ T7375] EXT4-fs: failed to create workqueue [ 354.133644][ T7375] EXT4-fs (loop3): mount failed [ 361.329846][ T7430] loop0: detected capacity change from 0 to 8 [ 361.387285][ T7428] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7428] [ 361.545243][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 361.545259][ T27] audit: type=1326 audit(1784275155.915:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.0.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f604c79de99 code=0x0 [ 362.042591][ T7438] SQUASHFS error: Failed to read block 0x4de: -5 [ 362.054114][ T7438] SQUASHFS error: Failed to read block 0x4de: -5 [ 362.089624][ T7438] SQUASHFS error: Failed to read block 0x4de: -5 [ 362.100663][ T7438] SQUASHFS error: Failed to read block 0x4de: -5 [ 362.109470][ T7438] SQUASHFS error: Failed to read block 0x4de: -5 [ 362.117077][ T7438] SQUASHFS error: Failed to read block 0x4de: -5 [ 362.543466][ T27] audit: type=1800 audit(1784275156.402:67): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.359" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 362.707157][ T7398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.216561][ T7477] futex_wake_op: syz.0.369 tries to shift op by 144; fix this program [ 370.437818][ T7484] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 372.231993][ T5086] Bluetooth: hci3: unexpected event for opcode 0x042c [ 372.556329][ T7505] loop0: detected capacity change from 0 to 512 [ 372.700828][ T7505] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.378: corrupted inode contents [ 372.707881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.821225][ T7505] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 373.237032][ T7505] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.378: corrupted inode contents [ 374.121303][ T7505] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.378: mark_inode_dirty error [ 374.140440][ T7505] EXT4-fs (loop0): 1 orphan inode deleted [ 374.148271][ T7505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.382444][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.434828][ T7531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.822152][ T7539] loop0: detected capacity change from 0 to 32768 [ 376.897890][ T7539] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 378.004676][ T7539] XFS (loop0): Ending clean mount [ 378.036279][ T7539] XFS (loop0): Quotacheck needed: Please wait. [ 378.127718][ T7539] XFS (loop0): Quotacheck: Done. [ 378.776517][ T27] audit: type=1800 audit(1784275171.702:68): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.384" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 378.979817][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 381.078292][ T7575] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 382.370257][ T7598] xt_TPROXY: Can be used only with -p tcp or -p udp [ 383.100354][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 383.128545][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.186305][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.202360][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.226996][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.244413][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.262536][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.281515][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.299700][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.307172][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.331524][ T7612] overlayfs: failed to clone upperpath [ 383.342333][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.356323][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.390925][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.398986][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 383.428152][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.435616][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.452884][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.479142][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.507434][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.523811][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.531371][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.556014][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.567377][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.590802][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.857558][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.866214][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.874868][ T23] usb 4-1: config 0 has no interfaces? [ 383.880678][ T23] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 383.889954][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.898724][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 383.914321][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.922709][ T5873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.004344][ T5873] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.04 Device [syz1] on syz1 [ 384.035247][ T23] usb 4-1: config 0 descriptor?? [ 384.641443][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.700844][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.800658][ T5086] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 384.819170][ T5873] usb 4-1: USB disconnect, device number 2 [ 387.757014][ T7651] xt_TPROXY: Can be used only with -p tcp or -p udp [ 389.123957][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.130342][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.360245][ T7679] loop3: detected capacity change from 0 to 8 [ 392.407787][ T7701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 394.370675][ T7725] netlink: 'syz.1.415': attribute type 21 has an invalid length. [ 394.405140][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 394.435217][ T7725] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 394.587479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.134125][ T7746] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 395.162217][ T7744] IPVS: stopping backup sync thread 7746 ... [ 399.756624][ T7790] loop3: detected capacity change from 0 to 2048 [ 399.811539][ T7790] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 400.103158][ T7790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.060614][ T7815] bridge0: port 3(syz_tun) entered blocking state [ 403.068180][ T7815] bridge0: port 3(syz_tun) entered disabled state [ 403.075701][ T7815] syz_tun: entered allmulticast mode [ 403.094281][ T7815] syz_tun: entered promiscuous mode [ 403.100738][ T7815] bridge0: port 3(syz_tun) entered blocking state [ 403.108921][ T7815] bridge0: port 3(syz_tun) entered forwarding state [ 405.168045][ T7849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.899076][ T7853] loop3: detected capacity change from 0 to 2048 [ 405.949348][ T7853] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 407.949108][ T7858] netlink: 'syz.1.449': attribute type 10 has an invalid length. [ 407.956988][ T7858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.449'. [ 408.996067][ T7858] team0: Port device geneve0 added [ 409.446577][ T27] audit: type=1800 audit(1784275200.708:69): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.452" name="file0" dev="overlay" ino=592 res=0 errno=0 [ 417.459885][ T7918] syzkaller0: entered promiscuous mode [ 417.469382][ T7918] syzkaller0: entered allmulticast mode [ 417.622498][ T7918] tipc: Enabled bearer , priority 0 [ 417.669515][ T7914] tipc: Resetting bearer [ 417.816165][ T7914] tipc: Disabling bearer [ 422.904163][ T7944] loop3: detected capacity change from 0 to 512 [ 422.946438][ T7944] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 423.010737][ T7944] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 423.223257][ T7944] EXT4-fs (loop3): 1 truncate cleaned up [ 423.258498][ T7944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.558168][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.338995][ T7961] ì: renamed from bond_slave_0 (while UP) [ 425.567813][ T7962] loop3: detected capacity change from 0 to 2048 [ 426.196608][ T7962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.209328][ T7962] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.309489][ T7955] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 426.317404][ T7955] netlink: 40 bytes leftover after parsing attributes in process `syz.0.472'. [ 426.343315][ T7955] team0: Port device geneve0 added [ 426.473966][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.478998][ T8000] capability: warning: `syz.0.482' uses deprecated v2 capabilities in a way that may be insecure [ 430.541558][ T5086] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 430.942817][ T8002] xt_CT: No such helper "pptp" [ 431.488741][ T7991] IPVS: stopping backup sync thread 8005 ... [ 433.367934][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 435.731299][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 435.775946][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.783472][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.066235][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 437.462658][ T5086] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 440.562193][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.572786][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.582873][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.593527][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.603443][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.614078][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.624121][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.634822][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.901646][ T8058] befs: (nullb0): invalid magic header [ 442.743564][ T5822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 442.959229][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.969736][ T5822] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 442.979319][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.990092][ T5822] usb 4-1: config 0 descriptor?? [ 443.000627][ T5822] pwc: Askey VC010 type 2 USB webcam detected. [ 443.432096][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.441026][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.300281][ T5822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 445.326221][ T5822] pwc: recv_control_msg error -32 req 02 val 2700 [ 446.215279][ T5822] pwc: recv_control_msg error -71 req 04 val 1000 [ 446.225025][ T5822] pwc: recv_control_msg error -71 req 04 val 1300 [ 446.232419][ T5822] pwc: recv_control_msg error -71 req 04 val 1400 [ 446.240791][ T5822] pwc: recv_control_msg error -71 req 02 val 2000 [ 446.251322][ T5822] pwc: recv_control_msg error -71 req 02 val 2100 [ 446.258639][ T5822] pwc: recv_control_msg error -71 req 04 val 1500 [ 446.269360][ T5822] pwc: recv_control_msg error -71 req 02 val 2500 [ 446.297250][ T5822] pwc: recv_control_msg error -71 req 02 val 2400 [ 446.537619][ T5822] pwc: recv_control_msg error -71 req 02 val 2600 [ 447.024962][ T5822] pwc: recv_control_msg error -71 req 02 val 2900 [ 447.045338][ T5822] pwc: recv_control_msg error -71 req 02 val 2800 [ 447.057565][ T5822] pwc: recv_control_msg error -71 req 04 val 1100 [ 447.065688][ T5822] pwc: recv_control_msg error -71 req 04 val 1200 [ 447.526026][ T5822] pwc: Registered as video103. [ 447.735472][ T5822] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 448.312471][ T5822] usb 4-1: USB disconnect, device number 3 [ 448.808987][ T8106] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 453.692616][ T8131] loop3: detected capacity change from 0 to 64 [ 453.847114][ T27] audit: type=1800 audit(1784275242.278:70): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.514" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 454.246050][ T8132] bridge0: port 3(syz_tun) entered blocking state [ 454.255550][ T8132] bridge0: port 3(syz_tun) entered disabled state [ 454.265164][ T8132] syz_tun: entered allmulticast mode [ 454.273487][ T8132] syz_tun: entered promiscuous mode [ 454.284613][ T5779] hfs: node 4:3 still has 1 user(s)! [ 457.361746][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.368160][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.795613][ T8152] No such timeout policy "syz1" [ 463.002434][ T8173] netlink: 'syz.3.525': attribute type 10 has an invalid length. [ 463.010477][ T8173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.525'. [ 463.458469][ T8182] loop0: detected capacity change from 0 to 2048 [ 465.724156][ T8182] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 465.742729][ T8182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.774937][ T8173] team0: Port device geneve0 added [ 467.014347][ T8191] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 467.243689][ T8196] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 467.342879][ T8196] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 467.354694][ T8196] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 467.363547][ T8196] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 467.386524][ T8196] bond1: (slave geneve2): making interface the new active one [ 468.829724][ T8196] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 469.285914][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'. [ 469.298434][ T8198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.392774][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.415597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.436540][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.455261][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.466272][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.480192][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.491160][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.514221][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.530027][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.542906][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.558980][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.570541][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.585026][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.973313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 471.241579][ T8232] loop3: detected capacity change from 0 to 512 [ 471.330856][ T8232] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 471.671673][ T8232] EXT4-fs (loop3): 1 truncate cleaned up [ 471.690038][ T8232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.818920][ T8246] fuse: Bad value for 'fd' [ 473.635398][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.918544][ T8269] overlayfs: failed to clone upperpath [ 475.890789][ T8266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 475.898771][ T8266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 475.904785][ T8266] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 476.997373][ T8282] trusted_key: encrypted_key: insufficient parameters specified [ 477.033648][ T8266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.041103][ T8266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 477.047143][ T8266] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 478.599888][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 478.606098][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 479.248336][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 479.254618][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 479.720636][ T8296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.792991][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 481.097109][ T8304] loop0: detected capacity change from 0 to 32768 [ 481.104980][ T8304] xfs: Unknown parameter 'appraise' [ 481.825712][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 483.396958][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 483.614774][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 484.013107][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 484.029705][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 484.086103][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 484.123235][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1280, setting to 1024 [ 484.184751][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 484.220889][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.240390][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 484.250038][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.411786][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 485.194091][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 485.323028][ T23] usbtmc 4-1:16.0: can't read capabilities [ 485.549977][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 488.236711][ T5786] usb 4-1: USB disconnect, device number 4 [ 490.030483][ T8358] futex_wake_op: syz.2.564 tries to shift op by 144; fix this program [ 492.108700][ T8379] loop3: detected capacity change from 0 to 16 [ 492.138581][ T8379] erofs: (device loop3): mounted with root inode @ nid 36. [ 492.183814][ T8379] syz.3.570: attempt to access beyond end of device [ 492.183814][ T8379] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 492.234028][ T8379] syz.3.570: attempt to access beyond end of device [ 492.234028][ T8379] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 492.252899][ T8379] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 492.291302][ T27] audit: type=1800 audit(1784275278.216:71): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.570" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 497.371487][ T8393] loop3: detected capacity change from 0 to 1024 [ 498.527583][ T8392] netlink: 'syz.2.573': attribute type 9 has an invalid length. [ 498.921583][ T8396] loop0: detected capacity change from 0 to 64 [ 499.141561][ T8392] overlayfs: failed to clone lowerpath [ 499.461943][ T27] audit: type=1800 audit(1784275284.950:72): pid=8396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.575" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 499.738515][ T8250] bridge0: port 3(syz_tun) entered disabled state [ 499.793708][ T8250] syz_tun (unregistering): left allmulticast mode [ 499.800433][ T8250] syz_tun (unregistering): left promiscuous mode [ 499.806896][ T8250] bridge0: port 3(syz_tun) entered disabled state [ 502.871185][ T1301] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.347614][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.358740][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.368409][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.377035][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.388059][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 503.397720][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 503.476066][ T1301] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.597365][ T1301] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.283219][ T1301] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.774027][ T5086] Bluetooth: hci0: command tx timeout [ 505.839144][ T8416] chnl_net:caif_netlink_parms(): no params data found [ 510.265778][ T8459] xt_hashlimit: max too large, truncated to 1048576 [ 510.274745][ T8459] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 512.181005][ T5086] Bluetooth: hci0: command tx timeout [ 515.286913][ T8469] input: syz0 as /devices/virtual/input/input6 [ 515.333354][ T5086] Bluetooth: hci0: command tx timeout [ 516.145284][ T8471] loop3: detected capacity change from 0 to 131072 [ 516.208990][ T8416] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.227149][ T8416] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.463059][ T8129] I/O error, dev loop3, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 516.489231][ T8416] bridge_slave_0: entered allmulticast mode [ 516.520242][ T8416] bridge_slave_0: entered promiscuous mode [ 516.993475][ T8416] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.003414][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.010831][ T8416] bridge_slave_1: entered allmulticast mode [ 517.024553][ T8416] bridge_slave_1: entered promiscuous mode [ 517.232581][ T8416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.315286][ T8416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.556541][ T5086] Bluetooth: hci0: command tx timeout [ 517.707228][ T8416] team0: Port device team_slave_0 added [ 517.719221][ T8416] team0: Port device team_slave_1 added [ 517.766707][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.773911][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.822548][ T8416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.015245][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.031489][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.086542][ T8416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.327690][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 521.441594][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 521.486161][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.912888][ T8508] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 521.938062][ T8508] VFS: Can't find a romfs filesystem on dev nullb0. [ 521.938062][ T8508] [ 522.664398][ T8416] hsr_slave_0: entered promiscuous mode [ 522.838052][ T8416] hsr_slave_1: entered promiscuous mode [ 522.878262][ T8416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.147196][ T8416] Cannot create hsr debugfs directory [ 523.888344][ T8521] loop0: detected capacity change from 0 to 736 [ 523.984669][ T8322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 524.059562][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.564218][ T1301] hsr_slave_0: left promiscuous mode [ 525.574141][ T1301] hsr_slave_1: left promiscuous mode [ 525.586217][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.095554][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.115817][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.132415][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.146771][ T1301] bridge_slave_1: left allmulticast mode [ 526.154703][ T1301] bridge_slave_1: left promiscuous mode [ 526.162738][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.180266][ T1301] bridge_slave_0: left allmulticast mode [ 526.188049][ T1301] bridge_slave_0: left promiscuous mode [ 526.194093][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.259149][ T1301] veth1_macvtap: left promiscuous mode [ 526.265369][ T1301] veth0_macvtap: left promiscuous mode [ 526.288376][ T1301] veth1_vlan: left promiscuous mode [ 526.310009][ T1301] veth0_vlan: left promiscuous mode [ 526.734653][ T1301] team0 (unregistering): Port device geneve0 removed [ 527.257646][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 527.310744][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 527.354626][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.400691][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.723363][ T1301] bond0 (unregistering): Released all slaves [ 527.950938][ T8532] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 528.005140][ T8532] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 528.060510][ T8557] loop0: detected capacity change from 0 to 256 [ 528.069137][ T8532] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 528.127577][ T8416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 528.391965][ T8416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 528.507413][ T8561] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 528.841184][ T8416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 528.871671][ T8416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 531.480492][ T8416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.487041][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 531.514718][ T8416] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.260115][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.267371][ T6326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.763115][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.770381][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.495520][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'. [ 534.816845][ T8416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.837350][ T1301] IPVS: stop unused estimator thread 0... [ 535.189647][ T8609] loop3: detected capacity change from 0 to 32768 [ 535.202016][ T8609] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.613 (8609) [ 535.224607][ T8609] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 535.236252][ T8609] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 535.245838][ T8609] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 535.255294][ T8609] BTRFS info (device loop3): use zstd compression, level 3 [ 535.262871][ T8609] BTRFS info (device loop3): force clearing of disk cache [ 535.270051][ T8609] BTRFS info (device loop3): enabling disk space caching [ 535.277173][ T8609] BTRFS info (device loop3): disk space caching is enabled [ 535.680711][ T8609] BTRFS info (device loop3): enabling ssd optimizations [ 535.687884][ T8609] BTRFS info (device loop3): auto enabling async discard [ 535.718997][ T8609] BTRFS info (device loop3): rebuilding free space tree [ 535.958360][ T8609] BTRFS info (device loop3): disabling free space tree [ 535.965488][ T8609] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 535.975262][ T8609] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 537.213333][ T8643] netlink: 96 bytes leftover after parsing attributes in process `syz.0.615'. [ 537.795576][ T5779] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 538.198111][ T8416] veth0_vlan: entered promiscuous mode [ 538.359249][ T8416] veth1_vlan: entered promiscuous mode [ 538.988577][ T8416] veth0_macvtap: entered promiscuous mode [ 539.053952][ T8322] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (8322) [ 539.107845][ T8416] veth1_macvtap: entered promiscuous mode [ 539.248497][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.290493][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.322042][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.349190][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.380960][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.413543][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.457702][ T8416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.610333][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.718041][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.868009][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.954559][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.252578][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.303731][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.362646][ T8416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.489778][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'. [ 540.518312][ T8416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.568243][ T8416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.599997][ T8416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.633050][ T8416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.789140][ T8685] overlayfs: missing 'lowerdir' [ 541.818268][ T8689] IPVS: ip_vs_add_dest(): server weight less than zero [ 541.899692][ T8689] IPVS: rr: FWM 3 0x00000003 - no destination available [ 542.974652][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.001144][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.121218][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.129569][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.139893][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 543.178258][ T8702] syz_tun: left allmulticast mode [ 543.184575][ T8702] syz_tun: left promiscuous mode [ 543.208925][ T8702] bridge0: port 3(syz_tun) entered disabled state [ 543.273388][ T8702] bridge_slave_1: left allmulticast mode [ 543.290354][ T8702] bridge_slave_1: left promiscuous mode [ 543.308005][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.322865][ T8702] bridge_slave_0: left allmulticast mode [ 543.328679][ T8702] bridge_slave_0: left promiscuous mode [ 543.336375][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.946097][ T8719] loop4: detected capacity change from 0 to 1024 [ 543.983791][ T8719] EXT4-fs: Ignoring removed mblk_io_submit option [ 544.029045][ T8719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 544.047997][ T8719] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 544.341634][ T8719] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 545.649763][ T5794] Bluetooth: hci0: command tx timeout [ 545.745775][ T27] audit: type=1326 audit(1784275328.231:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 546.014905][ T27] audit: type=1326 audit(1784275328.231:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 546.347239][ T27] audit: type=1326 audit(1784275328.437:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 546.401377][ T27] audit: type=1326 audit(1784275328.437:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 546.817102][ T27] audit: type=1326 audit(1784275328.437:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 546.841471][ T27] audit: type=1326 audit(1784275328.484:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 546.865994][ T27] audit: type=1326 audit(1784275328.484:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 546.927904][ T27] audit: type=1326 audit(1784275328.484:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 547.021099][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 547.029176][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 547.119456][ T27] audit: type=1326 audit(1784275328.484:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 547.223828][ T9] usb 4-1: device descriptor read/64, error -32 [ 547.226963][ T27] audit: type=1326 audit(1784275328.484:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 547.557636][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 547.871179][ T8755] loop4: detected capacity change from 0 to 1024 [ 550.845635][ T8755] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 550.857830][ T8755] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 550.952827][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 550.973104][ T8755] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 550.981580][ T8755] EXT4-fs (loop4): orphan cleanup on readonly fs [ 550.988215][ T8755] EXT4-fs error (device loop4): ext4_ext_check_inode:530: inode #3: comm syz.4.631: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 551.008336][ T8755] EXT4-fs (loop4): Remounting filesystem read-only [ 551.015528][ T8755] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 551.030274][ T8755] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 551.038424][ T8755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 551.071901][ T9] usb 4-1: device descriptor read/all, error -71 [ 551.078643][ T9] usb usb4-port1: attempt power cycle [ 551.394202][ T8416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.650560][ T8769] NILFS (nullb0): couldn't find nilfs on the device [ 552.693819][ T8776] ipt_REJECT: ECHOREPLY no longer supported. [ 553.854549][ T8788] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 553.865162][ T8788] loop4: detected capacity change from 0 to 8 [ 553.872536][ T8788] squashfs: Unknown parameter 'wj' [ 554.279187][ T8791] MTD: Couldn't look up '/dev/nullb0': -15 [ 566.041405][ T5794] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 566.975624][ T28] libceph: connect (1)[c::]:6789 error -22 [ 567.049861][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 567.163719][ T8845] ceph: No mds server is up or the cluster is laggy [ 569.242704][ T8868] qrtr: Invalid version 0 [ 574.317723][ T8886] loop0: detected capacity change from 0 to 512 [ 574.570077][ T8886] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.656: bad orphan inode 11862016 [ 574.743362][ T8886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 574.756215][ T8886] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.152465][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 577.645870][ T8920] loop4: detected capacity change from 0 to 1024 [ 577.657907][ T8920] hfsplus: unable to parse mount options [ 577.920987][ T8919] bridge0: port 3(macvlan0) entered blocking state [ 577.943367][ T8919] bridge0: port 3(macvlan0) entered disabled state [ 578.522440][ T8919] macvlan0: entered allmulticast mode [ 578.584556][ T8919] veth1_vlan: entered allmulticast mode [ 578.612851][ T8919] macvlan0: entered promiscuous mode [ 578.648266][ T8919] bridge0: port 3(macvlan0) entered blocking state [ 578.655030][ T8919] bridge0: port 3(macvlan0) entered forwarding state [ 580.594560][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.665'. [ 581.016483][ T8958] xt_TPROXY: Can be used only with -p tcp or -p udp [ 585.776321][ T8987] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 586.332959][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.342553][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.357447][ T8994] netlink: 'syz.2.674': attribute type 2 has an invalid length. [ 591.125894][ T9029] futex_wake_op: syz.3.671 tries to shift op by 144; fix this program [ 594.077676][ T5794] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 594.375745][ T9050] netlink: 'syz.3.682': attribute type 21 has an invalid length. [ 594.390876][ T9050] netlink: 132 bytes leftover after parsing attributes in process `syz.3.682'. [ 595.252623][ T9062] 9pnet_fd: Insufficient options for proto=fd [ 598.624160][ T9082] loop3: detected capacity change from 0 to 512 [ 598.630914][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 598.850997][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 598.885808][ T5873] usb 5-1: config 0 has no interfaces? [ 598.929197][ T5873] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 598.946958][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.955412][ T5873] usb 5-1: Product: syz [ 599.024351][ T5873] usb 5-1: Manufacturer: syz [ 599.075536][ T5873] usb 5-1: SerialNumber: syz [ 599.219505][ T5873] usb 5-1: config 0 descriptor?? [ 599.724871][ T9082] EXT4-fs: Conflicting test_dummy_encryption options [ 599.750349][ T968] usb 5-1: USB disconnect, device number 2 [ 600.199346][ T9099] netlink: 'syz.2.691': attribute type 11 has an invalid length. [ 600.784829][ T9099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.691'. [ 601.060479][ T9099] ip6erspan1: entered allmulticast mode [ 605.826346][ T9109] loop0: detected capacity change from 0 to 512 [ 605.827453][ T9109] ext4: Unknown parameter 'context' [ 605.969131][ T8816] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 607.845673][ T9126] loop0: detected capacity change from 0 to 32768 [ 607.853516][ T9126] xfs: Unknown parameter 'appraise' [ 611.241732][ T9153] loop4: detected capacity change from 0 to 128 [ 612.162476][ T9153] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.235797][ T9153] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 612.859061][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.704'. [ 612.859092][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.704'. [ 612.859139][ T9173] netlink: 6 bytes leftover after parsing attributes in process `syz.2.704'. [ 614.645663][ T9168] xt_CT: No such helper "netbios-ns" [ 614.658168][ T8416] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.597787][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.707'. [ 616.611490][ T9193] overlayfs: failed to clone upperpath [ 617.249466][ T9208] syzkaller0: entered promiscuous mode [ 617.255442][ T9208] syzkaller0: entered allmulticast mode [ 617.317001][ T9210] block nbd3: NBD_DISCONNECT [ 617.918262][ T9208] tipc: Enabled bearer , priority 0 [ 618.199989][ T9218] binder: 9213:9218 ioctl 4018620d 0 returned -22 [ 618.214663][ T9218] openvswitch: netlink: EtherType 0 is less than min 600 [ 619.311693][ T9204] tipc: Resetting bearer [ 619.836246][ T9231] syz.2.715(9231): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 621.408641][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 621.408660][ T27] audit: type=1326 audit(1784275397.735:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 621.455937][ T9204] tipc: Disabling bearer [ 621.474334][ T27] audit: type=1326 audit(1784275397.735:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 621.622393][ T27] audit: type=1326 audit(1784275397.745:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 621.995704][ T27] audit: type=1326 audit(1784275397.745:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 622.049896][ T9233] loop4: detected capacity change from 0 to 1024 [ 622.057684][ T9233] EXT4-fs: Ignoring removed bh option [ 622.083550][ T27] audit: type=1326 audit(1784275397.745:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 622.139517][ T9233] EXT4-fs: Ignoring removed bh option [ 622.173083][ T9233] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 623.037972][ T9233] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 623.038427][ T9233] EXT4-fs: failed to create workqueue [ 623.087540][ T9233] EXT4-fs (loop4): mount failed [ 623.095667][ T27] audit: type=1326 audit(1784275397.745:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 623.166299][ T27] audit: type=1326 audit(1784275397.745:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 623.249992][ T27] audit: type=1326 audit(1784275397.745:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 623.340204][ T27] audit: type=1326 audit(1784275397.745:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 623.423268][ T27] audit: type=1326 audit(1784275399.259:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.2.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c65b9de99 code=0x7ffc0000 [ 623.906372][ T9250] loop0: detected capacity change from 0 to 128 [ 623.911774][ T8815] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 623.933290][ T9250] FAT-fs (loop0): Directory bread(block 414) failed [ 623.940608][ T9250] FAT-fs (loop0): Directory bread(block 415) failed [ 623.949442][ T9250] FAT-fs (loop0): Directory bread(block 416) failed [ 623.956622][ T9250] FAT-fs (loop0): Directory bread(block 417) failed [ 623.963231][ T9250] FAT-fs (loop0): Directory bread(block 418) failed [ 623.969886][ T9250] FAT-fs (loop0): Directory bread(block 419) failed [ 623.976545][ T9250] FAT-fs (loop0): Directory bread(block 420) failed [ 623.983148][ T9250] FAT-fs (loop0): Directory bread(block 421) failed [ 624.099215][ T9253] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 624.132087][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.413844][ T9260] loop4: detected capacity change from 0 to 256 [ 624.423619][ T9260] exfat: Deprecated parameter 'namecase' [ 624.429544][ T9260] exfat: Deprecated parameter 'namecase' [ 624.435475][ T9260] exfat: Unknown parameter 'zero_size_dir' [ 625.134395][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.213363][ T5873] IPVS: starting estimator thread 0... [ 625.350837][ T9261] IPVS: using max 28 ests per chain, 67200 per kthread [ 625.432788][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.440331][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.494947][ T9266] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.502637][ T9266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.512926][ T9266] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.520272][ T9266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.622990][ T9266] team0: Port device bridge0 added [ 628.538477][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 628.604875][ T9288] loop3: detected capacity change from 0 to 256 [ 630.020856][ T5794] Bluetooth: hci0: link tx timeout [ 630.026717][ T5794] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 632.603769][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 632.979279][ T9323] loop3: detected capacity change from 0 to 4096 [ 633.005414][ T9323] EXT4-fs (loop3): Test dummy encryption mode enabled [ 633.810042][ T5822] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 634.544734][ T9323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.165904][ T5822] usb 5-1: device descriptor read/all, error -71 [ 636.429038][ T9323] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 636.511810][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.527305][ T9347] loop0: detected capacity change from 0 to 1024 [ 636.645914][ T9347] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 636.740174][ T9347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.020760][ T9364] tipc: Started in network mode [ 637.025724][ T9364] tipc: Node identity ac14140f, cluster identity 4711 [ 637.034019][ T9364] tipc: New replicast peer: 255.255.255.255 [ 637.041601][ T9364] tipc: Enabled bearer , priority 10 [ 637.053245][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 638.004468][ T9356] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 638.276084][ T9372] loop4: detected capacity change from 0 to 128 [ 638.358493][ T9372] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 638.375142][ T9356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 638.438846][ T9347] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 638.462404][ T9347] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 638.475192][ T9347] EXT4-fs (loop0): This should not happen!! Data will be lost [ 638.475192][ T9347] [ 638.484956][ T9347] EXT4-fs (loop0): Total free blocks count 0 [ 638.491147][ T9347] EXT4-fs (loop0): Free/Dirty block details [ 638.508399][ T9347] EXT4-fs (loop0): free_blocks=20480 [ 638.513966][ T9347] EXT4-fs (loop0): dirty_blocks=80 [ 638.519190][ T9347] EXT4-fs (loop0): Block reservation details [ 638.525361][ T9347] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 638.685936][ T9372] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 638.888550][ T9365] bond2: (slave geneve3): making interface the new active one [ 638.943091][ T9365] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 638.950663][ T4704] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 638.956361][ T9] tipc: Node number set to 2886997007 [ 639.332819][ T9387] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 639.932632][ T8416] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 639.998701][ T9394] loop3: detected capacity change from 0 to 256 [ 640.064998][ T9395] trusted_key: encrypted_key: insufficient parameters specified [ 640.537141][ T9394] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 641.542185][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 641.564312][ T9404] netlink: 48 bytes leftover after parsing attributes in process `syz.4.741'. [ 643.628299][ T9423] ip6erspan0: entered allmulticast mode [ 646.511907][ T9438] Bluetooth: MGMT ver 1.22 [ 646.580407][ T9450] tmpfs: Bad value for 'huge' [ 646.596243][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 646.605652][ T9450] netlink: 43 bytes leftover after parsing attributes in process `syz.2.751'. [ 650.117151][ T5846] Process accounting resumed [ 650.218296][ T9479] Process accounting resumed [ 651.996985][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 652.003319][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 652.404222][ T9499] netlink: 232 bytes leftover after parsing attributes in process `syz.0.759'. [ 652.574968][ T9499] loop0: detected capacity change from 0 to 16 [ 652.652932][ T5794] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 652.938588][ T9499] erofs: (device loop0): mounted with root inode @ nid 36. [ 655.344869][ T9527] bridge_slave_1: left allmulticast mode [ 655.387142][ T9527] bridge_slave_1: left promiscuous mode [ 655.393039][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.515318][ T9527] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 655.572413][ T9503] tmpfs: Bad value for 'huge' [ 655.629941][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 655.672272][ T9503] netlink: 43 bytes leftover after parsing attributes in process `syz.3.761'. [ 656.353820][ T9548] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 659.384462][ T9567] syz_tun: entered allmulticast mode [ 659.529531][ T9567] ipvlan1: entered promiscuous mode [ 659.858833][ T9565] ipvlan1: left promiscuous mode [ 660.986394][ T9585] loop4: detected capacity change from 0 to 128 [ 662.749206][ T9585] FAT-fs (loop4): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 664.725976][ T9580] rtc_cmos 00:00: Alarms can be up to one day in the future [ 664.759178][ T5822] rtc_cmos 00:00: Alarms can be up to one day in the future [ 664.775800][ T5822] rtc_cmos 00:00: Alarms can be up to one day in the future [ 664.800327][ T5822] rtc_cmos 00:00: Alarms can be up to one day in the future [ 664.808087][ T5822] rtc_cmos 00:00: Alarms can be up to one day in the future [ 664.825301][ T5822] rtc rtc0: __rtc_set_alarm: err=-22 [ 666.457870][ T5794] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 666.810036][ T9599] xt_CT: No such helper "snmp_trap" [ 667.545713][ T9610] (null): rxe_set_mtu: Set mtu to 1024 [ 667.901462][ T9610] infiniband syz1: set active [ 667.906617][ T9610] infiniband syz1: added bond0 [ 667.965080][ T9610] RDS/IB: syz1: added [ 667.971124][ T9610] smc: adding ib device syz1 with port count 1 [ 667.977673][ T9610] smc: ib device syz1 port 1 has pnetid [ 670.169288][ T9630] trusted_key: encrypted_key: insufficient parameters specified [ 670.444048][ T9628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.855824][ T5786] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 678.720241][ T9664] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 680.599096][ T5786] usb 5-1: unable to get BOS descriptor or descriptor too short [ 680.767982][ T5786] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 680.775729][ T5786] usb 5-1: can't read configurations, error -71 [ 681.686076][ T9688] trusted_key: encrypted_key: insufficient parameters specified [ 688.883541][ T9711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.499492][ T9713] bridge0: port 3(macvlan0) entered disabled state [ 689.506465][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.514349][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.568596][ T9713] bridge0: port 3(macvlan0) entered blocking state [ 689.575712][ T9713] bridge0: port 3(macvlan0) entered forwarding state [ 689.583977][ T9713] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.591216][ T9713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.598787][ T9713] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.607080][ T9713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.768581][ T9713] team0: Port device bridge0 added [ 690.434726][ T5794] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 693.300254][ T9720] binder: 9719:9720 ioctl c0306201 0 returned -14 [ 693.321324][ T9720] binder: 9719:9720 ioctl 40383d03 0 returned -22 [ 696.248786][ T9733] bridge_slave_1: left allmulticast mode [ 696.254527][ T9733] bridge_slave_1: left promiscuous mode [ 696.278775][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.311411][ T9733] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 699.876166][ T9760] netlink: 'syz.4.811': attribute type 4 has an invalid length. [ 700.538006][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.561887][ T9770] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.569565][ T9770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.686404][ T9770] team0: Port device bridge0 added [ 700.706766][ T9765] fuse: Unknown parameter 'group™)³f_id' [ 701.638442][ T9775] virtio-fs: tag not found [ 701.729493][ T9775] "syz.0.815" (9775) uses obsolete ecb(arc4) skcipher [ 703.210888][ T5821] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 703.385973][ T9788] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 703.392857][ T9788] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 703.401057][ T9788] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 703.409334][ T9788] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 703.417972][ T9788] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 703.427772][ T9788] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 703.435695][ T9788] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 703.454545][ T9788] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 703.462602][ T9788] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 703.469433][ T9788] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 703.476585][ T9788] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 703.483316][ T9788] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 703.490278][ T9788] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 703.497521][ T9788] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 703.504977][ T9788] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 703.540791][ T9788] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 703.548376][ T9788] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 703.555360][ T9788] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 703.562355][ T9788] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 703.569373][ T9788] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 703.576342][ T9788] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 703.583167][ T9788] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 703.590163][ T9788] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 703.596956][ T9788] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 703.603769][ T9788] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 705.184873][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 705.232251][ T9785] siw: device registration error -23 [ 705.378024][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.388317][ T5821] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 705.430109][ T5821] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 705.441278][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.449333][ T5821] usb 4-1: Product: syz [ 705.453926][ T5821] usb 4-1: Manufacturer: syz [ 705.458572][ T5821] usb 4-1: SerialNumber: syz [ 705.468169][ T5821] usb 4-1: config 0 descriptor?? [ 708.028878][ T5873] usb 4-1: USB disconnect, device number 8 [ 708.159563][ T9822] loop4: detected capacity change from 0 to 256 [ 709.358875][ T9833] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 711.860975][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.826'. [ 713.035507][ T9855] loop0: detected capacity change from 0 to 32768 [ 713.167481][ T9858] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 714.144229][ T9868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.830'. [ 714.447405][ T4704] read_mapping_page failed! [ 714.452459][ T4704] ERROR: (device loop0): txCommit: [ 714.452459][ T4704] [ 715.344554][ T4704] jfs_write_inode: jfs_commit_inode failed! [ 716.769557][ T9878] loop3: detected capacity change from 0 to 512 [ 717.382639][ T9878] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 717.396527][ T9878] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: comm syz.3.833: inode #1792: comm syz.3.833: iget: illegal inode # [ 717.524577][ T9878] EXT4-fs (loop3): Remounting filesystem read-only [ 717.531299][ T9878] EXT4-fs (loop3): no journal found [ 717.538378][ T9878] EXT4-fs (loop3): can't get journal size [ 717.554266][ T9878] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 717.567636][ T9878] EXT4-fs (loop3): failed to initialize system zone (-22) [ 717.575383][ T9878] EXT4-fs (loop3): mount failed [ 717.676968][ T9881] loop4: detected capacity change from 0 to 512 [ 717.723889][ T9881] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 717.939426][ T9881] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 717.951081][ T9881] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.834: Invalid inode table block 1 in block_group 0 [ 717.972765][ T9881] EXT4-fs (loop4): get root inode failed [ 717.981091][ T9885] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 717.985779][ T9881] EXT4-fs (loop4): mount failed [ 718.057550][ T9889] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 718.116601][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 718.615852][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 718.624200][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.248702][ T9900] overlayfs: missing 'lowerdir' [ 723.654525][ T5794] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 724.071279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.581274][ T9922] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 725.590216][ T9922] VFS: Can't find a romfs filesystem on dev nullb0. [ 725.590216][ T9922] [ 727.610650][ T9936] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 728.111739][ T9945] loop0: detected capacity change from 0 to 256 [ 728.139020][ T9945] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 731.151794][ T9968] overlayfs: missing 'lowerdir' [ 735.306552][ T9997] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 736.460106][ T9999] netlink: 'syz.0.858': attribute type 10 has an invalid length. [ 737.324501][ T9999] team0: Port device netdevsim0 added [ 737.500275][T10007] netlink: 'syz.0.858': attribute type 10 has an invalid length. [ 737.645245][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 737.645259][ T27] audit: type=1326 audit(1784275505.580:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 737.905212][ T27] audit: type=1326 audit(1784275505.580:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 738.067105][ T27] audit: type=1326 audit(1784275505.617:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 740.081021][ T27] audit: type=1326 audit(1784275505.617:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 740.127110][T10007] team0: Port device netdevsim0 removed [ 740.162632][T10007] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 740.172397][ T27] audit: type=1326 audit(1784275505.617:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 740.231067][ T27] audit: type=1326 audit(1784275505.617:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 740.523781][ T27] audit: type=1326 audit(1784275505.617:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 740.748846][ T27] audit: type=1326 audit(1784275505.617:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 745.443270][ T27] audit: type=1326 audit(1784275505.617:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 746.540689][ T27] audit: type=1326 audit(1784275505.617:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 746.733620][ T27] audit: type=1326 audit(1784275505.617:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 747.870781][ T27] audit: type=1326 audit(1784275505.617:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 749.036726][T10055] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 749.050658][T10055] VFS: Can't find a romfs filesystem on dev nullb0. [ 749.050658][T10055] [ 749.221431][ T27] audit: type=1326 audit(1784275505.617:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 749.462231][ T27] audit: type=1326 audit(1784275505.617:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 751.076855][ T27] audit: type=1326 audit(1784275505.617:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 751.362075][ T27] audit: type=1326 audit(1784275505.617:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 751.446415][ T27] audit: type=1326 audit(1784275505.654:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 751.642974][ T27] audit: type=1326 audit(1784275505.654:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 751.667419][ T27] audit: type=1326 audit(1784275505.654:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 751.762707][ T27] audit: type=1326 audit(1784275505.922:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 751.789570][ T27] audit: type=1326 audit(1784275505.922:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 752.249717][ T27] audit: type=1326 audit(1784275505.922:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 752.520764][ T27] audit: type=1326 audit(1784275505.922:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 752.569313][ T27] audit: type=1326 audit(1784275505.922:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.4.862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62719de99 code=0x7ffc0000 [ 752.688664][T10082] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 754.064808][T10090] loop0: detected capacity change from 0 to 128 [ 755.732610][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 755.741773][T10098] bridge_slave_0: left allmulticast mode [ 755.747594][T10098] bridge_slave_0: left promiscuous mode [ 755.753872][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.822109][T10106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.882'. [ 759.911014][T10098] team0: Port device bridge0 removed [ 764.372061][T10128] loop0: detected capacity change from 0 to 131072 [ 765.891168][T10136] loop3: detected capacity change from 0 to 1024 [ 766.184967][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 766.185023][ T27] audit: type=1326 audit(1784275531.670:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 766.507376][ T27] audit: type=1326 audit(1784275531.670:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 766.532691][T10136] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 766.573304][ T27] audit: type=1326 audit(1784275531.679:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 766.957493][ T27] audit: type=1326 audit(1784275531.679:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 767.020848][T10136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.033159][ T27] audit: type=1326 audit(1784275531.679:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 767.058225][ T27] audit: type=1326 audit(1784275531.679:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 767.082491][ T27] audit: type=1326 audit(1784275531.679:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 767.107495][ T27] audit: type=1326 audit(1784275531.679:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 767.132178][ T27] audit: type=1326 audit(1784275531.688:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 767.156408][ T27] audit: type=1326 audit(1784275531.688:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.0.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 767.545637][T10150] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 767.595100][T10150] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 767.607640][T10150] EXT4-fs (loop3): This should not happen!! Data will be lost [ 767.607640][T10150] [ 767.617491][T10150] EXT4-fs (loop3): Total free blocks count 0 [ 767.623635][T10150] EXT4-fs (loop3): Free/Dirty block details [ 767.629759][T10150] EXT4-fs (loop3): free_blocks=20480 [ 767.635205][T10150] EXT4-fs (loop3): dirty_blocks=80 [ 767.640498][T10150] EXT4-fs (loop3): Block reservation details [ 767.646631][T10150] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 767.959605][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 773.513405][T10177] loop0: detected capacity change from 0 to 512 [ 773.614560][T10177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.195101][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 776.516785][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.716406][T10214] loop0: detected capacity change from 0 to 256 [ 779.753303][T10214] FAT-fs (loop0): Directory bread(block 64) failed [ 779.760065][T10214] FAT-fs (loop0): Directory bread(block 65) failed [ 779.766811][T10214] FAT-fs (loop0): Directory bread(block 66) failed [ 779.773562][T10214] FAT-fs (loop0): Directory bread(block 67) failed [ 779.780304][T10214] FAT-fs (loop0): Directory bread(block 68) failed [ 779.786931][T10214] FAT-fs (loop0): Directory bread(block 69) failed [ 779.793652][T10214] FAT-fs (loop0): Directory bread(block 70) failed [ 779.800248][T10214] FAT-fs (loop0): Directory bread(block 71) failed [ 779.807008][T10214] FAT-fs (loop0): Directory bread(block 72) failed [ 779.813680][T10214] FAT-fs (loop0): Directory bread(block 73) failed [ 784.279317][T10232] xt_TPROXY: Can be used only with -p tcp or -p udp [ 785.092459][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 785.107395][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 785.691473][T10246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.911'. [ 786.297971][T10252] loop3: detected capacity change from 0 to 512 [ 786.343424][T10252] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 786.915251][T10260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.916'. [ 787.389714][T10252] EXT4-fs (loop3): 1 truncate cleaned up [ 787.448576][T10252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.201486][T10274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.920'. [ 790.243612][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.292558][ T5786] IPVS: starting estimator thread 0... [ 791.393410][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 791.593984][T10283] IPVS: using max 18 ests per chain, 43200 per kthread [ 798.691153][T10320] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 799.089059][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.926'. [ 799.691858][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 800.639733][ T5794] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 800.652708][T10335] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 803.006805][T10352] infiniband s: set active [ 803.013704][T10352] infiniband s: set active [ 803.168486][T10352] bridge1: left promiscuous mode [ 803.910713][T10354] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 805.987628][T10367] futex_wake_op: syz.2.940 tries to shift op by 144; fix this program [ 808.690316][ T5794] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 809.432201][T10378] netlink: 'syz.3.946': attribute type 2 has an invalid length. [ 809.877183][T10382] loop0: detected capacity change from 0 to 1024 [ 809.905764][T10382] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 809.976701][T10382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.407603][T10387] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 811.176233][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.280145][T10394] IPVS: Unknown mcast interface: vcan0 [ 812.220948][ T5794] Bluetooth: hci2: unexpected event for opcode 0x203c [ 814.233051][T10406] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 818.150878][ T5794] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 818.342367][ T6410] IPVS: ip_vs_send_async error -101 [ 820.163312][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.960'. [ 825.533246][T10478] xt_CONNSECMARK: invalid mode: 66 [ 830.741685][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.973'. [ 832.765650][ T5794] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 833.683257][T10509] futex_wake_op: syz.0.977 tries to shift op by 144; fix this program [ 838.244918][T10537] tipc: Started in network mode [ 838.263403][T10537] tipc: Node identity 080211000001, cluster identity 4711 [ 838.286273][T10537] tipc: Enabled bearer , priority 0 [ 838.297237][T10524] can: request_module (can-proto-3) failed. [ 839.489156][ T5786] tipc: Node number set to 134418688 [ 839.834810][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 840.614726][T10554] openvswitch: netlink: EtherType 0 is less than min 600 [ 842.678058][T10579] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 842.863227][T10584] tipc: Enabling of bearer rejected, failed to enable media [ 845.359655][T10604] netlink: 56 bytes leftover after parsing attributes in process `syz.3.998'. [ 847.314261][ T5794] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 850.501829][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 850.520373][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 852.270162][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 852.270181][ T27] audit: type=1326 audit(1784275612.502:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 852.361945][ T27] audit: type=1326 audit(1784275612.502:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 852.427726][ T27] audit: type=1326 audit(1784275612.502:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 852.489893][ T27] audit: type=1326 audit(1784275612.502:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 852.551489][ T27] audit: type=1326 audit(1784275612.502:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 852.615892][ T27] audit: type=1326 audit(1784275612.502:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 852.747897][ T27] audit: type=1326 audit(1784275612.502:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 852.841624][ T27] audit: type=1326 audit(1784275612.502:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 852.937710][ T27] audit: type=1326 audit(1784275612.502:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 853.139794][ T27] audit: type=1326 audit(1784275612.502:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.1007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8417b9de99 code=0x7ffc0000 [ 853.419331][T10674] block nbd0: NBD_DISCONNECT [ 856.178203][T10698] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 858.871672][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 858.880787][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 858.890139][T10723] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1027'. [ 868.292268][T10780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1040'. [ 868.301514][T10780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1040'. [ 868.310634][T10780] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1040'. [ 869.350909][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 871.550206][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 871.559239][T10792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1042'. [ 879.295838][T10841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'. [ 879.305004][T10841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'. [ 879.314071][T10841] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1052'. [ 879.985035][ T5846] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 880.201199][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 880.214390][ T5846] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 880.242711][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.277295][ T5846] usb 1-1: config 0 descriptor?? [ 880.344624][ T5846] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 880.368941][ T5846] gm12u320: probe of 1-1:0.0 failed with error -5 [ 880.385858][ T5846] usb-storage 1-1:0.0: USB Mass Storage device detected [ 880.417479][ T5846] usb-storage 1-1:0.0: device ignored [ 880.921124][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 880.921143][ T27] audit: type=1326 audit(1784275639.330:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 881.193534][T10855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1055'. [ 881.202873][T10855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1055'. [ 881.249452][ T27] audit: type=1326 audit(1784275639.330:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 881.531828][ T27] audit: type=1326 audit(1784275639.330:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 881.573125][ T27] audit: type=1326 audit(1784275639.330:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 881.907017][ T27] audit: type=1326 audit(1784275639.330:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 881.948706][ T27] audit: type=1326 audit(1784275639.330:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 881.979030][ T27] audit: type=1326 audit(1784275639.330:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 882.014397][ T27] audit: type=1326 audit(1784275639.339:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 882.065310][ T27] audit: type=1326 audit(1784275639.358:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 882.208692][ T27] audit: type=1326 audit(1784275639.358:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.0.1049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604c79de99 code=0x7ffc0000 [ 883.597869][ T8] usb 1-1: USB disconnect, device number 3 [ 883.608017][ T5794] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 885.235108][T10886] ip6erspan2: entered allmulticast mode [ 887.467916][T10892] atomic_op ffff88807bf0e198 conn xmit_atomic 0000000000000000 [ 892.963870][T10967] EXT4-fs: Conflicting test_dummy_encryption options [ 892.975632][T10967] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 892.983003][T10967] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 893.014906][T10967] hsr0: entered promiscuous mode [ 893.043674][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 900.266007][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 902.796020][T10281] Process accounting resumed [ 902.836994][T11053] Process accounting resumed [ 903.065277][T11062] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1086'. [ 903.416790][ T5794] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 903.697052][T11064] xt_CT: No such helper "snmp_trap" [ 906.210544][T11086] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 906.230095][T11086] cramfs: wrong magic [ 906.549952][T11077] (null): rxe_set_mtu: Set mtu to 1024 [ 907.361726][T11091] syz_tun: entered allmulticast mode [ 907.518727][T11077] infiniband syz1: set active [ 907.523476][T11077] infiniband syz1: added bond0 [ 907.583470][T11077] RDS/IB: syz1: added [ 907.588171][T11077] smc: adding ib device syz1 with port count 1 [ 907.594368][T11077] smc: ib device syz1 port 1 has pnetid [ 910.155438][T11119] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 911.938306][T11128] loop0: detected capacity change from 0 to 8 [ 912.299143][T11128] SQUASHFS error: lzo decompression failed, data probably corrupt [ 912.307826][T11128] SQUASHFS error: Failed to read block 0x91: -5 [ 912.314309][T11128] SQUASHFS error: Unable to read metadata cache entry [8f] [ 912.321674][T11128] SQUASHFS error: Unable to read inode 0x11f [ 912.342117][ T5794] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 914.718744][T11151] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1093'. [ 914.739755][T11151] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1093'. [ 915.743277][T11154] EXT4-fs: Conflicting test_dummy_encryption options [ 917.360215][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 917.366573][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 917.374713][ T6326] ------------[ cut here ]------------ [ 917.381009][ T6326] WARNING: CPU: 1 PID: 6326 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 917.390625][ T6326] Modules linked in: [ 917.394955][ T6326] CPU: 1 PID: 6326 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 917.402733][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 917.412931][ T6326] Workqueue: iou_exit io_ring_exit_work [ 917.418590][ T6326] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 917.424458][ T6326] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 917.444190][ T6326] RSP: 0018:ffffc9000bcb7a40 EFLAGS: 00010293 [ 917.450398][ T6326] RAX: ffffffff8a833c89 RBX: ffff888053a76000 RCX: ffff8880289b1e00 [ 917.458513][ T6326] RDX: 0000000000000000 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 917.466587][ T6326] RBP: ffffc9000bcb7bb0 R08: ffffc9000bcb79c7 R09: 1ffff92001796f38 [ 917.474612][ T6326] R10: dffffc0000000000 R11: fffff52001796f39 R12: dffffc0000000000 [ 917.483084][ T6326] R13: 000000010000de6e R14: 000000010000de77 R15: ffff888053a76510 [ 917.491544][ T6326] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 917.501015][ T6326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 917.507640][ T6326] CR2: 00007fdf70252945 CR3: 000000001968d000 CR4: 00000000003506e0 [ 917.516086][ T6326] Call Trace: [ 917.519786][ T6326] [ 917.522795][ T6326] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 917.528693][ T6326] ? _raw_spin_unlock_irq+0x23/0x50 [ 917.534327][ T6326] ? process_scheduled_works+0x975/0x1600 [ 917.540104][ T6326] ? process_scheduled_works+0x975/0x1600 [ 917.545925][ T6326] process_scheduled_works+0xa60/0x1600 [ 917.551583][ T6326] ? worker_attach_to_pool+0x370/0x370 [ 917.557263][ T6326] ? assign_work+0x3cc/0x5d0 [ 917.561924][ T6326] worker_thread+0xa5e/0xfe0 [ 917.566714][ T6326] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 917.572685][ T6326] ? _raw_spin_unlock+0x40/0x40 [ 917.577845][ T6326] ? __kthread_parkme+0x71/0x1c0 [ 917.582878][ T6326] kthread+0x2fa/0x390 [ 917.587156][ T6326] ? pr_cont_work+0x550/0x550 [ 917.591889][ T6326] ? kthread_blkcg+0xd0/0xd0 [ 917.596617][ T6326] ret_from_fork+0x48/0x80 [ 917.601090][ T6326] ? kthread_blkcg+0xd0/0xd0 [ 917.605817][ T6326] ret_from_fork_asm+0x11/0x20 [ 917.610672][ T6326] [ 917.613736][ T6326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 917.621043][ T6326] CPU: 1 PID: 6326 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 917.622644][T11154] hsr0: entered promiscuous mode [ 917.633624][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 917.643683][ T6326] Workqueue: iou_exit io_ring_exit_work [ 917.649247][ T6326] Call Trace: [ 917.652540][ T6326] [ 917.655483][ T6326] dump_stack_lvl+0x18c/0x250 [ 917.660181][ T6326] ? show_regs_print_info+0x20/0x20 [ 917.665420][ T6326] ? load_image+0x420/0x420 [ 917.669974][ T6326] panic+0x2ca/0x720 [ 917.673911][ T6326] ? bpf_jit_dump+0xd0/0xd0 [ 917.678451][ T6326] ? ret_from_fork_asm+0x11/0x20 [ 917.683412][ T6326] __warn+0x2e0/0x470 [ 917.687420][ T6326] ? io_ring_exit_work+0x3b9/0x830 [ 917.692559][ T6326] ? io_ring_exit_work+0x3b9/0x830 [ 917.697693][ T6326] report_bug+0x2be/0x4f0 [ 917.702043][ T6326] ? io_ring_exit_work+0x3b9/0x830 [ 917.707200][ T6326] ? io_ring_exit_work+0x3b9/0x830 [ 917.712350][ T6326] ? io_ring_exit_work+0x3bb/0x830 [ 917.717481][ T6326] handle_bug+0xcf/0x120 [ 917.721743][ T6326] exc_invalid_op+0x1a/0x50 [ 917.726614][ T6326] asm_exc_invalid_op+0x1a/0x20 [ 917.731486][ T6326] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 917.737247][ T6326] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 917.756868][ T6326] RSP: 0018:ffffc9000bcb7a40 EFLAGS: 00010293 [ 917.762966][ T6326] RAX: ffffffff8a833c89 RBX: ffff888053a76000 RCX: ffff8880289b1e00 [ 917.770979][ T6326] RDX: 0000000000000000 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 917.779057][ T6326] RBP: ffffc9000bcb7bb0 R08: ffffc9000bcb79c7 R09: 1ffff92001796f38 [ 917.787046][ T6326] R10: dffffc0000000000 R11: fffff52001796f39 R12: dffffc0000000000 [ 917.795037][ T6326] R13: 000000010000de6e R14: 000000010000de77 R15: ffff888053a76510 [ 917.803033][ T6326] ? io_ring_exit_work+0x3b9/0x830 [ 917.808179][ T6326] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 917.814029][ T6326] ? _raw_spin_unlock_irq+0x23/0x50 [ 917.819283][ T6326] ? process_scheduled_works+0x975/0x1600 [ 917.825116][ T6326] ? process_scheduled_works+0x975/0x1600 [ 917.830869][ T6326] process_scheduled_works+0xa60/0x1600 [ 917.836483][ T6326] ? worker_attach_to_pool+0x370/0x370 [ 917.841974][ T6326] ? assign_work+0x3cc/0x5d0 [ 917.846591][ T6326] worker_thread+0xa5e/0xfe0 [ 917.851208][ T6326] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 917.857129][ T6326] ? _raw_spin_unlock+0x40/0x40 [ 917.862012][ T6326] ? __kthread_parkme+0x71/0x1c0 [ 917.867002][ T6326] kthread+0x2fa/0x390 [ 917.871094][ T6326] ? pr_cont_work+0x550/0x550 [ 917.875812][ T6326] ? kthread_blkcg+0xd0/0xd0 [ 917.880423][ T6326] ret_from_fork+0x48/0x80 [ 917.884883][ T6326] ? kthread_blkcg+0xd0/0xd0 [ 917.889509][ T6326] ret_from_fork_asm+0x11/0x20 [ 917.894309][ T6326] [ 917.897974][ T6326] Kernel Offset: disabled [ 917.902399][ T6326] Rebooting in 86400 seconds..